CVE-2016-7796
The manager_dispatch_notify_fd function in systemd allows local users to cause a denial of...
The manager_dispatch_notify_fd function in systemd allows local users to cause a denial of service (system hang) via a zero-length message received over a notify socket, which causes an error to be returned and the notification handler to be disabled.
Attack profile
How easy it is to exploit
- Attack vector
- Local
- Complexity
- Low
- Privileges needed
- Low
- User interaction
- None
What an attacker can affect
- Confidentiality
- None
- Integrity
- None
- Availability
- High
Exploit likelihood
What each source reports
NVD Score used
5.5
The manager_dispatch_notify_fd function in systemd allows local users to cause a denial of service (system hang) via a zero-length message received over a notify socket, which causes an error to be returned and the notification handler to be disabled.
- Record
CVE-2016-7796- CVSS 3.0
- 5.5 Medium
CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H - CVSS 2.0
- 4.9 Medium
AV:L/AC:L/Au:N/C:N/I:N/A:C - Weakness
- CWE-20
- Updated
- 2026-11-02
CVE List No score
The manager_dispatch_notify_fd function in systemd allows local users to cause a denial of service (system hang) via a zero-length message received over a notify socket, which causes an error to be returned and the notification handler to be disabled.
- Record
CVE-2016-7796- Updated
- 2026-11-02
EUVDEUVD-2016-8646 No score
The manager_dispatch_notify_fd function in systemd allows local users to cause a denial of service (system hang) via a zero-length message received over a notify socket, which causes an error to be returned and the notification handler to be disabled.
- Record
EUVD-2016-8646- Updated
- 2026-11-03
GitHub AdvisoriesGHSA-cm6j-6m6x-hmjq
5.5
The manager_dispatch_notify_fd function in systemd allows local users to cause a denial of...
The manager_dispatch_notify_fd function in systemd allows local users to cause a denial of service (system hang) via a zero-length message received over a notify socket, which causes an error to be returned and the notification handler to be disabled.
- Record
GHSA-cm6j-6m6x-hmjq- CVSS 3.0
- 5.5 Medium
CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H - Weakness
- CWE-20
- Updated
- 2026-11-02
OSVBELL-CVE-2016-7796
5.5
CVE-2016-7796 does not affect BellSoft software
- Record
BELL-CVE-2016-7796- CVSS 3.0
- 5.5 Medium
CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H - Updated
- 2026-11-02
OSV
5.5
The manager_dispatch_notify_fd function in systemd allows local users to cause a denial of service (system hang) via a zero-length message received over a notify socket, which causes an error to be returned and the notification handler to be disabled.
- Record
CVE-2016-7796- CVSS 3.0
- 5.5 Medium
CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H - Updated
- 2026-11-02
Show 8 moreShow less
OSVDEBIAN-CVE-2016-7796
5.5
The manager_dispatch_notify_fd function in systemd allows local users to cause a denial of service (system hang) via a zero-length message received over a notify socket, which causes an error to be returned and the notification handler to be disabled.
- Record
DEBIAN-CVE-2016-7796- CVSS 3.0
- 5.5 Medium
CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H - Updated
- 2026-11-02
OSVRHBA-2015:2092
6.8
Red Hat Bug Fix Advisory: systemd bug fix and enhancement update
- Record
RHBA-2015:2092- CVSS 3.0
- 6.8 Medium
CVSS:3.0/AV:L/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:H - Updated
- 2026-11-02
OSVRHSA-2017:0003
6.8
Red Hat Security Advisory: systemd security update
- Record
RHSA-2017:0003- CVSS 3.0
- 6.8 Medium
CVSS:3.0/AV:L/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:H - Updated
- 2026-11-02
OSVUBUNTU-CVE-2016-7796
5.5
The manager_dispatch_notify_fd function in systemd allows local users to cause a denial of service (system hang) via a zero-length message received over a notify socket, which causes an error to be returned and the notification handler to be disabled.
- Record
UBUNTU-CVE-2016-7796- CVSS 3.0
- 5.5 Medium
CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H - Updated
- 2026-11-02
OSVSUSE-SU-2016:2475-1 No score
Security update for systemd
This update for systemd fixes the following security issue:
- CVE-2016-7796: A zero-length message received over systemd's notification socket could make manager_dispatch_notify_fd() return an error and, as a side effect, disable the notification handler completely. As the notification socket is world-writable, this could have allowed a local user to perform a denial-of-service attack against systemd. (bsc#1001765)
Additionally, the following non-security fixes are included:
- Fix HMAC calculation when appending a data object to journal. (bsc#1000435)
- Never accept file descriptors from file systems with mandatory locking enabled. (bsc#954374)
- Do not warn about missing install info with 'preset'. (bsc#970293)
- Save /run/systemd/users/UID before starting [email protected]. (bsc#996269)
- Make sure that /var/lib/systemd/sysv-convert/database is always initialized. (bsc#982211)
- Remove daylight saving time handling and tzfile parser. (bsc#990074)
- Make sure directory watch is started before cryptsetup. (bsc#987173)
- Introduce sd_pid_notify() and sd_pid_notifyf() APIs. (bsc#987857)
- Set KillMode=mixed for our daemons that fork worker processes.
