CVE-2016-4171
flash-plugin: multiple code execution issues fixed in APSB16-18
Kaynağa göre önem derecesi
Trivy'nin kendi etiketi CRITICAL. Kritik diyenler: NVD, Red Hat. Daha düşük diyenler: Ubuntu (orta).
Açıklama
Unspecified vulnerability in Adobe Flash Player 21.0.0.242 and earlier allows remote attackers to execute arbitrary code via unknown vectors, as exploited in the wild in June 2016.
Etkilenen paketler ve düzeltilmiş sürümler
| Kaynak | Paket | Düzeltildiği sürüm |
|---|---|---|
| ubuntu 12.04 | adobe-flashplugin, flashplugin-nonfree | 1:20160616.1-0ubuntu0.12.04.1 ve 1 tane daha |
| ubuntu 14.04 | adobe-flashplugin, flashplugin-nonfree | 1:20160616.1-0ubuntu0.14.04.1 ve 1 tane daha |
| ubuntu 15.10 | adobe-flashplugin, flashplugin-nonfree | 1:20160616.1-0ubuntu0.15.10.1 ve 1 tane daha |
| ubuntu 16.04 | adobe-flashplugin, flashplugin-nonfree | 1:20160616.1-0ubuntu0.16.04.1 ve 1 tane daha |
| ubuntu 16.04-ESM | flashplugin-nonfree | 11.2.202.626ubuntu0.16.04.1 |
5 kaynaktaki 9 kaydın hepsini göster
| Kaynak | Paket | Düzeltildiği sürüm |
|---|---|---|
| ubuntu 12.04 | adobe-flashplugin | 1:20160616.1-0ubuntu0.12.04.1 |
| ubuntu 12.04 | flashplugin-nonfree | 11.2.202.626ubuntu0.12.04.1 |
| ubuntu 14.04 | adobe-flashplugin | 1:20160616.1-0ubuntu0.14.04.1 |
| ubuntu 14.04 | flashplugin-nonfree | 11.2.202.626ubuntu0.14.04.1 |
| ubuntu 15.10 | adobe-flashplugin | 1:20160616.1-0ubuntu0.15.10.1 |
| ubuntu 15.10 | flashplugin-nonfree | 11.2.202.626ubuntu0.15.10.1 |
| ubuntu 16.04 | adobe-flashplugin | 1:20160616.1-0ubuntu0.16.04.1 |
| ubuntu 16.04 | flashplugin-nonfree | 11.2.202.626ubuntu0.16.04.1 |
| ubuntu 16.04-ESM | flashplugin-nonfree | 11.2.202.626ubuntu0.16.04.1 |
Referanslar
- http://lists.opensuse.org/opensuse-security-announce/2016-06/msg00031.html
- http://lists.opensuse.org/opensuse-security-announce/2016-06/msg00035.html
- http://lists.opensuse.org/opensuse-security-announce/2016-06/msg00038.html
- http://www.securityfocus.com/bid/91184
- http://www.securitytracker.com/id/1036094
- https://access.redhat.com/errata/RHSA-2016:1238
- https://access.redhat.com/security/cve/CVE-2016-4171
- https://github.com/cisagov/vulnrichment/issues/196
16 referansın hepsi
- https://helpx.adobe.com/security/products/flash-player/apsa16-03.html
- https://helpx.adobe.com/security/products/flash-player/apsb16-18.html
- https://nvd.nist.gov/vuln/detail/CVE-2016-4171
- https://security.gentoo.org/glsa/201606-08
- https://www.cisa.gov/known-exploited-vulnerabilities-catalog
- https://www.cisa.gov/known-exploited-vulnerabilities-catalog?field_cve=CVE-2016-4171
- https://www.cve.org/CVERecord?id=CVE-2016-4171
- https://www.kb.cert.org/vuls/id/748992