CVE-2015-8787 The nf_nat_redirect_ipv4 function in net/netfilter/nf_nat_redirect.c in the Linux kernel before 4.4 allows remote attackers to cause a denial of service (NULL pointer dereference and system crash) or....
CriticalCVSS 9.8
EPSS 9.2%
- Published
- Updated
- Exploit status
- No public exploit known
Description
The nf_nat_redirect_ipv4 function in net/netfilter/nf_nat_redirect.c in the Linux kernel before 4.4 allows remote attackers to cause a denial of service (NULL pointer dereference and system crash) or possibly have unspecified other impact by sending certain IPv4 packets to an incompletely configured interface, a related issue to CVE-2003-1604.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| debian/linux(Debian:12) | < 4.3.5-1 | 4.3.5-1 |
| debian/linux(Debian:13) | < 4.3.5-1 | 4.3.5-1 |
| debian/linux(Debian:14) | < 4.3.5-1 | 4.3.5-1 |
| Linux kernel | >= 3.19, < 4.1.31 | 4.1.31 |
| Linux kernel | >= 4.2, < 4.4 | 4.4 |
References
- Debian Security Tracker CVE-2015-8787 vendor-advisory
- git.kernel.org issue-tracking patch vendor-advisory
- FEDORA-2016-2f25d12c51 third-party-advisory vendor-advisory
- FEDORA-2016-5d43766e33 third-party-advisory vendor-advisory
- openSUSE-SU-2016:1008 third-party-advisory vendor-advisory
- [oss-security] 20160127 CVE Request: Linux: NULL pointer dereference netfilter/nf_nat_redirect.c in nf_nat_redirect_ipv4 function mailing-list
- www.oracle.com third-party-advisory
- www.oracle.com third-party-advisory
- USN-2889-1 third-party-advisory vendor-advisory
- USN-2889-2 third-party-advisory vendor-advisory
- USN-2890-1 third-party-advisory vendor-advisory
- USN-2890-2 third-party-advisory vendor-advisory
- USN-2890-3 third-party-advisory vendor-advisory
- bugzilla.redhat.com issue-tracking
- github.com issue-tracking patch third-party-advisory