CVE-2016-5195

Exp

Race condition in mm/gup.c in the Linux kernel 2.x through 4.x before 4.8.3 allows local users to gain privileges by leveraging incorrect handling of a copy-on-write (COW) feature to write to a read-only memory mapping, as exploited in the wild in October 2016, aka "Dirty COW."

公開: 2016-11-10 最終更新: 2026-04-21 Assigner: [email protected] ソース: [email protected]

総合評価: CVE-2016-5195 は在野悪用が確認された重大脅威(82.9/100)。CVSS 深刻度は高。悪用される可能性が高い(EPSS 83.91%、100 パーセンタイル) 根拠: CISA KEV に登録(追加日 2022-03-03)。Linux / Kernel が対象で、弱点分類 CWE-362の悪用が確認されています。未認証でリモート管理権限を奪取されるリスクが極めて高い。 推奨対応: CISA の対応期限を過ぎています。緊急のパッチ適用を最優先に検討してください。

リスクは変動します。再評価に基づき、本ページの表示内容を更新しています。

CVE-2016-5195 の CISA KEV レコード

名称: Linux Kernel Race Condition Vulnerability · CISA KEV の詳細

悪用情報の追加日: 2022-03-03

対応期限: 2022-03-24

求められる対応: Apply updates per vendor instructions.

CVE-2016-5195 に関する公開 exploit 参照(Exploit-DB)

EDB-ID ソース 種別 公開 リンク
40839 exploit_db edb 2016-11-28 Exploit-DB ↗
40847 exploit_db edb 2016-11-27 Exploit-DB ↗
40838 exploit_db edb 2016-10-26 Exploit-DB ↗
40616 exploit_db edb 2016-10-21 Exploit-DB ↗
40611 exploit_db edb 2016-10-19 Exploit-DB ↗
nvd_ref exploit_tag Exploit-DB ↗
nvd_ref exploit_tag Exploit-DB ↗
nvd_ref exploit_tag Exploit-DB ↗
nvd_ref exploit_tag Exploit-DB ↗
nvd_ref exploit_tag Exploit-DB ↗
nvd_ref exploit_tag Exploit-DB ↗
nvd_ref exploit_tag Exploit-DB ↗
nvd_ref exploit_tag Exploit-DB ↗
nvd_ref exploit_tag Exploit-DB ↗
nvd_ref exploit_tag Exploit-DB ↗

CVE-2016-5195 の EPSS(Exploit Prediction Scoring System)スコア

EPSS は日次で悪用されやすさの相対度合いを推定します。パーセンタイルは採点済み CVE の中での相対位置(高いほど相対的に深刻)を示します。

# 日付 旧 EPSS スコア 新 EPSS スコア Δ(新 − 旧)
1 2026-06-15 93.93% 83.91% -10.02%
2 2026-05-22 94.18% 93.93% -0.25%
3 2025-08-08 94.18%

EPSS の全履歴 (全 18 件)

