CVE-2016-5011 Denial of service in n/a
A physically proximate attacker can cause a denial of service via memory consumption by crafting a malicious MSDOS partition table in the libblkid library.
- Exploited in the wild
- Not known
- Login needed
- Not needed
- Attackable
- Local or same network only
- Victim action needed
- Not needed
- Fix
- Available
What is CVE-2016-5011?
CVE-2016-5011 is a medium-severity denial of service vulnerability in Redhat Enterprise Linux Desktop, published on 11 Apr 2017. It can only be exploited from the same machine or local network, with no action from the victim.
Official description
The parse_dos_extended function in partitions/dos.c in the libblkid library in util-linux allows physically proximate attackers to cause a denial of service (memory consumption) via a crafted MSDOS partition table with an extended partition boot record at zero offset.
Which versions are affected by CVE-2016-5011?
It affects 9 products.
Linux distribution packages (40)
libblkid Red Hat:enterprise_linux:7::client | All versions | 0:2.23.2-33.el7 |
libblkid-devel Red Hat:enterprise_linux:7::client | All versions | 0:2.23.2-33.el7 |
libmount Red Hat:enterprise_linux:7::client | All versions | 0:2.23.2-33.el7 |
libmount-devel Red Hat:enterprise_linux:7::client | All versions | 0:2.23.2-33.el7 |
libuuid Red Hat:enterprise_linux:7::client | All versions | 0:2.23.2-33.el7 |
libuuid-devel Red Hat:enterprise_linux:7::client | All versions | 0:2.23.2-33.el7 |
util-linux Red Hat:enterprise_linux:7::client | All versions | 0:2.23.2-33.el7 |
util-linux-debuginfo Red Hat:enterprise_linux:7::client | All versions | 0:2.23.2-33.el7 |
uuidd Red Hat:enterprise_linux:7::client | All versions | 0:2.23.2-33.el7 |
libblkid Red Hat:enterprise_linux:7::computenode | All versions | 0:2.23.2-33.el7 |
libblkid-devel Red Hat:enterprise_linux:7::computenode | All versions | 0:2.23.2-33.el7 |
libmount Red Hat:enterprise_linux:7::computenode | All versions | 0:2.23.2-33.el7 |
libmount-devel Red Hat:enterprise_linux:7::computenode | All versions | 0:2.23.2-33.el7 |
libuuid Red Hat:enterprise_linux:7::computenode | All versions | 0:2.23.2-33.el7 |
libuuid-devel Red Hat:enterprise_linux:7::computenode | All versions | 0:2.23.2-33.el7 |
util-linux Red Hat:enterprise_linux:7::computenode | All versions | 0:2.23.2-33.el7 |
util-linux-debuginfo Red Hat:enterprise_linux:7::computenode | All versions | 0:2.23.2-33.el7 |
uuidd Red Hat:enterprise_linux:7::computenode | All versions | 0:2.23.2-33.el7 |
libblkid Red Hat:enterprise_linux:7::server | All versions | 0:2.23.2-33.el7 |
libblkid-devel Red Hat:enterprise_linux:7::server | All versions | 0:2.23.2-33.el7 |
libmount Red Hat:enterprise_linux:7::server | All versions | 0:2.23.2-33.el7 |
libmount-devel Red Hat:enterprise_linux:7::server | All versions | 0:2.23.2-33.el7 |
libuuid Red Hat:enterprise_linux:7::server | All versions | 0:2.23.2-33.el7 |
libuuid-devel Red Hat:enterprise_linux:7::server | All versions | 0:2.23.2-33.el7 |
util-linux Red Hat:enterprise_linux:7::server | All versions | 0:2.23.2-33.el7 |
util-linux-debuginfo Red Hat:enterprise_linux:7::server | All versions | 0:2.23.2-33.el7 |
uuidd Red Hat:enterprise_linux:7::server | All versions | 0:2.23.2-33.el7 |
libblkid Red Hat:enterprise_linux:7::workstation | All versions | 0:2.23.2-33.el7 |
libblkid-devel Red Hat:enterprise_linux:7::workstation | All versions | 0:2.23.2-33.el7 |
libmount Red Hat:enterprise_linux:7::workstation | All versions | 0:2.23.2-33.el7 |
libmount-devel Red Hat:enterprise_linux:7::workstation | All versions | 0:2.23.2-33.el7 |
libuuid Red Hat:enterprise_linux:7::workstation | All versions | 0:2.23.2-33.el7 |
libuuid-devel Red Hat:enterprise_linux:7::workstation | All versions | 0:2.23.2-33.el7 |
util-linux Red Hat:enterprise_linux:7::workstation | All versions | 0:2.23.2-33.el7 |
util-linux-debuginfo Red Hat:enterprise_linux:7::workstation | All versions | 0:2.23.2-33.el7 |
uuidd Red Hat:enterprise_linux:7::workstation | All versions | 0:2.23.2-33.el7 |
python-libmount SUSE:Linux Enterprise Desktop 12 SP1 | All versions | 2.25-37.1 |
util-linux SUSE:Linux Enterprise Desktop 12 SP1 | All versions | 2.25-37.1 |
util-linux-systemd SUSE:Linux Enterprise Desktop 12 SP1 | All versions | 2.25-37.1 |
python-libmount SUSE:Linux Enterprise Desktop 12 SP2 | All versions | 2.28-42.4 |
Products include Ibm Power Hardware Management Console, Ibm Powerkvm, Kernel Util-Linux, Redhat Enterprise Linux Desktop, Redhat Enterprise Linux Eus, Redhat Enterprise Linux Server and 3 more.
How do I fix CVE-2016-5011?
Apply the vendor's patch.
Upgrade, then put limits on request size, rate and nesting depth so one client cannot exhaust the service. More about Denial of service.
Is CVE-2016-5011 being exploited?
There is no known exploitation of CVE-2016-5011 in the wild and no public exploit code.
Other vulnerabilities in Redhat Enterprise Linux Desktop
Sources
Also known as CLSA-2023-1673905718, DEBIAN-CVE-2016-5011, GHSA-hmj7-c9x8-f363, MGASA-2016-0256, RHSA-2016:2605, SUSE-SU-2016:2764-1 and 3 more.