CVE-2016-5104 - CVE House
Back to Database
Status published Medium CVE-2016-5104

The socket_create function in common/socket.c in libimobiledevice and libusbmuxd allows...

Vulnerability Description

The socket_create function in common/socket.c in libimobiledevice and libusbmuxd allows remote attackers to bypass intended access restrictions and communicate with services on iOS devices by connecting to an IPv4 TCP socket.

Impact Analysis

Refer to official advisory for detailed impact metrics.

Remediation

Ensure systems are updated to the latest vendor-supplied patch levels.

THREAT MONITOR

Am I Vulnerable?

Launch our assessment wizard to check if your infrastructure is exposed to • CVE-2016-5104

Credits & Attribution

No credits recorded in the NVD database.

References

More from libimobiledevice

View All →
CVE-2025-66004
Local privilege escalation in usbmuxd from arbitrary local user to usbmux
Medium 5.1
CVE-2017-7982
Integer overflow in the plist_from_bin function in bplist.c in libimobiledevice/libplist...
Medium 5.5
CVE-2017-5836
The plist_free_data function in plist.c in libplist allows attackers to...
High 7.5
CVE-2017-5835
libplist allows attackers to cause a denial of service (large...
High 7.5
CVE-2017-5834
The parse_dict_node function in bplist.c in libplist allows attackers to...
Medium 5.5

Affected Vendor

libimobiledevice

View all reports →

Affected Software

libimobiledevice, libusbmuxd, ubuntu linux, leap, opensuse
Vulnerable Versions:
0, 14.04, 15.10, 16.04, 42.1, 13.2

Timeline

Official Publish: June 13th, 2016
Last Modified: August 6th, 2024
Added to House: July 20th, 2026

CVSS Vectors

V3: CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N

Weaknesses (CWE)

No CWE data available

MITRE ATT&CK TTPs

No associated TTPs found for this vulnerability.