CVE-2016-5195 の CVSS(Common Vulnerability Scoring System)指標

この CVE の CVSS 指標。

ベーススコア バージョン 深刻度 ベクトル 悪用しやすさ 影響 スコアの出典
7.0 3.1 HIGH
CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H クリックして展開
攻撃ベクター (AV:L)
対象ホスト上でコードを実行できること、または別ユーザーの誤操作・悪意ある操作が前提になる。
攻撃の複雑さ (AC:H)
到達できても、タイミング・負荷・周辺設定など、揃わないと成功しない局面が多い。
必要な権限 (PR:L)
一般ユーザー権限があれば足り、管理者(root 相当)は不要。
ユーザーの関与 (UI:N)
メールのリンクを開く、マクロを有効にするなど、被害者の協力がなくても成立しうる。
スコープ (S:U)
影響は脆弱コンポーネントと同一のセキュリティ権限・信頼境界の内側に収まる。
機密性への影響 (C:H)
広範な機微データの読み取りや持ち出しが現実的。
完全性への影響 (I:H)
権限の奪取や広範なログ改竄など、システムの信頼根拠を揺るがす改ざんが現実的。
可用性への影響 (A:H)
長時間のサービス停止、データ損壊による復旧不能に近い状態など、利用者に著しい不便を与えうる。
1.0 5.9 [email protected]
7.0 3.1 HIGH
CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H クリックして展開
攻撃ベクター (AV:L)
対象ホスト上でコードを実行できること、または別ユーザーの誤操作・悪意ある操作が前提になる。
攻撃の複雑さ (AC:H)
到達できても、タイミング・負荷・周辺設定など、揃わないと成功しない局面が多い。
必要な権限 (PR:L)
一般ユーザー権限があれば足り、管理者(root 相当)は不要。
ユーザーの関与 (UI:N)
メールのリンクを開く、マクロを有効にするなど、被害者の協力がなくても成立しうる。
スコープ (S:U)
影響は脆弱コンポーネントと同一のセキュリティ権限・信頼境界の内側に収まる。
機密性への影響 (C:H)
広範な機微データの読み取りや持ち出しが現実的。
完全性への影響 (I:H)
権限の奪取や広範なログ改竄など、システムの信頼根拠を揺るがす改ざんが現実的。
可用性への影響 (A:H)
長時間のサービス停止、データ損壊による復旧不能に近い状態など、利用者に著しい不便を与えうる。
1.0 5.9 134c704f-9b21-4f2e-91b3-4a467353bcc0
7.2 2.0 HIGH
AV:L/AC:L/Au:N/C:C/I:C/A:C クリックして展開
アクセス経路 (AV:L)
対象ホストにログインするなど、ローカルからの操作が前提。
アクセスの複雑さ (AC:L)
手順が短く、再現性が高い。
認証 (AU:N)
認証を経ずに攻撃を完結できる。
機密性への影響 (C:C)
機密性は全面的に損なわれる。
完全性への影響 (I:C)
完全性は全面的に損なわれる。
可用性への影響 (A:C)
可用性は全面的に損なわれる。
3.9 10.0 [email protected]

CVE-2016-5195 の弱点分類(列挙)

CVE-2016-5195 の OS トラッカー

vendor priority summary link
debian not yet assigned CVE-2016-5195 not yet assigned priority: Debian including 1 source packages (linux), 5 status rows across 5 suites (bookworm, bullseye, forky, sid, trixie): resolved 5. https://security-tracker.debian.org/tracker/CVE-2016-5195
redhat high https://access.redhat.com/security/cve/CVE-2016-5195
suse high CVE-2016-5195 severity important: SUSE including 297 source package names (cri-o-1.17.1-lp151.2.2, cri-o-kubeadm-criconfig-1.17.1-lp151.2.2, …), 732 product×package rows across 104 product lines (HPE Helion OpenStack 8, SUSE CaaS Platform 4.0, … (104 product lines)): Fixed 446, Known Not Affected 286. https://www.suse.com/security/cve/CVE-2016-5195/
ubuntu high CVE-2016-5195 high priority: Ubuntu including 27 source packages (linux, linux-armadaxp, …), 162 status rows across 6 suites (precise, trusty, upstream, xenial, yakkety, zesty): DNE 103, released 40, ignored 11, not-affected 8. https://ubuntu.com/security/CVE-2016-5195

