VulnerableCode Vulnerability Details

Search for vulnerabilities

Vulnerability details: VCID-whh2-jeny-tffa

Essentials
Severities (50)
References (41)
Severity details (28)
Exploits (0)
EPSS
History (1)

Vulnerability ID	VCID-whh2-jeny-tffa
Aliases	CVE-2016-3508
Summary
Status	Published
Exploitability	0.5
Weighted Severity	4.8
Risk	2.4
Affected and Fixed Packages	Package Details

Weaknesses (1)

CWE-770

Allocation of Resources Without Limits or Throttling

System	Score	Found at
ssvc	Track	http://lists.opensuse.org/opensuse-security-announce/2016-08/msg00011.html
ssvc	Track	http://lists.opensuse.org/opensuse-security-announce/2016-08/msg00024.html
ssvc	Track	http://lists.opensuse.org/opensuse-security-announce/2016-08/msg00032.html
ssvc	Track	http://lists.opensuse.org/opensuse-security-announce/2016-08/msg00033.html
ssvc	Track	http://lists.opensuse.org/opensuse-security-announce/2016-08/msg00034.html
ssvc	Track	http://lists.opensuse.org/opensuse-security-announce/2016-08/msg00035.html
ssvc	Track	http://lists.opensuse.org/opensuse-updates/2016-08/msg00028.html
ssvc	Track	http://rhn.redhat.com/errata/RHSA-2016-1504.html
ssvc	Track	http://rhn.redhat.com/errata/RHSA-2016-1776.html
ssvc	Track	https://access.redhat.com/errata/RHSA-2016:1458
ssvc	Track	https://access.redhat.com/errata/RHSA-2016:1475
ssvc	Track	https://access.redhat.com/errata/RHSA-2016:1476
ssvc	Track	https://access.redhat.com/errata/RHSA-2016:1477
cvssv3	5.3	https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2016-3508.json
epss	0.05139	https://api.first.org/data/v1/epss?cve=CVE-2016-3508
epss	0.05139	https://api.first.org/data/v1/epss?cve=CVE-2016-3508
epss	0.05139	https://api.first.org/data/v1/epss?cve=CVE-2016-3508
epss	0.05139	https://api.first.org/data/v1/epss?cve=CVE-2016-3508
epss	0.05139	https://api.first.org/data/v1/epss?cve=CVE-2016-3508
epss	0.05139	https://api.first.org/data/v1/epss?cve=CVE-2016-3508
epss	0.05139	https://api.first.org/data/v1/epss?cve=CVE-2016-3508
epss	0.05139	https://api.first.org/data/v1/epss?cve=CVE-2016-3508
epss	0.05139	https://api.first.org/data/v1/epss?cve=CVE-2016-3508
epss	0.05636	https://api.first.org/data/v1/epss?cve=CVE-2016-3508
epss	0.05636	https://api.first.org/data/v1/epss?cve=CVE-2016-3508
epss	0.05636	https://api.first.org/data/v1/epss?cve=CVE-2016-3508
epss	0.05636	https://api.first.org/data/v1/epss?cve=CVE-2016-3508
epss	0.05636	https://api.first.org/data/v1/epss?cve=CVE-2016-3508
epss	0.05636	https://api.first.org/data/v1/epss?cve=CVE-2016-3508
epss	0.05636	https://api.first.org/data/v1/epss?cve=CVE-2016-3508
epss	0.05636	https://api.first.org/data/v1/epss?cve=CVE-2016-3508
epss	0.05636	https://api.first.org/data/v1/epss?cve=CVE-2016-3508
epss	0.05636	https://api.first.org/data/v1/epss?cve=CVE-2016-3508
epss	0.05636	https://api.first.org/data/v1/epss?cve=CVE-2016-3508
epss	0.05636	https://api.first.org/data/v1/epss?cve=CVE-2016-3508
epss	0.05636	https://api.first.org/data/v1/epss?cve=CVE-2016-3508
cvssv2	4.3	https://ftp.suse.com/pub/projects/security/yaml/suse-cvss-scores.yaml
ssvc	Track	https://kc.mcafee.com/corporate/index?page=content&id=SB10166
ssvc	Track	https://security.gentoo.org/glsa/201610-08
ssvc	Track	https://security.gentoo.org/glsa/201701-43
ssvc	Track	https://security.netapp.com/advisory/ntap-20160721-0001/
ssvc	Track	http://www.debian.org/security/2016/dsa-3641
ssvc	Track	http://www.oracle.com/technetwork/security-advisory/cpujul2016-2881720.html
ssvc	Track	http://www.oracle.com/technetwork/topics/security/linuxbulletinjul2016-3090544.html
ssvc	Track	http://www.securityfocus.com/bid/91787
ssvc	Track	http://www.securityfocus.com/bid/91972
ssvc	Track	http://www.securitytracker.com/id/1036365
ssvc	Track	http://www.ubuntu.com/usn/USN-3043-1
ssvc	Track	http://www.ubuntu.com/usn/USN-3062-1
ssvc	Track	http://www.ubuntu.com/usn/USN-3077-1