- Add nosuid and nodev options to tmp.mount.
- Don't start console-getty.service when /dev/console is missing. (bsc#982251)
- Correct segmentation fault in udev/path_id due to missing NULL check. (bsc#982210)
- Record
SUSE-SU-2016:2475-1- Updated
- 2026-11-02
OSVSUSE-SU-2016:2476-1 No score
Security update for systemd
This update for systemd fixes the following security issue:
- CVE-2016-7796: A zero-length message received over systemd's notification socket could make manager_dispatch_notify_fd() return an error and, as a side effect, disable the notification handler completely. As the notification socket is world-writable, this could have allowed a local user to perform a denial-of-service attack against systemd. (bsc#1001765)
Additionally, the following non-security fixes are included:
- Fix HMAC calculation when appending a data object to journal. (bsc#1000435)
- Never accept file descriptors from file systems with mandatory locking enabled. (bsc#954374)
- Do not warn about missing install info with 'preset'. (bsc#970293)
- Save /run/systemd/users/UID before starting [email protected]. (bsc#996269)
- Make sure that /var/lib/systemd/sysv-convert/database is always initialized. (bsc#982211)
- Remove daylight saving time handling and tzfile parser. (bsc#990074)
- Make sure directory watch is started before cryptsetup. (bsc#987173)
- Introduce sd_pid_notify() and sd_pid_notifyf() APIs. (bsc#987857)
- Set KillMode=mixed for our daemons that fork worker processes.
- Add nosuid and nodev options to tmp.mount.
- Don't start console-getty.service when /dev/console is missing. (bsc#982251)
- Correct segmentation fault in udev/path_id due to missing NULL check. (bsc#982210)
- Record
SUSE-SU-2016:2476-1- Updated
- 2026-11-02
OSVSUSE-SU-2017:2699-1 No score
Security update for SLES 12 Docker image
The SUSE Linux Enterprise Server 12 container image has been updated to include security and stability fixes.
The following issues related to building of the container images have been fixed:
- Included krb5 package to avoid the inclusion of krb5-mini which gets selected as a dependency by the Build Service solver. (bsc#1056193)
- Do not install recommended packages when building container images. (bsc#975726)
A number of security issues that have been already fixed by updates released for SUSE Linux Enterprise Server 12 are now included in the base image. A package/CVE cross-reference is available below.
pam:
- CVE-2015-3238
libtasn1:
- CVE-2015-3622
- CVE-2016-4008
libidn:
- CVE-2015-2059
- CVE-2015-8948
- CVE-2016-6261
- CVE-2016-6262
- CVE-2016-6263
zlib:
- CVE-2016-9840
- CVE-2016-9841
- CVE-2016-9842
- CVE-2016-9843
curl:
- CVE-2016-5419
- CVE-2016-5420
- CVE-2016-5421
- CVE-2016-7141
- CVE-2016-7167
- CVE-2016-8615
- CVE-2016-8616
- CVE-2016-8617
- CVE-2016-8618
- CVE-2016-8619
- CVE-2016-8620
- CVE-2016-8621
- CVE-2016-8622
- CVE-2016-8623
- CVE-2016-8624
- CVE-2016-9586
- CVE-2017-1000100
- CVE-2017-1000101
- CVE-2017-7407
openssl:
- CVE-2016-2105
- CVE-2016-2106
- CVE-2016-2107
- CVE-2016-2108
- CVE-2016-2109
- CVE-2016-2177
- CVE-2016-2178
- CVE-2016-2179
- CVE-2016-2180
- CVE-2016-2181
- CVE-2016-2182
- CVE-2016-2183
- CVE-2016-6302
- CVE-2016-6303
- CVE-2016-6304
- CVE-2016-6306
libxml2:
- CVE-2014-0191
- CVE-2015-8806
- CVE-2016-1762
- CVE-2016-1833
