[{"data":1,"prerenderedAt":-1},["ShallowReactive",2],{"$f35-lnFmx0hwgVl_NmwSDLTzmfn2eEjEl_7dOJ_cBPRU":3,"g5a-risk:CVE-2016-3672":302},{"success":4,"data":5,"meta":300},true,{"cveId":6,"title":7,"description":8,"shortDescription":9,"publishedDate":10,"lastModified":11,"cvssScore":12,"cvssVector":13,"cvssMetrics":14,"epssScore":39,"epssPercentile":15,"epssTimeSeries":40,"severity":41,"affectedProducts":42,"affectedProductsCount":82,"references":83,"referencesCount":228,"weaknesses":229,"weaknessesCount":233,"isActivelyExploited":234,"cisaInfo":15,"otxData":15,"relatedBlogPosts":235,"seoMetadata":236,"configurations":261,"relatedVendorCves":298,"notableEvents":299},"CVE-2016-3672","What is CVE-2016-3672?","The arch_pick_mmap_layout function in arch\u002Fx86\u002Fmm\u002Fmmap.c in the Linux kernel through 4.5.2 does not properly randomize the legacy base address, which makes it easier for local users to defeat the intended restrictions on the ADDR_NO_RANDOMIZE flag, and bypass the ASLR protection mechanism for a setuid or setgid program, by disabling stack-consumption resource limits.","The arch_pick_mmap_layout function in arch\u002Fx86\u002Fmm\u002Fmmap.c in the Linux kernel through 4.5.2 does not properly randomize the legacy base address, which makes i...","2016-04-27T17:59:27.397","2025-04-12T10:46:40.837",7.8,"CVSS:3.0\u002FAV:L\u002FAC:L\u002FPR:L\u002FUI:N\u002FS:U\u002FC:H\u002FI:H\u002FA:H",{"CVSSMetricV31":15,"CVSSMetricV30":16,"CVSSMetricV2":29,"CVSSMetricV40":15},null,[17],{"Source":18,"Type":19,"CVSSData":20,"ExploitabilityScore":27,"ImpactScore":28},"nvd@nist.gov","Primary",{"Version":21,"VectorString":13,"AttackVector":22,"AttackComplexity":23,"PrivilegesRequired":23,"UserInteraction":24,"Scope":25,"ConfidentialityImpact":26,"IntegrityImpact":26,"AvailabilityImpact":26,"BaseScore":12,"BaseSeverity":26,"ExploitCodeMaturity":15,"RemediationLevel":15,"ReportConfidence":15,"TemporalScore":15,"TemporalSeverity":15,"ConfidentialityRequirement":15,"IntegrityRequirement":15,"AvailabilityRequirement":15,"ModifiedAttackVector":15,"ModifiedAttackComplexity":15,"ModifiedPrivilegesRequired":15,"ModifiedUserInteraction":15,"ModifiedScope":15,"ModifiedConfidentialityImpact":15,"ModifiedIntegrityImpact":15,"ModifiedAvailabilityImpact":15,"EnvironmentalScore":15,"EnvironmentalSeverity":15},"3.0","LOCAL","LOW","NONE","UNCHANGED","HIGH",1.8,5.9,[30],{"Source":18,"Type":19,"CVSSData":31,"BaseSeverity":36,"ExploitabilityScore":37,"ImpactScore":38,"ACInsufInfo":15,"ObtainAllPrivilege":15,"ObtainUserPrivilege":15,"ObtainOtherPrivilege":15,"UserInteractionRequired":15},{"Version":32,"VectorString":33,"AccessVector":22,"AccessComplexity":23,"Authentication":24,"ConfidentialityImpact":34,"IntegrityImpact":34,"AvailabilityImpact":34,"BaseScore":35,"BaseSeverity":15,"Exploitability":15,"RemediationLevel":15,"ReportConfidence":15,"TemporalScore":15,"CollateralDamagePotential":15,"TargetDistribution":15,"ConfidentialityRequirement":15,"IntegrityRequirement":15,"AvailabilityRequirement":15,"EnvironmentalScore":15},"2.0","AV:L\u002FAC:L\u002FAu:N\u002FC:P\u002FI:P\u002FA:P","PARTIAL",4.6,"MEDIUM",3.9,6.4,0.0117,[39,39,39,39,39,39,39],"High",[43,48,51,54,59,62,65,68,71,74,77],{"vendor":44,"product":45,"version":46,"criteria":47,"vulnerable":4},"canonical","ubuntu_linux","12.04","cpe:2.3:o:canonical:ubuntu_linux:12.04:*:*:*:lts:*:*:*",{"vendor":44,"product":45,"version":49,"criteria":50,"vulnerable":4},"14.04","cpe:2.3:o:canonical:ubuntu_linux:14.04:*:*:*:lts:*:*:*",{"vendor":44,"product":45,"version":52,"criteria":53,"vulnerable":4},"15.10","cpe:2.3:o:canonical:ubuntu_linux:15.10:*:*:*:*:*:*:*",{"vendor":55,"product":56,"version":57,"criteria":58,"vulnerable":4},"novell","suse_linux_enterprise_software_development_kit","12.0","cpe:2.3:a:novell:suse_linux_enterprise_software_development_kit:12.0:*:*:*:*:*:*:*",{"vendor":55,"product":60,"version":57,"criteria":61,"vulnerable":4},"suse_linux_enterprise_desktop","cpe:2.3:o:novell:suse_linux_enterprise_desktop:12.0:*:*:*:*:*:*:*",{"vendor":55,"product":63,"version":57,"criteria":64,"vulnerable":4},"suse_linux_enterprise_live_patching","cpe:2.3:o:novell:suse_linux_enterprise_live_patching:12.0:*:*:*:*:*:*:*",{"vendor":55,"product":66,"version":57,"criteria":67,"vulnerable":4},"suse_linux_enterprise_module_for_public_cloud","cpe:2.3:o:novell:suse_linux_enterprise_module_for_public_cloud:12.0:*:*:*:*:*:*:*",{"vendor":55,"product":69,"version":57,"criteria":70,"vulnerable":4},"suse_linux_enterprise_real_time_extension","cpe:2.3:o:novell:suse_linux_enterprise_real_time_extension:12.0:sp1:*:*:*:*:*:*",{"vendor":55,"product":72,"version":57,"criteria":73,"vulnerable":4},"suse_linux_enterprise_server","cpe:2.3:o:novell:suse_linux_enterprise_server:12.0:*:*:*:*:*:*:*",{"vendor":55,"product":75,"version":57,"criteria":76,"vulnerable":4},"suse_linux_enterprise_workstation_extension","cpe:2.3:o:novell:suse_linux_enterprise_workstation_extension:12.0:*:*:*:*:*:*:*",{"vendor":78,"product":79,"version":80,"criteria":81,"vulnerable":4},"linux","linux_kernel","*","cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",11,[84,88,92,95,99,103,107,110,113,116,120,124,128,131,135,139,142,145,148,151,154,157,160,163,167,170,174,180,184,186,188,190,192,194,196,198,200,202,204,206,208,210,212,214,216,218,220,222,224,226],{"url":85,"source":86,"tags":87},"http:\u002F\u002Fgit.kernel.org\u002Fcgit\u002Flinux\u002Fkernel\u002Fgit\u002Ftorvalds\u002Flinux.git\u002Fcommit\u002F?id=8b8addf891de8a00e4d39fc32f93f7c5eb8feceb","Kernel",[],{"url":89,"source":90,"tags":91},"http:\u002F\u002Fhmarco.org\u002Fbugs\u002FCVE-2016-3672-Unlimiting-the-stack-not-longer-dis","Hmarco",[],{"url":93,"source":90,"tags":94},"http:\u002F\u002Fhmarco.org\u002Fbugs\u002FCVE-2016-3672-Unlimiting-the-stack-not-longer-disables-ASLR.html",[],{"url":96,"source":