Reference id	Reference type	URL
		https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2016-3508.json
		https://api.first.org/data/v1/epss?cve=CVE-2016-3508
		https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-3458
		https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-3500
		https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-3508
		https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-3550
		https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-3598
		https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-3606
		https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-3610
		https://ftp.suse.com/pub/projects/security/yaml/suse-cvss-scores.yaml
1036365		http://www.securitytracker.com/id/1036365
1357015		https://bugzilla.redhat.com/show_bug.cgi?id=1357015
201610-08		https://security.gentoo.org/glsa/201610-08
201701-43		https://security.gentoo.org/glsa/201701-43
91787		http://www.securityfocus.com/bid/91787
91972		http://www.securityfocus.com/bid/91972
dsa-3641		http://www.debian.org/security/2016/dsa-3641
index?page=content&id=SB10166		https://kc.mcafee.com/corporate/index?page=content&id=SB10166
linuxbulletinjul2016-3090544.html		http://www.oracle.com/technetwork/topics/security/linuxbulletinjul2016-3090544.html
msg00011.html		http://lists.opensuse.org/opensuse-security-announce/2016-08/msg00011.html
msg00024.html		http://lists.opensuse.org/opensuse-security-announce/2016-08/msg00024.html
msg00028.html		http://lists.opensuse.org/opensuse-updates/2016-08/msg00028.html
msg00032.html		http://lists.opensuse.org/opensuse-security-announce/2016-08/msg00032.html
msg00033.html		http://lists.opensuse.org/opensuse-security-announce/2016-08/msg00033.html
msg00034.html		http://lists.opensuse.org/opensuse-security-announce/2016-08/msg00034.html
msg00035.html		http://lists.opensuse.org/opensuse-security-announce/2016-08/msg00035.html
ntap-20160721-0001		https://security.netapp.com/advisory/ntap-20160721-0001/
RHSA-2016:1458		https://access.redhat.com/errata/RHSA-2016:1458
RHSA-2016:1475		https://access.redhat.com/errata/RHSA-2016:1475
RHSA-2016:1476		https://access.redhat.com/errata/RHSA-2016:1476
RHSA-2016:1477		https://access.redhat.com/errata/RHSA-2016:1477
RHSA-2016:1504		https://access.redhat.com/errata/RHSA-2016:1504
RHSA-2016-1504.html		http://rhn.redhat.com/errata/RHSA-2016-1504.html
RHSA-2016:1776		https://access.redhat.com/errata/RHSA-2016:1776
RHSA-2016-1776.html		http://rhn.redhat.com/errata/RHSA-2016-1776.html
USN-3043-1		https://usn.ubuntu.com/3043-1/
USN-3043-1		http://www.ubuntu.com/usn/USN-3043-1
USN-3062-1		https://usn.ubuntu.com/3062-1/
USN-3062-1		http://www.ubuntu.com/usn/USN-3062-1
USN-3077-1		https://usn.ubuntu.com/3077-1/
USN-3077-1		http://www.ubuntu.com/usn/USN-3077-1

No exploits are available.