- CVE-2016-1834
- CVE-2016-1835
- CVE-2016-1837
- CVE-2016-1838
- CVE-2016-1839
- CVE-2016-1840
- CVE-2016-2073
- CVE-2016-3627
- CVE-2016-3705
- CVE-2016-4447
- CVE-2016-4448
- CVE-2016-4449
- CVE-2016-4483
- CVE-2016-4658
- CVE-2016-9318
- CVE-2016-9597
- CVE-2017-9047
- CVE-2017-9048
- CVE-2017-9049
- CVE-2017-9050
util-linux:
- CVE-2015-5218
- CVE-2016-5011
- CVE-2017-2616
cracklib:
- CVE-2016-6318
systemd:
- CVE-2014-9770
- CVE-2015-8842
- CVE-2016-7796
pcre:
- CVE-2014-8964
- CVE-2015-2325
- CVE-2015-2327
- CVE-2015-2328
- CVE-2015-3210
- CVE-2015-3217
- CVE-2015-5073
- CVE-2015-8380
- CVE-2015-8381
- CVE-2015-8382
- CVE-2015-8383
- CVE-2015-8384
- CVE-2015-8385
- CVE-2015-8386
- CVE-2015-8387
- CVE-2015-8388
- CVE-2015-8389
- CVE-2015-8390
- CVE-2015-8391
- CVE-2015-8392
- CVE-2015-8393
- CVE-2015-8394
- CVE-2015-8395
- CVE-2016-1283
- CVE-2016-3191
appamor:
- CVE-2017-6507
bash:
- CVE-2014-6277
- CVE-2014-6278
- CVE-2016-0634
- CVE-2016-7543
cpio:
- CVE-2016-2037
glibc:
- CVE-2016-1234
- CVE-2016-3075
- CVE-2016-3706
- CVE-2016-4429
- CVE-2017-1000366
perl:
- CVE-2015-8853
- CVE-2016-1238
- CVE-2016-2381
- CVE-2016-6185
libssh2_org:
- CVE-2016-0787
expat:
- CVE-2012-6702
- CVE-2015-1283
- CVE-2016-0718
- CVE-2016-5300
- CVE-2016-9063
- CVE-2017-9233
ncurses:
- CVE-2017-10684
- CVE-2017-10685
- CVE-2017-11112
- CVE-2017-11113
libksba:
- CVE-2016-4574
- CVE-2016-4579
libgcrypt:
- CVE-2015-7511
- CVE-2016-6313
- CVE-2017-7526
dbus-1:
- CVE-2014-7824
- CVE-2015-0245
Finally, the following packages received non-security fixes:
- augeas
- bzip2
- ca-certificates-mozilla
- coreutils
- cryptsetup
- cyrus-sasl
- dirmngr
- e2fsprogs
- findutils
- gpg2
- insserv-compat
- kmod
- libcap
- libsolv
- libzypp
- openldap2
- p11-kit
- permissions
- procps
- rpm
- sed
- shadow
- zypper
- Record
SUSE-SU-2017:2699-1- Updated
- 2026-11-02
OSVSUSE-SU-2017:2700-1 No score
Security update for SLES 12-SP1 Docker image
The SUSE Linux Enterprise Server 12 SP1 container image has been updated to include security and stability fixes.
The following issues related to building of the container images have been fixed:
- Included krb5 package to avoid the inclusion of krb5-mini which gets selected as a dependency by the Build Service solver. (bsc#1056193)
- Do not install recommended packages when building container images. (bsc#975726)
A number of security issues that have been already fixed by updates released for SUSE Linux Enterprise Server 12 SP1 are now included in the base image. A package/CVE cross-reference is available below.
pam:
- CVE-2015-3238
libtasn1:
- CVE-2015-3622
- CVE-2016-4008
expat:
expat:
- CVE-2012-6702
- CVE-2015-1283
- CVE-2016-0718
- CVE-2016-5300
- CVE-2016-9063
- CVE-2017-9233
libidn:
- CVE-2015-2059
- CVE-2015-8948
- CVE-2016-6261
- CVE-2016-6262
- CVE-2016-6263
zlib:
- CVE-2016-9840
- CVE-2016-9841
- CVE-2016-9842
- CVE-2016-9843
curl:
- CVE-2016-5419
- CVE-2016-5420
- CVE-2016-5421
- CVE-2016-7141
- CVE-2016-7167
- CVE-2016-8615
- CVE-2016-8616
- CVE-2016-8617
- CVE-2016-8618
- CVE-2016-8619
- CVE-2016-8620
- CVE-2016-8621
- CVE-2016-8622
- CVE-2016-8623
- CVE-2016-8624
- CVE-2016-9586
- CVE-2017-1000100
- CVE-2017-1000101
- CVE-2017-7407
openssl:
- CVE-2016-2105
- CVE-2016-2106
- CVE-2016-2107
- CVE-2016-2108
- CVE-2016-2109
- CVE-2016-2177