CVE-2016-5195 の影響を受けるソフトウェア/構成

ベンダー 製品 バージョン 生の CPE
canonical ubuntu_linux 12.04 cpe:2.3:o:canonical:ubuntu_linux:12.04:*:*:*:-:*:*:*
canonical ubuntu_linux 14.04 cpe:2.3:o:canonical:ubuntu_linux:14.04:*:*:*:esm:*:*:*
canonical ubuntu_linux 16.04 cpe:2.3:o:canonical:ubuntu_linux:16.04:*:*:*:esm:*:*:*
canonical ubuntu_linux 16.10 cpe:2.3:o:canonical:ubuntu_linux:16.10:*:*:*:*:*:*:*
linux linux_kernel >= 2.6.22, < 3.2.83 cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*
linux linux_kernel >= 3.3, < 3.4.113 cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*
linux linux_kernel >= 3.5, < 3.10.104 cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*
linux linux_kernel >= 3.11, < 3.12.66 cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*
linux linux_kernel >= 3.13, < 3.16.38 cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*
linux linux_kernel >= 3.17, < 3.18.44 cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*
linux linux_kernel >= 3.19, < 4.1.35 cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*
linux linux_kernel >= 4.2, < 4.4.26 cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*
linux linux_kernel >= 4.5, < 4.7.9 cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*
linux linux_kernel >= 4.8, < 4.8.3 cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*
redhat enterprise_linux 5 cpe:2.3:o:redhat:enterprise_linux:5:*:*:*:*:*:*:*
redhat enterprise_linux 6.0 cpe:2.3:o:redhat:enterprise_linux:6.0:*:*:*:*:*:*:*
redhat enterprise_linux 7.0 cpe:2.3:o:redhat:enterprise_linux:7.0:*:*:*:*:*:*:*
redhat enterprise_linux_aus 6.2 cpe:2.3:o:redhat:enterprise_linux_aus:6.2:*:*:*:*:*:*:*
redhat enterprise_linux_aus 6.4 cpe:2.3:o:redhat:enterprise_linux_aus:6.4:*:*:*:*:*:*:*
redhat enterprise_linux_aus 6.5 cpe:2.3:o:redhat:enterprise_linux_aus:6.5:*:*:*:*:*:*:*
redhat enterprise_linux_eus 6.6 cpe:2.3:o:redhat:enterprise_linux_eus:6.6:*:*:*:*:*:*:*
redhat enterprise_linux_eus 6.7 cpe:2.3:o:redhat:enterprise_linux_eus:6.7:*:*:*:*:*:*:*
redhat enterprise_linux_eus 7.1 cpe:2.3:o:redhat:enterprise_linux_eus:7.1:*:*:*:*:*:*:*
redhat enterprise_linux_long_life 5.6 cpe:2.3:o:redhat:enterprise_linux_long_life:5.6:*:*:*:*:*:*:*
redhat enterprise_linux_long_life 5.9 cpe:2.3:o:redhat:enterprise_linux_long_life:5.9:*:*:*:*:*:*:*
redhat enterprise_linux_tus 6.5 cpe:2.3:o:redhat:enterprise_linux_tus:6.5:*:*:*:*:*:*:*
debian debian_linux 7.0 cpe:2.3:o:debian:debian_linux:7.0:*:*:*:*:*:*:*
debian debian_linux 8.0 cpe:2.3:o:debian:debian_linux:8.0:*:*:*:*:*:*:*
fedoraproject fedora 23 cpe:2.3:o:fedoraproject:fedora:23:*:*:*:*:*:*:*
fedoraproject fedora 24 cpe:2.3:o:fedoraproject:fedora:24:*:*:*:*:*:*:*
fedoraproject fedora 25 cpe:2.3:o:fedoraproject:fedora:25:*:*:*:*:*:*:*
paloaltonetworks pan-os >= 5.1, < 7.0.14 cpe:2.3:o:paloaltonetworks:pan-os:*:*:*:*:*:*:*:*
paloaltonetworks pan-os >= 7.1.0, < 7.1.8 cpe:2.3:o:paloaltonetworks:pan-os:*:*:*:*:*:*:*:*
netapp cloud_backup cpe:2.3:a:netapp:cloud_backup:-:*:*:*:*:*:*:*
netapp hci_storage_nodes cpe:2.3:a:netapp:hci_storage_nodes:-:*:*:*:*:*:*:*
netapp oncommand_balance cpe:2.3:a:netapp:oncommand_balance:-:*:*:*:*:*:*:*
netapp oncommand_performance_manager cpe:2.3:a:netapp:oncommand_performance_manager:-:*:*:*:*:*:*:*
netapp oncommand_unified_manager_for_clustered_data_ontap cpe:2.3:a:netapp:oncommand_unified_manager_for_clustered_data_ontap:-:*:*:*:*:*:*:*
netapp ontap_select_deploy_administration_utility cpe:2.3:a:netapp:ontap_select_deploy_administration_utility:-:*:*:*:*:*:*:*
netapp snapprotect cpe:2.3:a:netapp:snapprotect:-:*:*:*:*:*:*:*
netapp solidfire cpe:2.3:a:netapp:solidfire:-:*:*:*:*:*:*:*