Vector: SSVCv2/E:N/A:Y/T:P/P:M/B:A/M:M/D:T/2024-10-11T20:11:29Z/ Found at http://lists.opensuse.org/opensuse-security-announce/2016-08/msg00011.html

Vector: SSVCv2/E:N/A:Y/T:P/P:M/B:A/M:M/D:T/2024-10-11T20:11:29Z/ Found at http://lists.opensuse.org/opensuse-security-announce/2016-08/msg00024.html

Vector: SSVCv2/E:N/A:Y/T:P/P:M/B:A/M:M/D:T/2024-10-11T20:11:29Z/ Found at http://lists.opensuse.org/opensuse-security-announce/2016-08/msg00032.html

Vector: SSVCv2/E:N/A:Y/T:P/P:M/B:A/M:M/D:T/2024-10-11T20:11:29Z/ Found at http://lists.opensuse.org/opensuse-security-announce/2016-08/msg00033.html

Vector: SSVCv2/E:N/A:Y/T:P/P:M/B:A/M:M/D:T/2024-10-11T20:11:29Z/ Found at http://lists.opensuse.org/opensuse-security-announce/2016-08/msg00034.html

Vector: SSVCv2/E:N/A:Y/T:P/P:M/B:A/M:M/D:T/2024-10-11T20:11:29Z/ Found at http://lists.opensuse.org/opensuse-security-announce/2016-08/msg00035.html

Vector: SSVCv2/E:N/A:Y/T:P/P:M/B:A/M:M/D:T/2024-10-11T20:11:29Z/ Found at http://lists.opensuse.org/opensuse-updates/2016-08/msg00028.html

Vector: SSVCv2/E:N/A:Y/T:P/P:M/B:A/M:M/D:T/2024-10-11T20:11:29Z/ Found at http://rhn.redhat.com/errata/RHSA-2016-1504.html

Vector: SSVCv2/E:N/A:Y/T:P/P:M/B:A/M:M/D:T/2024-10-11T20:11:29Z/ Found at http://rhn.redhat.com/errata/RHSA-2016-1776.html

Vector: SSVCv2/E:N/A:Y/T:P/P:M/B:A/M:M/D:T/2024-10-11T20:11:29Z/ Found at https://access.redhat.com/errata/RHSA-2016:1458

Vector: SSVCv2/E:N/A:Y/T:P/P:M/B:A/M:M/D:T/2024-10-11T20:11:29Z/ Found at https://access.redhat.com/errata/RHSA-2016:1475

Vector: SSVCv2/E:N/A:Y/T:P/P:M/B:A/M:M/D:T/2024-10-11T20:11:29Z/ Found at https://access.redhat.com/errata/RHSA-2016:1476

Vector: SSVCv2/E:N/A:Y/T:P/P:M/B:A/M:M/D:T/2024-10-11T20:11:29Z/ Found at https://access.redhat.com/errata/RHSA-2016:1477

Vector: CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L Found at https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2016-3508.json

Attack Vector (AV)	Attack Complexity (AC)	Privileges Required (PR)	User Interaction (UI)	Scope (S)	Confidentiality Impact (C)	Integrity Impact (I)	Availability Impact (A)
network adjacent_network local physical	low high	none low high	none required	unchanged changed	high low none	high low none	high low none

Attack Vector (AV)

Attack Complexity (AC)

Privileges Required (PR)

User Interaction (UI)

Scope (S)

Confidentiality Impact (C)

Integrity Impact (I)

Availability Impact (A)

network

adjacent_network

local

physical

low

high

none

low

high

none

required

unchanged

changed

high

low

none

high

low

none

high

low

none

Vector: AV:N/AC:M/Au:N/C:N/I:N/A:P Found at https://ftp.suse.com/pub/projects/security/yaml/suse-cvss-scores.yaml