97,"tags":98},"http:\u002F\u002Flists.fedoraproject.org\u002Fpipermail\u002Fpackage-announce\u002F2016-April\u002F182524.html","Fedoraproject",[],{"url":100,"source":101,"tags":102},"http:\u002F\u002Flists.opensuse.org\u002Fopensuse-security-announce\u002F2016-06\u002Fmsg00044.html","Opensuse",[],{"url":104,"source":101,"tags":105},"http:\u002F\u002Flists.opensuse.org\u002Fopensuse-security-announce\u002F2016-06\u002Fmsg00054.html",[106],"Third Party Advisory",{"url":108,"source":101,"tags":109},"http:\u002F\u002Flists.opensuse.org\u002Fopensuse-security-announce\u002F2016-08\u002Fmsg00000.html",[106],{"url":111,"source":101,"tags":112},"http:\u002F\u002Flists.opensuse.org\u002Fopensuse-security-announce\u002F2016-08\u002Fmsg00044.html",[],{"url":114,"source":101,"tags":115},"http:\u002F\u002Flists.opensuse.org\u002Fopensuse-security-announce\u002F2016-08\u002Fmsg00055.html",[],{"url":117,"source":118,"tags":119},"http:\u002F\u002Fseclists.org\u002Ffulldisclosure\u002F2016\u002FApr\u002F26","Seclists",[],{"url":121,"source":122,"tags":123},"http:\u002F\u002Fwww.debian.org\u002Fsecurity\u002F2016\u002Fdsa-3607","Debian",[],{"url":125,"source":126,"tags":127},"http:\u002F\u002Fwww.securityfocus.com\u002Farchive\u002F1\u002F537996\u002F100\u002F0\u002Fthreaded","Securityfocus",[],{"url":129,"source":126,"tags":130},"http:\u002F\u002Fwww.securityfocus.com\u002Fbid\u002F85884",[],{"url":132,"source":133,"tags":134},"http:\u002F\u002Fwww.securitytracker.com\u002Fid\u002F1035506","Securitytracker",[],{"url":136,"source":137,"tags":138},"http:\u002F\u002Fwww.ubuntu.com\u002Fusn\u002FUSN-2989-1","Ubuntu",[106],{"url":140,"source":137,"tags":141},"http:\u002F\u002Fwww.ubuntu.com\u002Fusn\u002FUSN-2996-1",[106],{"url":143,"source":137,"tags":144},"http:\u002F\u002Fwww.ubuntu.com\u002Fusn\u002FUSN-2997-1",[106],{"url":146,"source":137,"tags":147},"http:\u002F\u002Fwww.ubuntu.com\u002Fusn\u002FUSN-2998-1",[106],{"url":149,"source":137,"tags":150},"http:\u002F\u002Fwww.ubuntu.com\u002Fusn\u002FUSN-3000-1",[106],{"url":152,"source":137,"tags":153},"http:\u002F\u002Fwww.ubuntu.com\u002Fusn\u002FUSN-3001-1",[106],{"url":155,"source":137,"tags":156},"http:\u002F\u002Fwww.ubuntu.com\u002Fusn\u002FUSN-3002-1",[106],{"url":158,"source":137,"tags":159},"http:\u002F\u002Fwww.ubuntu.com\u002Fusn\u002FUSN-3003-1",[106],{"url":161,"source":137,"tags":162},"http:\u002F\u002Fwww.ubuntu.com\u002Fusn\u002FUSN-3004-1",[106],{"url":164,"source":165,"tags":166},"https:\u002F\u002Faccess.redhat.com\u002Ferrata\u002FRHSA-2018:0676","Red Hat",[],{"url":168,"source":165,"tags":169},"https:\u002F\u002Faccess.redhat.com\u002Ferrata\u002FRHSA-2018:1062",[],{"url":171,"source":165,"tags":172},"https:\u002F\u002Fbugzilla.redhat.com\u002Fshow_bug.cgi?id=1324749",[173],"Issue Tracking",{"url":175,"source":176,"tags":177},"https:\u002F\u002Fgithub.com\u002Ftorvalds\u002Flinux\u002Fcommit\u002F8b8addf891de8a00e4d39fc32f93f7c5eb8feceb","GitHub",[178,179],"Patch","Vendor