CVE-2016-5195 の参考情報

URL タグ
http://fortiguard.com/advisory/FG-IR-16-063 Third Party Advisory
http://git.kernel.org/cgit/linux/kernel/git/torvalds/linux.git/commit/?id=19be0eaffa3ac7d8eb6784ad9bdbc7d67ed8e619 Issue Tracking Patch Vendor Advisory
http://kb.juniper.net/InfoCenter/index?page=content&id=JSA10770 Third Party Advisory
http://kb.juniper.net/InfoCenter/index?page=content&id=JSA10774 Third Party Advisory
http://kb.juniper.net/InfoCenter/index?page=content&id=JSA10807 Third Party Advisory
http://lists.opensuse.org/opensuse-security-announce/2016-10/msg00034.html Mailing List
http://lists.opensuse.org/opensuse-security-announce/2016-10/msg00035.html Mailing List
http://lists.opensuse.org/opensuse-security-announce/2016-10/msg00036.html Mailing List
http://lists.opensuse.org/opensuse-security-announce/2016-10/msg00038.html Mailing List
http://lists.opensuse.org/opensuse-security-announce/2016-10/msg00039.html Mailing List
http://lists.opensuse.org/opensuse-security-announce/2016-10/msg00040.html Mailing List
http://lists.opensuse.org/opensuse-security-announce/2016-10/msg00045.html Mailing List
http://lists.opensuse.org/opensuse-security-announce/2016-10/msg00048.html Mailing List
http://lists.opensuse.org/opensuse-security-announce/2016-10/msg00049.html Mailing List
http://lists.opensuse.org/opensuse-security-announce/2016-10/msg00050.html Mailing List
http://lists.opensuse.org/opensuse-security-announce/2016-10/msg00051.html Mailing List
http://lists.opensuse.org/opensuse-security-announce/2016-10/msg00052.html Mailing List
http://lists.opensuse.org/opensuse-security-announce/2016-10/msg00053.html Mailing List
http://lists.opensuse.org/opensuse-security-announce/2016-10/msg00054.html Mailing List
http://lists.opensuse.org/opensuse-security-announce/2016-10/msg00055.html Mailing List
http://lists.opensuse.org/opensuse-security-announce/2016-10/msg00056.html Mailing List
http://lists.opensuse.org/opensuse-security-announce/2016-10/msg00057.html Mailing List
http://lists.opensuse.org/opensuse-security-announce/2016-10/msg00058.html Mailing List
http://lists.opensuse.org/opensuse-security-announce/2016-10/msg00063.html Mailing List
http://lists.opensuse.org/opensuse-security-announce/2016-10/msg00064.html Mailing List
http://lists.opensuse.org/opensuse-security-announce/2016-10/msg00065.html Mailing List
http://lists.opensuse.org/opensuse-security-announce/2016-10/msg00066.html Mailing List
http://lists.opensuse.org/opensuse-security-announce/2016-10/msg00067.html Mailing List
http://lists.opensuse.org/opensuse-security-announce/2016-10/msg00072.html Mailing List
http://lists.opensuse.org/opensuse-security-announce/2016-12/msg00033.html Mailing List
http://lists.opensuse.org/opensuse-security-announce/2016-12/msg00100.html Mailing List
http://lists.opensuse.org/opensuse-security-announce/2020-04/msg00041.html Third Party Advisory
http://packetstormsecurity.com/files/139277/Kernel-Live-Patch-Security-Notice-LSN-0012-1.html Exploit Third Party Advisory VDB Entry
http://packetstormsecurity.com/files/139286/DirtyCow-Linux-Kernel-Race-Condition.html Exploit Third Party Advisory VDB Entry
http://packetstormsecurity.com/files/139287/DirtyCow-Local-Root-Proof-Of-Concept.html Exploit Third Party Advisory VDB Entry
http://packetstormsecurity.com/files/139922/Linux-Kernel-Dirty-COW-PTRACE_POKEDATA-Privilege-Escalation.html Exploit Third Party Advisory VDB Entry
http://packetstormsecurity.com/files/139923/Linux-Kernel-Dirty-COW-PTRACE_POKEDATA-Privilege-Escalation.html Exploit Third Party Advisory VDB Entry
http://packetstormsecurity.com/files/142151/Kernel-Live-Patch-Security-Notice-LSN-0021-1.html Third Party Advisory VDB Entry
http://rhn.redhat.com/errata/RHSA-2016-2098.html Third Party Advisory
http://rhn.redhat.com/errata/RHSA-2016-2105.html Third Party Advisory