Exploitability (E)	Access Vector (AV)	Access Complexity (AC)	Authentication (Au)	Confidentiality Impact (C)	Integrity Impact (I)	Availability Impact (A)
high functional unproven proof_of_concept not_defined	local adjacent_network network	high medium low	multiple single none	none partial complete	none partial complete	none partial complete

Exploitability (E)

Access Vector (AV)

Access Complexity (AC)

Authentication (Au)

Confidentiality Impact (C)

Integrity Impact (I)

Availability Impact (A)

high

functional

unproven

proof_of_concept

not_defined

local

adjacent_network

network

high

medium

low

multiple

single

none

partial

complete

none

partial

complete

none

partial

complete

Vector: SSVCv2/E:N/A:Y/T:P/P:M/B:A/M:M/D:T/2024-10-11T20:11:29Z/ Found at https://kc.mcafee.com/corporate/index?page=content&id=SB10166

Vector: SSVCv2/E:N/A:Y/T:P/P:M/B:A/M:M/D:T/2024-10-11T20:11:29Z/ Found at https://security.gentoo.org/glsa/201610-08

Vector: SSVCv2/E:N/A:Y/T:P/P:M/B:A/M:M/D:T/2024-10-11T20:11:29Z/ Found at https://security.gentoo.org/glsa/201701-43

Vector: SSVCv2/E:N/A:Y/T:P/P:M/B:A/M:M/D:T/2024-10-11T20:11:29Z/ Found at https://security.netapp.com/advisory/ntap-20160721-0001/

Vector: SSVCv2/E:N/A:Y/T:P/P:M/B:A/M:M/D:T/2024-10-11T20:11:29Z/ Found at http://www.debian.org/security/2016/dsa-3641

Vector: SSVCv2/E:N/A:Y/T:P/P:M/B:A/M:M/D:T/2024-10-11T20:11:29Z/ Found at http://www.oracle.com/technetwork/security-advisory/cpujul2016-2881720.html

Vector: SSVCv2/E:N/A:Y/T:P/P:M/B:A/M:M/D:T/2024-10-11T20:11:29Z/ Found at http://www.oracle.com/technetwork/topics/security/linuxbulletinjul2016-3090544.html

Vector: SSVCv2/E:N/A:Y/T:P/P:M/B:A/M:M/D:T/2024-10-11T20:11:29Z/ Found at http://www.securityfocus.com/bid/91787

Vector: SSVCv2/E:N/A:Y/T:P/P:M/B:A/M:M/D:T/2024-10-11T20:11:29Z/ Found at http://www.securityfocus.com/bid/91972

Vector: SSVCv2/E:N/A:Y/T:P/P:M/B:A/M:M/D:T/2024-10-11T20:11:29Z/ Found at http://www.securitytracker.com/id/1036365

Vector: SSVCv2/E:N/A:Y/T:P/P:M/B:A/M:M/D:T/2024-10-11T20:11:29Z/ Found at http://www.ubuntu.com/usn/USN-3043-1

Vector: SSVCv2/E:N/A:Y/T:P/P:M/B:A/M:M/D:T/2024-10-11T20:11:29Z/ Found at http://www.ubuntu.com/usn/USN-3062-1

Vector: SSVCv2/E:N/A:Y/T:P/P:M/B:A/M:M/D:T/2024-10-11T20:11:29Z/ Found at http://www.ubuntu.com/usn/USN-3077-1

Exploit Prediction Scoring System (EPSS)

Percentile	0.89472
EPSS Score	0.05139
Published At	Sept. 9, 2025, 12:55 p.m.

Date	Actor	Action	Source	VulnerableCode Version
2025-07-31T08:36:50.643590+00:00	Ubuntu USN Importer	Import	https://usn.ubuntu.com/3062-1/	37.0.0