Advisory",{"url":181,"source":182,"tags":183},"https:\u002F\u002Fwww.exploit-db.com\u002Fexploits\u002F39669\u002F","Exploit-db",[],{"url":85,"source":86,"tags":185},[],{"url":89,"source":90,"tags":187},[],{"url":93,"source":90,"tags":189},[],{"url":96,"source":97,"tags":191},[],{"url":100,"source":101,"tags":193},[],{"url":104,"source":101,"tags":195},[106],{"url":108,"source":101,"tags":197},[106],{"url":111,"source":101,"tags":199},[],{"url":114,"source":101,"tags":201},[],{"url":117,"source":118,"tags":203},[],{"url":121,"source":122,"tags":205},[],{"url":125,"source":126,"tags":207},[],{"url":129,"source":126,"tags":209},[],{"url":132,"source":133,"tags":211},[],{"url":136,"source":137,"tags":213},[106],{"url":140,"source":137,"tags":215},[106],{"url":143,"source":137,"tags":217},[106],{"url":146,"source":137,"tags":219},[106],{"url":149,"source":137,"tags":221},[106],{"url":152,"source":137,"tags":223},[106],{"url":155,"source":137,"tags":225},[106],{"url":158,"source":137,"tags":227},[106],50,[230],{"id":231,"name":231,"description":232},"Unknown","CWE-254",1,false,[],{"title":237,"metaDescription":238,"keywords":239,"canonicalUrl":240,"structuredData":241},"What is CVE-2016-3672? Vulnerability Analysis | Security Advisory | Precursor Intelligence","Comprehensive analysis of CVE-2016-3672, a high severity cyber security vulnerability from 2016. The arch_pick_mmap_layout function in arch\u002Fx86\u002Fmm\u002Fmmap.c in ...","CVE-2016-3672, CVE-2016-3672 vulnerability, CVE-2016-3672 security, high severity vulnerability, cybersecurity, vulnerability analysis, security advisory, CVE database, threat intelligence, security research, vulnerability assessment, cyber threats, 2016, CVSS score, exploit, patch, remediation, canonical security, novell security, ubuntu_linux vulnerability, suse_linux_enterprise_software_development_kit vulnerability, suse_linux_enterprise_desktop vulnerability, suse_linux_enterprise_live_patching vulnerability, suse_linux_enterprise_module_for_public_cloud vulnerability","\u002Fwhat-is\u002Fcve-2016-3672",{"@context":242,"@type":243,"headline":237,"description":238,"datePublished":10,"dateModified":11,"author":244,"publisher":248,"about":252,"mainEntityOfPage":256,"articleSection":259,"keywords":260},"https:\u002F\u002Fschema.org","TechArticle",{"@type":245,"name":246,"url":247},"Organization","Precursor Intelligence","https:\u002F\u002Fprecursorintelligence.com",{"@type":245,"name":246,"url":247,"logo":249},{"@type":250,"url":251},"ImageObject","https:\u002F\u002Fprecursorintelligence.com\u002Fimg\u002Flogos\u002Feplogo.png",{"@type":253,"name":6,"description":254,"additionalType":255},"Thing","Cybersecurity Vulnerability","https:\u002F\u002Fschema.org\u002FSoftwareBug",{"@type":257,"@id":258},"WebPage","https:\u002F\u002Fprecursorintelligence.com\u002Fwhat-is\u002Fcve-2016-3672","Cybersecurity","CVE-2016-3672, CVE-2016-3672 