CVE-2016-7796 Denial of service in n/a
Local attackers can cause a system hang by sending zero-length messages to the systemd notify socket, disabling the notification handler.
- Exploited in the wild
- Not known
- Login needed
- Any signed-in user
- Attackable
- Local or same network only
- Victim action needed
- Not needed
- Fix
- Available
What is CVE-2016-7796?
CVE-2016-7796 is a medium-severity denial of service vulnerability in Novell Suse Linux Enterprise Desktop, published on 13 Oct 2016. It can only be exploited from the same machine or local network, with no action from the victim.
Official description
The manager_dispatch_notify_fd function in systemd allows local users to cause a denial of service (system hang) via a zero-length message received over a notify socket, which causes an error to be returned and the notification handler to be disabled.
Weakness: CWE-20
Which versions are affected by CVE-2016-7796?
It affects 9 products.
Linux distribution packages (40)
libgudev1 Red Hat:enterprise_linux:7::client | All versions | 0:219-19.el7 |
libgudev1-devel Red Hat:enterprise_linux:7::client | All versions | 0:219-19.el7 |
systemd Red Hat:enterprise_linux:7::client | All versions | 0:219-19.el7 |
systemd-debuginfo Red Hat:enterprise_linux:7::client | All versions | 0:219-19.el7 |
systemd-devel Red Hat:enterprise_linux:7::client | All versions | 0:219-19.el7 |
systemd-journal-gateway Red Hat:enterprise_linux:7::client | All versions | 0:219-19.el7 |
systemd-libs Red Hat:enterprise_linux:7::client | All versions | 0:219-19.el7 |
systemd-networkd Red Hat:enterprise_linux:7::client | All versions | 0:219-19.el7 |
systemd-python Red Hat:enterprise_linux:7::client | All versions | 0:219-19.el7 |
systemd-resolved Red Hat:enterprise_linux:7::client | All versions | 0:219-19.el7 |
systemd-sysv Red Hat:enterprise_linux:7::client | All versions | 0:219-19.el7 |
libgudev1 Red Hat:enterprise_linux:7::computenode | All versions | 0:219-19.el7 |
libgudev1-devel Red Hat:enterprise_linux:7::computenode | All versions | 0:219-19.el7 |
systemd Red Hat:enterprise_linux:7::computenode | All versions | 0:219-19.el7 |
systemd-debuginfo Red Hat:enterprise_linux:7::computenode | All versions | 0:219-19.el7 |
systemd-devel Red Hat:enterprise_linux:7::computenode | All versions | 0:219-19.el7 |
systemd-journal-gateway Red Hat:enterprise_linux:7::computenode | All versions | 0:219-19.el7 |
systemd-libs Red Hat:enterprise_linux:7::computenode | All versions | 0:219-19.el7 |
systemd-networkd Red Hat:enterprise_linux:7::computenode | All versions | 0:219-19.el7 |
systemd-python Red Hat:enterprise_linux:7::computenode | All versions | 0:219-19.el7 |
systemd-resolved Red Hat:enterprise_linux:7::computenode | All versions | 0:219-19.el7 |
systemd-sysv Red Hat:enterprise_linux:7::computenode | All versions | 0:219-19.el7 |
libgudev1 Red Hat:enterprise_linux:7::server | All versions | 0:219-19.el7 |
libgudev1-devel Red Hat:enterprise_linux:7::server | All versions | 0:219-19.el7 |
systemd Red Hat:enterprise_linux:7::server | All versions | 0:219-19.el7 |
systemd-debuginfo Red Hat:enterprise_linux:7::server | All versions | 0:219-19.el7 |
systemd-devel Red Hat:enterprise_linux:7::server | All versions | 0:219-19.el7 |
systemd-journal-gateway Red Hat:enterprise_linux:7::server | All versions | 0:219-19.el7 |
systemd-libs Red Hat:enterprise_linux:7::server | All versions | 0:219-19.el7 |
systemd-networkd Red Hat:enterprise_linux:7::server | All versions | 0:219-19.el7 |
systemd-python Red Hat:enterprise_linux:7::server | All versions | 0:219-19.el7 |
systemd-resolved Red Hat:enterprise_linux:7::server | All versions | 0:219-19.el7 |
systemd-sysv Red Hat:enterprise_linux:7::server | All versions | 0:219-19.el7 |
libgudev1 Red Hat:enterprise_linux:7::workstation | All versions | 0:219-19.el7 |
libgudev1-devel Red Hat:enterprise_linux:7::workstation | All versions | 0:219-19.el7 |
systemd Red Hat:enterprise_linux:7::workstation | All versions | 0:219-19.el7 |
systemd-debuginfo Red Hat:enterprise_linux:7::workstation | All versions | 0:219-19.el7 |
systemd-devel Red Hat:enterprise_linux:7::workstation | All versions | 0:219-19.el7 |
systemd-journal-gateway Red Hat:enterprise_linux:7::workstation | All versions | 0:219-19.el7 |
systemd-libs Red Hat:enterprise_linux:7::workstation | All versions | 0:219-19.el7 |
Products include Novell Suse Linux Enterprise Desktop, Novell Suse Linux Enterprise Server, Novell Suse Linux Enterprise Server for Sap, Novell Suse Linux Enterprise Software Development Kit, Redhat Enterprise Linux Desktop, Redhat Enterprise Linux Hpc Node and 3 more.
How do I fix CVE-2016-7796?
Apply the vendor's patch.
Upgrade, then put limits on request size, rate and nesting depth so one client cannot exhaust the service. More about Denial of service.
Is CVE-2016-7796 being exploited?
There is no known exploitation of CVE-2016-7796 in the wild and no public exploit code.
Other vulnerabilities in Novell Suse Linux Enterprise Desktop
Sources
Also known as DEBIAN-CVE-2016-7796, DLA-659-1, GHSA-cm6j-6m6x-hmjq, RHBA-2015:2092, RHSA-2017:0003, SUSE-SU-2016:2475-1 and 2 more.