http://rhn.redhat.com/errata/RHSA-2016-2106.html Third Party Advisory
http://rhn.redhat.com/errata/RHSA-2016-2107.html Third Party Advisory
http://rhn.redhat.com/errata/RHSA-2016-2110.html Third Party Advisory
http://rhn.redhat.com/errata/RHSA-2016-2118.html Third Party Advisory
http://rhn.redhat.com/errata/RHSA-2016-2120.html Third Party Advisory
http://rhn.redhat.com/errata/RHSA-2016-2124.html Third Party Advisory
http://rhn.redhat.com/errata/RHSA-2016-2126.html Third Party Advisory
http://rhn.redhat.com/errata/RHSA-2016-2127.html Third Party Advisory
http://rhn.redhat.com/errata/RHSA-2016-2128.html Third Party Advisory
http://rhn.redhat.com/errata/RHSA-2016-2132.html Third Party Advisory
http://rhn.redhat.com/errata/RHSA-2016-2133.html Third Party Advisory
http://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20161026-linux Third Party Advisory
http://www.debian.org/security/2016/dsa-3696 Third Party Advisory
http://www.huawei.com/en/psirt/security-advisories/huawei-sa-20161207-01-dirtycow-en Third Party Advisory
http://www.kernel.org/pub/linux/kernel/v4.x/ChangeLog-4.8.3 Release Notes
http://www.openwall.com/lists/oss-security/2016/10/21/1 Mailing List Third Party Advisory
http://www.openwall.com/lists/oss-security/2016/10/26/7 Mailing List Third Party Advisory
http://www.openwall.com/lists/oss-security/2016/10/27/13 Mailing List Third Party Advisory
http://www.openwall.com/lists/oss-security/2016/10/30/1 Mailing List Third Party Advisory
http://www.openwall.com/lists/oss-security/2016/11/03/7 Mailing List Third Party Advisory
http://www.openwall.com/lists/oss-security/2022/03/07/1 Mailing List Third Party Advisory
http://www.openwall.com/lists/oss-security/2022/08/08/1 Mailing List Third Party Advisory
http://www.openwall.com/lists/oss-security/2022/08/08/2 Mailing List Third Party Advisory
http://www.openwall.com/lists/oss-security/2022/08/08/7 Mailing List Third Party Advisory
http://www.openwall.com/lists/oss-security/2022/08/08/8 Mailing List Third Party Advisory
http://www.openwall.com/lists/oss-security/2022/08/09/4 Mailing List Third Party Advisory
http://www.openwall.com/lists/oss-security/2022/08/15/1 Mailing List Third Party Advisory
http://www.oracle.com/technetwork/security-advisory/cpujul2018-4258247.html Patch Third Party Advisory
http://www.securityfocus.com/archive/1/539611/100/0/threaded Broken Link Third Party Advisory VDB Entry
http://www.securityfocus.com/archive/1/540252/100/0/threaded Broken Link Third Party Advisory VDB Entry
http://www.securityfocus.com/archive/1/540344/100/0/threaded Broken Link Third Party Advisory VDB Entry
http://www.securityfocus.com/archive/1/540736/100/0/threaded Broken Link Third Party Advisory VDB Entry
http://www.securityfocus.com/archive/1/archive/1/539611/100/0/threaded Broken Link Third Party Advisory VDB Entry
http://www.securityfocus.com/archive/1/archive/1/540252/100/0/threaded Broken Link Third Party Advisory VDB Entry
http://www.securityfocus.com/archive/1/archive/1/540344/100/0/threaded Broken Link Third Party Advisory VDB Entry
http://www.securityfocus.com/archive/1/archive/1/540736/100/0/threaded Broken Link Third Party Advisory VDB Entry
http://www.securityfocus.com/bid/93793 Broken Link Third Party Advisory VDB Entry
http://www.securitytracker.com/id/1037078 Broken Link Third Party Advisory VDB Entry
http://www.ubuntu.com/usn/USN-3104-1 Third Party Advisory
http://www.ubuntu.com/usn/USN-3104-2 Third Party Advisory
http://www.ubuntu.com/usn/USN-3105-1 Third Party Advisory
http://www.ubuntu.com/usn/USN-3105-2 Third Party Advisory
http://www.ubuntu.com/usn/USN-3106-1 Third Party Advisory
http://www.ubuntu.com/usn/USN-3106-2 Third Party Advisory
http://www.ubuntu.com/usn/USN-3106-3 Third Party Advisory
http://www.ubuntu.com/usn/USN-3106-4 Third Party Advisory
http://www.ubuntu.com/usn/USN-3107-1 Third Party Advisory
