Vulnerability Details CVE-2016-5104
The socket_create function in common/socket.c in libimobiledevice and libusbmuxd allows remote attackers to bypass intended access restrictions and communicate with services on iOS devices by connecting to an IPv4 TCP socket.
Exploit prediction scoring system (EPSS) score
EPSS Score 0.007
EPSS Ranking 72.0%
CVSS Severity
CVSS v3 Score 5.3
CVSS v2 Score 5.0
References
- http://lists.opensuse.org/opensuse-security-announce/2016-06/msg00042.html
- http://lists.opensuse.org/opensuse-updates/2016-06/msg00029.html
- http://www.openwall.com/lists/oss-security/2016/05/26/1
- http://www.openwall.com/lists/oss-security/2016/05/26/6
- http://www.ubuntu.com/usn/USN-3026-1
- http://www.ubuntu.com/usn/USN-3026-2
- https://bugzilla.redhat.com/show_bug.cgi?id=1339988
- https://github.com/libimobiledevice/libimobiledevice/commit/df1f5c4d70d0c19ad40072f5246ca457e7f9849e
- https://github.com/libimobiledevice/libusbmuxd/commit/4397b3376dc4e4cb1c991d0aed61ce6482614196
- https://lists.debian.org/debian-lts-announce/2020/02/msg00027.html
- https://lists.debian.org/debian-lts-announce/2020/02/msg00028.html
- http://lists.opensuse.org/opensuse-security-announce/2016-06/msg00042.html
- http://lists.opensuse.org/opensuse-updates/2016-06/msg00029.html
- http://www.openwall.com/lists/oss-security/2016/05/26/1
- http://www.openwall.com/lists/oss-security/2016/05/26/6
- http://www.ubuntu.com/usn/USN-3026-1
- http://www.ubuntu.com/usn/USN-3026-2
- https://bugzilla.redhat.com/show_bug.cgi?id=1339988
- https://github.com/libimobiledevice/libimobiledevice/commit/df1f5c4d70d0c19ad40072f5246ca457e7f9849e
- https://github.com/libimobiledevice/libusbmuxd/commit/4397b3376dc4e4cb1c991d0aed61ce6482614196
- https://lists.debian.org/debian-lts-announce/2020/02/msg00027.html
- https://lists.debian.org/debian-lts-announce/2020/02/msg00028.html
Products affected by CVE-2016-5104
-
cpe:2.3:a:libimobiledevice:libimobiledevice:0.9.0
-
cpe:2.3:a:libimobiledevice:libimobiledevice:0.9.1
-
cpe:2.3:a:libimobiledevice:libimobiledevice:0.9.2
-
cpe:2.3:a:libimobiledevice:libimobiledevice:0.9.3
-
cpe:2.3:a:libimobiledevice:libimobiledevice:0.9.4
-
cpe:2.3:a:libimobiledevice:libimobiledevice:0.9.5
-
cpe:2.3:a:libimobiledevice:libimobiledevice:0.9.6
-
cpe:2.3:a:libimobiledevice:libimobiledevice:0.9.7
-
cpe:2.3:a:libimobiledevice:libimobiledevice:1.0.0
-
cpe:2.3:a:libimobiledevice:libimobiledevice:1.0.1
-
cpe:2.3:a:libimobiledevice:libimobiledevice:1.0.2
-
cpe:2.3:a:libimobiledevice:libimobiledevice:1.0.3
-
cpe:2.3:a:libimobiledevice:libimobiledevice:1.0.4
-
cpe:2.3:a:libimobiledevice:libimobiledevice:1.0.5
-
cpe:2.3:a:libimobiledevice:libimobiledevice:1.0.6
-
cpe:2.3:a:libimobiledevice:libimobiledevice:1.0.7
-
cpe:2.3:a:libimobiledevice:libimobiledevice:1.1.0
-
cpe:2.3:a:libimobiledevice:libimobiledevice:1.1.1
-
cpe:2.3:a:libimobiledevice:libimobiledevice:1.1.2
-
cpe:2.3:a:libimobiledevice:libimobiledevice:1.1.3
-
cpe:2.3:a:libimobiledevice:libimobiledevice:1.1.4
-
cpe:2.3:a:libimobiledevice:libimobiledevice:1.1.5
-
cpe:2.3:a:libimobiledevice:libimobiledevice:1.1.6
-
cpe:2.3:a:libimobiledevice:libimobiledevice:1.1.7
-
cpe:2.3:a:libimobiledevice:libimobiledevice:1.2.0
-
cpe:2.3:a:libimobiledevice:libusbmuxd:1.0.10
-
cpe:2.3:a:libimobiledevice:libusbmuxd:1.0.9
-
cpe:2.3:o:canonical:ubuntu_linux:14.04
-
cpe:2.3:o:canonical:ubuntu_linux:15.10
-
cpe:2.3:o:canonical:ubuntu_linux:16.04
-
cpe:2.3:o:opensuse:leap:42.1
-
cpe:2.3:o:opensuse:opensuse:13.2