- CVE-2016-2178
- CVE-2016-2179
- CVE-2016-2180
- CVE-2016-2181
- CVE-2016-2182
- CVE-2016-2183
- CVE-2016-6302
- CVE-2016-6303
- CVE-2016-6304
- CVE-2016-6306
- CVE-2016-7056
- CVE-2016-8610
- CVE-2017-3731
cracklib:
- CVE-2016-6318
pcre:
- CVE-2014-8964
- CVE-2015-2325
- CVE-2015-2327
- CVE-2015-2328
- CVE-2015-3210
- CVE-2015-3217
- CVE-2015-5073
- CVE-2015-8380
- CVE-2015-8381
- CVE-2015-8382
- CVE-2015-8383
- CVE-2015-8384
- CVE-2015-8385
- CVE-2015-8386
- CVE-2015-8387
- CVE-2015-8388
- CVE-2015-8389
- CVE-2015-8390
- CVE-2015-8391
- CVE-2015-8392
- CVE-2015-8393
- CVE-2015-8394
- CVE-2015-8395
- CVE-2016-1283
- CVE-2016-3191
appamor:
- CVE-2017-6507
bash:
- CVE-2014-6277
- CVE-2014-6278
- CVE-2016-0634
- CVE-2016-7543
cpio:
- CVE-2016-2037
glibc:
- CVE-2016-1234
- CVE-2016-3075
- CVE-2016-3706
- CVE-2016-4429
- CVE-2017-1000366
perl:
- CVE-2015-8853
- CVE-2016-1238
- CVE-2016-2381
- CVE-2016-6185
libssh2_org:
- CVE-2016-0787
util-linux:
- CVE-2016-5011
- CVE-2017-2616
ncurses:
- CVE-2017-10684
- CVE-2017-10685
- CVE-2017-11112
- CVE-2017-11113
libksba:
- CVE-2016-4574
- CVE-2016-4579
libxml2:
- CVE-2014-0191
- CVE-2015-8806
- CVE-2016-1762
- CVE-2016-1833
- CVE-2016-1834
- CVE-2016-1835
- CVE-2016-1837
- CVE-2016-1838
- CVE-2016-1839
- CVE-2016-1840
- CVE-2016-2073
- CVE-2016-3627
- CVE-2016-3705
- CVE-2016-4447
- CVE-2016-4448
- CVE-2016-4449
- CVE-2016-4483
- CVE-2016-4658
- CVE-2016-9318
- CVE-2016-9597
- CVE-2017-9047
- CVE-2017-9048
- CVE-2017-9049
- CVE-2017-9050
libgcrypt:
- CVE-2015-7511
- CVE-2016-6313
- CVE-2017-7526
update-alternatives:
- CVE-2015-0860
systemd:
- CVE-2014-9770
- CVE-2015-8842
- CVE-2016-7796
dbus-1:
- CVE-2014-7824
- CVE-2015-0245
Finally, the following packages received non-security fixes:
- augeas
- bzip2
- ca-certificates-mozilla
- coreutils
- cryptsetup
- cyrus-sasl
- dirmngr
- e2fsprogs
- findutils
- gpg2
- insserv-compat
- kmod
- libcap
- libsolv
- libzypp
- lua51
- lvm2
- netcfg
- p11-kit
- permissions
- procps
- rpm
- sed
- sg3_utils
- shadow
- zypper
- Record
SUSE-SU-2017:2700-1- Updated
- 2026-11-02
Affected products
- systemd project systemd
- novell suse linux enterprise desktop
- novell suse linux enterprise server
- novell suse linux enterprise server for sap
- novell suse linux enterprise software development kit
- redhat enterprise linux desktop
- redhat enterprise linux hpc node
- redhat enterprise linux server
- redhat enterprise linux workstation
Affected packages
| Package | Affected | Fixed |
|---|---|---|
systemdDebian:12 |
before 231-9 | 231-9 |
systemdDebian:13 |
before 231-9 | 231-9 |
systemdDebian:14 |
before 231-9 | 231-9 |
systemdDebian:7 |
before 44-11+deb7u5, plus listed versions 44-1144-11+deb7u144-11+deb7u244-11+deb7u344-11+deb7u4 |
44-11+deb7u5 |
libgudev1-develRed Hat:enterprise_linux:7::client |
before 0:219-19.el7 | 0:219-19.el7 |
systemd-debuginfoRed Hat:enterprise_linux:7::client |
before 0:219-19.el7 | 0:219-19.el7 |
systemd-develRed Hat:enterprise_linux:7::client |
before 0:219-19.el7 | 0:219-19.el7 |
systemd-journal-gatewayRed Hat:enterprise_linux:7::client |
before 0:219-19.el7 | 0:219-19.el7 |
systemd-networkdRed Hat:enterprise_linux:7::client |
before 0:219-19.el7 | 0:219-19.el7 |
systemd-resolvedRed Hat:enterprise_linux:7::client |
before 0:219-19.el7 | 0:219-19.el7 |