http://www.ubuntu.com/usn/USN-3107-2 Third Party Advisory
https://access.redhat.com/errata/RHSA-2017:0372 Broken Link Third Party Advisory
https://access.redhat.com/security/cve/cve-2016-5195 Third Party Advisory
https://access.redhat.com/security/vulnerabilities/2706661 Third Party Advisory
https://bto.bluecoat.com/security-advisory/sa134 Permissions Required Third Party Advisory
https://bugzilla.redhat.com/show_bug.cgi?id=1384344 Exploit Issue Tracking
https://bugzilla.suse.com/show_bug.cgi?id=1004418 Issue Tracking
https://dirtycow.ninja Third Party Advisory
https://github.com/dirtycow/dirtycow.github.io/wiki/PoCs Third Party Advisory
https://github.com/dirtycow/dirtycow.github.io/wiki/VulnerabilityDetails Exploit Third Party Advisory
https://github.com/torvalds/linux/commit/19be0eaffa3ac7d8eb6784ad9bdbc7d67ed8e619 Issue Tracking Patch
https://h20566.www2.hpe.com/hpsc/doc/public/display?docLocale=en_US&docId=emr_na-c05352241 Third Party Advisory
https://h20566.www2.hpe.com/hpsc/doc/public/display?docLocale=en_US&docId=emr_na-hpesbgn03707en_us Third Party Advisory
https://h20566.www2.hpe.com/hpsc/doc/public/display?docLocale=en_US&docId=emr_na-hpesbgn03722en_us Third Party Advisory
https://h20566.www2.hpe.com/hpsc/doc/public/display?docLocale=en_US&docId=emr_na-hpesbgn03742en_us Third Party Advisory
https://h20566.www2.hpe.com/hpsc/doc/public/display?docLocale=en_US&docId=emr_na-hpesbgn03761en_us Third Party Advisory
https://h20566.www2.hpe.com/portal/site/hpsc/public/kb/docDisplay?docId=emr_na-c05341463 Third Party Advisory
https://h20566.www2.hpe.com/portal/site/hpsc/public/kb/docDisplay?docId=emr_na-c05347541 Third Party Advisory
https://h20566.www2.hpe.com/portal/site/hpsc/public/kb/docDisplay?docId=emr_na-c05352241 Third Party Advisory
https://help.ecostruxureit.com/display/public/UADCO8x/StruxureWare+Data+Center+Operation+Software+Vulnerability+Fixes Broken Link Third Party Advisory
https://kc.mcafee.com/corporate/index?page=content&id=SB10176 Broken Link Third Party Advisory
https://kc.mcafee.com/corporate/index?page=content&id=SB10177 Broken Link Third Party Advisory
https://kc.mcafee.com/corporate/index?page=content&id=SB10222 Broken Link Third Party Advisory
https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/E7M62SRP6CZLJ4ZXCRZKV4WPLQBSR7DT/ Release Notes
https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/NWMDLBWMGZKFHMRJ7QUQVCERP5QHDB6W/ Release Notes
https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/W3APRVDVPDBXLH4DC5UKZVCR742MJIM3/ Release Notes
https://people.canonical.com/~ubuntu-security/cve/2016/CVE-2016-5195.html Third Party Advisory
https://security-tracker.debian.org/tracker/CVE-2016-5195 Issue Tracking Third Party Advisory
https://security.netapp.com/advisory/ntap-20161025-0001/ Third Party Advisory
https://security.paloaltonetworks.com/CVE-2016-5195 Third Party Advisory
https://source.android.com/security/bulletin/2016-11-01.html Third Party Advisory
https://source.android.com/security/bulletin/2016-12-01.html Third Party Advisory
https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20181107-vcsd Third Party Advisory
https://www.arista.com/en/support/advisories-notices/security-advisories/1753-security-advisory-0026 Third Party Advisory
https://www.exploit-db.com/exploits/40611/ Exploit Third Party Advisory VDB Entry
https://www.exploit-db.com/exploits/40616/ Exploit Third Party Advisory VDB Entry
https://www.exploit-db.com/exploits/40839/ Exploit Third Party Advisory VDB Entry
https://www.exploit-db.com/exploits/40847/ Third Party Advisory VDB Entry
https://www.kb.cert.org/vuls/id/243144 Third Party Advisory US Government Resource
http://seclists.org/fulldisclosure/2024/Aug/35 Mailing List Third Party Advisory
https://www.cisa.gov/known-exploited-vulnerabilities-catalog?field_cve=CVE-2016-5195 US Government Resource
cvelogic Threat Intelligence