CVE-2016-5104

5.3 mediumEPSS 3.0%

The socket_create function in common/socket.c in libimobiledevice and libusbmuxd allows remote attackers to bypass intended access restrictions and communicate with services on iOS devices by connecting to an IPv4 TCP socket.

Severity

CVSS 3.0

5.3 medium

CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N

EPSS: 3.0% chance of exploitation in the next 30 days; higher than 87% of CVEs (scores of 2026-10-31)
CWE: CWE-284
Published: 2016-06-13
Modified: 2026-06-17
Record from: the NVD, synced 2026-10-19

Affected

canonical:ubuntu_linux
libimobiledevice:libimobiledevice
libimobiledevice:libusbmuxd
opensuse:leap
opensuse:opensuse

References

http://lists.opensuse.org/opensuse-security-announce/2016-06/msg00042.html
http://lists.opensuse.org/opensuse-updates/2016-06/msg00029.html
http://www.openwall.com/lists/oss-security/2016/05/26/1
http://www.openwall.com/lists/oss-security/2016/05/26/6
http://www.ubuntu.com/usn/USN-3026-1

Check your stack JSON