Show 63 moreShow less
| Package | Affected | Fixed |
|---|---|---|
libgudev1Red Hat:enterprise_linux:7::client |
before 0:219-19.el7 | 0:219-19.el7 |
systemdRed Hat:enterprise_linux:7::client |
before 0:219-19.el7 | 0:219-19.el7 |
systemd-libsRed Hat:enterprise_linux:7::client |
before 0:219-19.el7 | 0:219-19.el7 |
systemd-pythonRed Hat:enterprise_linux:7::client |
before 0:219-19.el7 | 0:219-19.el7 |
systemd-sysvRed Hat:enterprise_linux:7::client |
before 0:219-19.el7 | 0:219-19.el7 |
libgudev1-develRed Hat:enterprise_linux:7::computenode |
before 0:219-19.el7 | 0:219-19.el7 |
systemd-debuginfoRed Hat:enterprise_linux:7::computenode |
before 0:219-19.el7 | 0:219-19.el7 |
systemd-develRed Hat:enterprise_linux:7::computenode |
before 0:219-19.el7 | 0:219-19.el7 |
systemd-journal-gatewayRed Hat:enterprise_linux:7::computenode |
before 0:219-19.el7 | 0:219-19.el7 |
systemd-networkdRed Hat:enterprise_linux:7::computenode |
before 0:219-19.el7 | 0:219-19.el7 |
systemd-resolvedRed Hat:enterprise_linux:7::computenode |
before 0:219-19.el7 | 0:219-19.el7 |
libgudev1Red Hat:enterprise_linux:7::computenode |
before 0:219-19.el7 | 0:219-19.el7 |
systemdRed Hat:enterprise_linux:7::computenode |
before 0:219-19.el7 | 0:219-19.el7 |
systemd-libsRed Hat:enterprise_linux:7::computenode |
before 0:219-19.el7 | 0:219-19.el7 |
systemd-pythonRed Hat:enterprise_linux:7::computenode |
before 0:219-19.el7 | 0:219-19.el7 |
systemd-sysvRed Hat:enterprise_linux:7::computenode |
before 0:219-19.el7 | 0:219-19.el7 |
systemd-debuginfoRed Hat:enterprise_linux:7::server |
before 0:219-19.el7 | 0:219-19.el7 |
systemd-journal-gatewayRed Hat:enterprise_linux:7::server |
before 0:219-19.el7 | 0:219-19.el7 |
systemd-networkdRed Hat:enterprise_linux:7::server |
before 0:219-19.el7 | 0:219-19.el7 |
systemd-resolvedRed Hat:enterprise_linux:7::server |
before 0:219-19.el7 | 0:219-19.el7 |
libgudev1Red Hat:enterprise_linux:7::server |
before 0:219-19.el7 | 0:219-19.el7 |
libgudev1-develRed Hat:enterprise_linux:7::server |
before 0:219-19.el7 | 0:219-19.el7 |
systemdRed Hat:enterprise_linux:7::server |
before 0:219-19.el7 | 0:219-19.el7 |
systemd-develRed Hat:enterprise_linux:7::server |
before 0:219-19.el7 | 0:219-19.el7 |
systemd-libsRed Hat:enterprise_linux:7::server |
before 0:219-19.el7 | 0:219-19.el7 |
systemd-pythonRed Hat:enterprise_linux:7::server |
before 0:219-19.el7 | 0:219-19.el7 |
systemd-sysvRed Hat:enterprise_linux:7::server |
before 0:219-19.el7 | 0:219-19.el7 |
systemd-debuginfoRed Hat:enterprise_linux:7::workstation |
before 0:219-19.el7 | 0:219-19.el7 |
systemd-journal-gatewayRed Hat:enterprise_linux:7::workstation |
before 0:219-19.el7 | 0:219-19.el7 |
systemd-networkdRed Hat:enterprise_linux:7::workstation |
before 0:219-19.el7 | 0:219-19.el7 |
systemd-resolvedRed Hat:enterprise_linux:7::workstation |
before 0:219-19.el7 | 0:219-19.el7 |
libgudev1Red Hat:enterprise_linux:7::workstation |
before 0:219-19.el7 | 0:219-19.el7 |
libgudev1-develRed Hat:enterprise_linux:7::workstation |
before 0:219-19.el7 | 0:219-19.el7 |
systemdRed Hat:enterprise_linux:7::workstation |
before 0:219-19.el7 | 0:219-19.el7 |
systemd-develRed Hat:enterprise_linux:7::workstation |
before 0:219-19.el7 | 0:219-19.el7 |
systemd-libsRed Hat:enterprise_linux:7::workstation |
