This page tracks the Debian fix status. The vulnerability itself is described on the main CVE page.
View CVE-2016-5104 →
DEBIAN-CVE-2016-5104
The socket_create function in common/socket.c in libimobiledevice and libusbmuxd allows remote attackers to bypass intended access restrictions and co...
Original description
The description as published by the source.
The socket_create function in common/socket.c in libimobiledevice and libusbmuxd allows remote attackers to bypass intended access restrictions and communicate with services on iOS devices by connecting to an IPv4 TCP socket.
Source: OSV.dev (Open Source Vulnerabilities) OSV
Affected packages
Debian:12
libimobiledevice
[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.2.0+dfsg-3"}]}]
Debian:13
libimobiledevice
[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.2.0+dfsg-3"}]}]
Debian:14
libimobiledevice
[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.2.0+dfsg-3"}]}]
Debian:12
libusbmuxd
[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.0.10-3"}]}]
Debian:13
libusbmuxd
[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.0.10-3"}]}]
Debian:14
libusbmuxd
[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.0.10-3"}]}]
References
- advisory security-tracker.debian.org