CVE-2016-10229 udp.c in the Linux kernel before 4.5 allows remote attackers to execute arbitrary code via UDP traffic that triggers an unsafe second checksum calculation during execution of a recv system call with t...
CriticalCVSS 9.8
EPSS 12.9%
- Published
- Updated
- Exploit status
- No public exploit known
Description
udp.c in the Linux kernel before 4.5 allows remote attackers to execute arbitrary code via UDP traffic that triggers an unsafe second checksum calculation during execution of a recv system call with the MSG_PEEK flag.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| debian/linux(Debian:12) | < 4.5.1-1 | 4.5.1-1 |
| debian/linux(Debian:13) | < 4.5.1-1 | 4.5.1-1 |
| debian/linux(Debian:14) | < 4.5.1-1 | 4.5.1-1 |
| Linux kernel | >= 3.2, < 3.2.76 | 3.2.76 |
| Linux kernel | >= 3.3, < 3.4.113 | 3.4.113 |
| Linux kernel | >= 3.5, < 3.10.103 | 3.10.103 |
| Linux kernel | >= 3.11, < 3.12.53 | 3.12.53 |
| Linux kernel | >= 3.13, < 3.14.77 | 3.14.77 |
| Linux kernel | >= 3.15, < 3.16.35 | 3.16.35 |
| Linux kernel | >= 3.17, < 3.18.45 | 3.18.45 |
| Linux kernel | >= 3.19, < 4.1.40 | 4.1.40 |
| Linux kernel | >= 4.2, < 4.4.21 | 4.4.21 |
| Google Android | <= 7.1.1 | No fix listed |
| alpine/linux-grsec(Alpine:v3.3) | < 4.1.39-r0 | 4.1.39-r0 |
References
- Debian Security Tracker CVE-2016-10229 vendor-advisory
- git.kernel.org issue-tracking patch third-party-advisory
- source.android.com patch third-party-advisory
- 97397 third-party-advisory vdb-entry
- 1038201 third-party-advisory vdb-entry
- github.com issue-tracking patch third-party-advisory
- security.paloaltonetworks.com third-party-advisory
- security.netapp.com
- security.alpinelinux.org vendor-advisory
- bugs.debian.org issue-tracking