before 0:219-19.el7 | 0:219-19.el7 |
systemd-pythonRed Hat:enterprise_linux:7::workstation |
before 0:219-19.el7 | 0:219-19.el7 |
systemd-sysvRed Hat:enterprise_linux:7::workstation |
before 0:219-19.el7 | 0:219-19.el7 |
libgudev1Red Hat:rhel_eus:7.1::computenode |
before 0:208-20.el7_1.9 | 0:208-20.el7_1.9 |
systemdRed Hat:rhel_eus:7.1::computenode |
before 0:208-20.el7_1.9 | 0:208-20.el7_1.9 |
systemd-debuginfoRed Hat:rhel_eus:7.1::computenode |
before 0:208-20.el7_1.9 | 0:208-20.el7_1.9 |
systemd-libsRed Hat:rhel_eus:7.1::computenode |
before 0:208-20.el7_1.9 | 0:208-20.el7_1.9 |
systemd-pythonRed Hat:rhel_eus:7.1::computenode |
before 0:208-20.el7_1.9 | 0:208-20.el7_1.9 |
systemd-sysvRed Hat:rhel_eus:7.1::computenode |
before 0:208-20.el7_1.9 | 0:208-20.el7_1.9 |
libgudev1-develRed Hat:rhel_eus:7.1::computenode |
before 0:208-20.el7_1.9 | 0:208-20.el7_1.9 |
systemd-develRed Hat:rhel_eus:7.1::computenode |
before 0:208-20.el7_1.9 | 0:208-20.el7_1.9 |
systemd-journal-gatewayRed Hat:rhel_eus:7.1::computenode |
before 0:208-20.el7_1.9 | 0:208-20.el7_1.9 |
libgudev1Red Hat:rhel_eus:7.1::server |
before 0:208-20.ael7b_1.9 | 0:208-20.ael7b_1.9 |
libgudev1-develRed Hat:rhel_eus:7.1::server |
before 0:208-20.ael7b_1.9 | 0:208-20.ael7b_1.9 |
systemdRed Hat:rhel_eus:7.1::server |
before 0:208-20.ael7b_1.9 | 0:208-20.ael7b_1.9 |
systemd-debuginfoRed Hat:rhel_eus:7.1::server |
before 0:208-20.ael7b_1.9 | 0:208-20.ael7b_1.9 |
systemd-develRed Hat:rhel_eus:7.1::server |
before 0:208-20.ael7b_1.9 | 0:208-20.ael7b_1.9 |
systemd-libsRed Hat:rhel_eus:7.1::server |
before 0:208-20.ael7b_1.9 | 0:208-20.ael7b_1.9 |
systemd-pythonRed Hat:rhel_eus:7.1::server |
before 0:208-20.ael7b_1.9 | 0:208-20.ael7b_1.9 |
systemd-sysvRed Hat:rhel_eus:7.1::server |
before 0:208-20.ael7b_1.9 | 0:208-20.ael7b_1.9 |
systemd-journal-gatewayRed Hat:rhel_eus:7.1::server |
before 0:208-20.ael7b_1.9 | 0:208-20.ael7b_1.9 |
systemdSUSE:Linux Enterprise Server for SAP Applications 12 |
before 210-70.58.1 | 210-70.58.1 |
systemdSUSE:Linux Enterprise Server 12-LTSS |
before 210-70.58.1 | 210-70.58.1 |
systemdSUSE:Linux Enterprise Desktop 12 SP1 |
before 210-114.1 | 210-114.1 |
systemdSUSE:Linux Enterprise Software Development Kit 12 SP1 |
before 210-114.1 | 210-114.1 |
systemdSUSE:Linux Enterprise Server 12 SP1 |
before 210-114.1 | 210-114.1 |
systemdSUSE:Linux Enterprise Server for SAP Applications 12 SP1 |
before 210-114.1 | 210-114.1 |
systemdUbuntu:16.04:LTS |
before 229-4ubuntu11, plus listed versions 225-1ubuntu9227-2ubuntu1227-2ubuntu2228-1ubuntu2228-2ubuntu1 Show 20 moreShow less228-2ubuntu2228-3ubuntu1228-4ubuntu1228-4ubuntu2228-5ubuntu1228-5ubuntu2228-5ubuntu3228-6ubuntu1229-1ubuntu2229-1ubuntu4229-2ubuntu1229-3ubuntu1229-3ubuntu2229-4ubuntu1229-4ubuntu4229-4ubuntu5229-4ubuntu6229-4ubuntu7229-4ubuntu8229-4ubuntu10 |
229-4ubuntu11 |
History
| Recorded | Changed | Sources |
|---|---|---|
| aliases | EUVD | |
| first indexed | CVE List, GitHub Advisories, NVD, OSV |
Dates are when Every CVE recorded each change. Upstream dates may differ.
In short
CVE-2016-7796 is a medium vulnerability (CVSS 5.5) in Systemd Project Systemd, published October 7, 2016. No source lists public exploit code. EPSS puts the chance of exploitation in the next 30 days at 0.85%, the 58th percentile. Fixed in systemd 231-9.