vulnerability, CVE-2016-3672 security, high severity vulnerability, cybersecurity, vulnerability analysis, security advisory, CVE database, threat intelligence, security research",[262,273,291],{"Operator":15,"Negate":15,"Nodes":263},[264],{"Operator":265,"Negate":15,"CPEMatch":266},"OR",[267,269,271],{"Vulnerable":4,"Criteria":47,"MatchCriteriaID":268,"VersionStartExcluding":15,"VersionStartIncluding":15,"VersionEndExcluding":15,"VersionEndIncluding":15},"B6B7CAD7-9D4E-4FDB-88E3-1E583210A01F",{"Vulnerable":4,"Criteria":50,"MatchCriteriaID":270,"VersionStartExcluding":15,"VersionStartIncluding":15,"VersionEndExcluding":15,"VersionEndIncluding":15},"B5A6F2F3-4894-4392-8296-3B8DD2679084",{"Vulnerable":4,"Criteria":53,"MatchCriteriaID":272,"VersionStartExcluding":15,"VersionStartIncluding":15,"VersionEndExcluding":15,"VersionEndIncluding":15},"E88A537F-F4D0-46B9-9E37-965233C2A355",{"Operator":15,"Negate":15,"Nodes":274},[275],{"Operator":265,"Negate":15,"CPEMatch":276},[277,279,281,283,285,287,289],{"Vulnerable":4,"Criteria":58,"MatchCriteriaID":278,"VersionStartExcluding":15,"VersionStartIncluding":15,"VersionEndExcluding":15,"VersionEndIncluding":15},"336EC5B8-6FD8-42BB-9530-58A15238CEE1",{"Vulnerable":4,"Criteria":61,"MatchCriteriaID":280,"VersionStartExcluding":15,"VersionStartIncluding":15,"VersionEndExcluding":15,"VersionEndIncluding":15},"EA04C9F1-6257-4D82-BA0B-37DE66D94736",{"Vulnerable":4,"Criteria":64,"MatchCriteriaID":282,"VersionStartExcluding":15,"VersionStartIncluding":15,"VersionEndExcluding":15,"VersionEndIncluding":15},"CCAAE4A1-D542-43F3-B7FC-685BCDB248D5",{"Vulnerable":4,"Criteria":67,"MatchCriteriaID":284,"VersionStartExcluding":15,"VersionStartIncluding":15,"VersionEndExcluding":15,"VersionEndIncluding":15},"A961CBC6-3CA1-4A0F-BBE0-8F6315781B7C",{"Vulnerable":4,"Criteria":70,"MatchCriteriaID":286,"VersionStartExcluding":15,"VersionStartIncluding":15,"VersionEndExcluding":15,"VersionEndIncluding":15},"B2905A9C-3E00-4188-8341-E5C2F62EF405",{"Vulnerable":4,"Criteria":73,"MatchCriteriaID":288,"VersionStartExcluding":15,"VersionStartIncluding":15,"VersionEndExcluding":15,"VersionEndIncluding":15},"C384D0B6-8A5C-45CA-8CD9-7F4E967FE4F0",{"Vulnerable":4,"Criteria":76,"MatchCriteriaID":290,"VersionStartExcluding":15,"VersionStartIncluding":15,"VersionEndExcluding":15,"VersionEndIncluding":15},"DF461FB4-8BA5-4065-9A69-DC017D3611C3",{"Operator":15,"Negate":15,"Nodes":292},[293],{"Operator":265,"Negate":15,"CPEMatch":294},[295],{"Vulnerable":4,"Criteria":81,"MatchCriteriaID":296,"VersionStartExcluding":15,"VersionStartIncluding":15,"VersionEndExcluding":15,"VersionEndIncluding":297},"8E93DE20-F6CD-4B8B-836D-7844A2697466","4.5.2",[],[],{"lastModified":11,"cacheTime":301,"version":32},1792272156458,{"score":303,"band":304,"action":305,"scoredAt":306},46,"Medium","Plan remediation","2026-10-17T07:56:57.430409+00:00"]