References
openwall.com/lists/oss-security/2016/09/30/1
agwa.name/blog/post/how_to_crash_systemd_in_one_tweet
github.com/systemd/systemd/issues/4234
lists.opensuse.org/opensuse-security-announce/2016-10/msg00015.html
bugzilla.redhat.com/show_bug.cgi?id=1381911
rhn.redhat.com/errata/RHSA-2017-0003.html
Show 194 moreShow less
lists.opensuse.org/opensuse-security-announce/2016-10/msg00016.html
securitytracker.com/id/1037320
securityfocus.com/bid/93250
rhn.redhat.com/errata/RHBA-2015-2092.html
nvd.nist.gov/vuln/detail/CVE-2016-7796
github.com/advisories/GHSA-cm6j-6m6x-hmjq
docs.bell-sw.com/security/cves/CVE-2016-7796
security-tracker.debian.org/tracker/CVE-2016-7796
access.redhat.com/errata/RHBA-2015:2092
access.redhat.com/articles/1611383
access.redhat.com/documentation/en-US/Red_Hat_Enterprise_Linux/7/html/7.2_Release_Notes/index.html
bugzilla.redhat.com/show_bug.cgi?id=984026
bugzilla.redhat.com/show_bug.cgi?id=1016680
bugzilla.redhat.com/show_bug.cgi?id=1067189
bugzilla.redhat.com/show_bug.cgi?id=1101226
bugzilla.redhat.com/show_bug.cgi?id=1121253
bugzilla.redhat.com/show_bug.cgi?id=1126298
bugzilla.redhat.com/show_bug.cgi?id=1128113
bugzilla.redhat.com/show_bug.cgi?id=1135598
bugzilla.redhat.com/show_bug.cgi?id=1135599
bugzilla.redhat.com/show_bug.cgi?id=1135600
bugzilla.redhat.com/show_bug.cgi?id=1151604
bugzilla.redhat.com/show_bug.cgi?id=1156496
bugzilla.redhat.com/show_bug.cgi?id=1159950
bugzilla.redhat.com/show_bug.cgi?id=1159951
bugzilla.redhat.com/show_bug.cgi?id=1161003
bugzilla.redhat.com/show_bug.cgi?id=1164334
bugzilla.redhat.com/show_bug.cgi?id=1172387
bugzilla.redhat.com/show_bug.cgi?id=1177336
bugzilla.redhat.com/show_bug.cgi?id=1177676
bugzilla.redhat.com/show_bug.cgi?id=1177677
bugzilla.redhat.com/show_bug.cgi?id=1178848
bugzilla.redhat.com/show_bug.cgi?id=1182105
bugzilla.redhat.com/show_bug.cgi?id=1184074
bugzilla.redhat.com/show_bug.cgi?id=1193817
bugzilla.redhat.com/show_bug.cgi?id=1199488
bugzilla.redhat.com/show_bug.cgi?id=1199644
bugzilla.redhat.com/show_bug.cgi?id=1205062
bugzilla.redhat.com/show_bug.cgi?id=1210488
bugzilla.redhat.com/show_bug.cgi?id=1210981
bugzilla.redhat.com/show_bug.cgi?id=1211460
bugzilla.redhat.com/show_bug.cgi?id=1211972
bugzilla.redhat.com/show_bug.cgi?id=1214996
bugzilla.redhat.com/show_bug.cgi?id=1216025
bugzilla.redhat.com/show_bug.cgi?id=1220803
bugzilla.redhat.com/show_bug.cgi?id=1220812
bugzilla.redhat.com/show_bug.cgi?id=1222517
bugzilla.redhat.com/show_bug.cgi?id=1226333
bugzilla.redhat.com/show_bug.cgi?id=1227396
bugzilla.redhat.com/show_bug.cgi?id=1230190
bugzilla.redhat.com/show_bug.cgi?id=1233081
bugzilla.redhat.com/show_bug.cgi?id=1235233
bugzilla.redhat.com/show_bug.cgi?id=1235635
bugzilla.redhat.com/show_bug.cgi?id=1241938
bugzilla.redhat.com/show_bug.cgi?id=1243010
bugzilla.redhat.com/show_bug.cgi?id=1244440
bugzilla.redhat.com/show_bug.cgi?id=1249513
bugzilla.redhat.com/show_bug.cgi?id=1259015
bugzilla.redhat.com/show_bug.cgi?id=1264073
security.access.redhat.com/data/csaf/v2/advisories/2015/rhba-2015_2092.json
access.redhat.com/security/cve/CVE-2016-7796
cve.org/CVERecord?id=CVE-2016-7796
access.redhat.com/errata/RHSA-2017:0003
access.redhat.com/security/updates/classification
security.access.redhat.com/data/csaf/v2/advisories/2017/rhsa-2017_0003.json
suse.com/support/update/announcement/2016/suse-su-20162475-1
bugzilla.suse.com/1000435
bugzilla.suse.com/1001765
bugzilla.suse.com/954374
bugzilla.suse.com/970293
bugzilla.suse.com/982210
bugzilla.suse.com/982211
bugzilla.suse.com/982251
bugzilla.suse.com/987173
bugzilla.suse.com/987857
bugzilla.suse.com/990074
bugzilla.suse.com/996269
suse.com/security/cve/CVE-2016-7796
suse.com/support/update/announcement/2016/suse-su-20162476-1
suse.com/support/update/announcement/2017/suse-su-20172699-1
bugzilla.suse.com/1056193
bugzilla.suse.com/975726
suse.com/security/cve/CVE-2012-6702
suse.com/security/cve/CVE-2014-0191
suse.com/security/cve/CVE-2014-6271
suse.com/security/cve/CVE-2014-6277
suse.com/security/cve/CVE-2014-6278
suse.com/security/cve/CVE-2014-7169
suse.com/security/cve/CVE-2014-7187
suse.com/security/cve/CVE-2014-7824
suse.com/security/cve/CVE-2014-8964
suse.com/security/cve/CVE-2014-9770
suse.com/security/cve/CVE-2015-0245
suse.com/security/cve/CVE-2015-1283
suse.com/security/cve/CVE-2015-2059
suse.com/security/cve/CVE-2015-2325
suse.com/security/cve/CVE-2015-2327
suse.com/security/cve/CVE-2015-2328
suse.com/security/cve/CVE-2015-3210
suse.com/security/cve/CVE-2015-3217
suse.com/security/cve/CVE-2015-3238
suse.com/security/cve/CVE-2015-3622
suse.com/security/cve/CVE-2015-5073
suse.com/security/cve/CVE-2015-5218
suse.com/security/cve/CVE-2015-5276
suse.com/security/cve/CVE-2015-7511
suse.com/security/cve/CVE-2015-8380
suse.com/security/cve/CVE-2015-8381
suse.com/security/cve/CVE-2015-8382
suse.com/security/cve/CVE-2015-8383
suse.com/security/cve/CVE-2015-8384
suse.com/security/cve/CVE-2015-8385
suse.com/security/cve/CVE-2015-8386
suse.com/security/cve/CVE-2015-8387
suse.com/security/cve/CVE-2015-8388
suse.com/security/cve/CVE-2015-8389
suse.com/security/cve/CVE-2015-8390
suse.com/security/cve/CVE-2015-8391
suse.com/security/cve/CVE-2015-8392
suse.com/security/cve/CVE-2015-8393
suse.com/security/cve/CVE-2015-8394
suse.com/security/cve/CVE-2015-8395
suse.com/security/cve/CVE-2015-8806
suse.com/security/cve/CVE-2015-8842
suse.com/security/cve/CVE-2015-8853
suse.com/security/cve/CVE-2015-8948
suse.com/security/cve/CVE-2016-0634
suse.com/security/cve/CVE-2016-0718
suse.com/security/cve/CVE-2016-0787
suse.com/security/cve/CVE-2016-1234
suse.com/security/cve/CVE-2016-1238
suse.com/security/cve/CVE-2016-1283
suse.com/security/cve/CVE-2016-1762
suse.com/security/cve/CVE-2016-1833
suse.com/security/cve/CVE-2016-1834
suse.com/security/cve/CVE-2016-1835
suse.com/security/cve/CVE-2016-1837
suse.com/security/cve/CVE-2016-1838
suse.com/security/cve/CVE-2016-1839
suse.com/security/cve/CVE-2016-1840
suse.com/security/cve/CVE-2016-2037
suse.com/security/cve/CVE-2016-2073
suse.com/security/cve/CVE-2016-2105
suse.com/security/cve/CVE-2016-2106
suse.com/security/cve/CVE-2016-2107
suse.com/security/cve/CVE-2016-2108
suse.com/security/cve/CVE-2016-2109
suse.com/security/cve/CVE-2016-2177
suse.com/security/cve/CVE-2016-2178
suse.com/security/cve/CVE-2016-2179
suse.com/security/cve/CVE-2016-2180
suse.com/security/cve/CVE-2016-2181
suse.com/security/cve/CVE-2016-2182
suse.com/security/cve/CVE-2016-2183
suse.com/security/cve/CVE-2016-2381
suse.com/security/cve/CVE-2016-3075
suse.com/security/cve/CVE-2016-3191
suse.com/security/cve/CVE-2016-3627
suse.com/security/cve/CVE-2016-3705
suse.com/security/cve/CVE-2016-3706
suse.com/security/cve/CVE-2016-4008
suse.com/security/cve/CVE-2016-4429
suse.com/security/cve/CVE-2016-4447
suse.com/security/cve/CVE-2016-4448
suse.com/security/cve/CVE-2016-4449
suse.com/security/cve/CVE-2016-4483
suse.com/security/cve/CVE-2016-4574
suse.com/security/cve/CVE-2016-4579
suse.com/security/cve/CVE-2016-4658
suse.com/security/cve/CVE-2016-5011
suse.com/security/cve/CVE-2016-5300
suse.com/security/cve/CVE-2016-5419
suse.com/security/cve/CVE-2016-5420
suse.com/security/cve/CVE-2016-5421
suse.com/security/cve/CVE-2016-6185
suse.com/security/cve/CVE-2016-6261
suse.com/security/cve/CVE-2016-6262
suse.com/security/cve/CVE-2016-6263
suse.com/security/cve/CVE-2016-6302
suse.com/security/cve/CVE-2016-6303
suse.com/security/cve/CVE-2016-6304
suse.com/security/cve/CVE-2016-6306
suse.com/security/cve/CVE-2016-6313
suse.com/security/cve/CVE-2016-6318
suse.com/security/cve/CVE-2016-7141
suse.com/security/cve/CVE-2016-7167
suse.com/security/cve/CVE-2016-7543
suse.com/security/cve/CVE-2016-8615
suse.com/security/cve/CVE-2016-8616
suse.com/security/cve/CVE-2016-8617
suse.com/security/cve/CVE-2016-8618
suse.com/security/cve/CVE-2016-8619
ubuntu.com/security/CVE-2016-7796
openwall.com/lists/oss-security/2016/09/30
Left out here: 34 references. The JSON record has them.