CVE

Id
85492  
CVE No.
CVE-2015-8215  
Status
Candidate  
Description
net/ipv6/addrconf.c in the IPv6 stack in the Linux kernel before 4.0 does not validate attempted changes to the MTU value, which allows context-dependent attackers to cause a denial of service (packet loss) via a value that is (1) smaller than the minimum compliant value or (2) larger than the MTU of an interface, as demonstrated by a Router Advertisement (RA) message that is not validated by a daemon, a different vulnerability than CVE-2015-0272. NOTE: the scope of CVE-2015-0272 is limited to the NetworkManager product.  
Phase
Assigned (20151116)  
Votes
None (candidate not yet proposed)  
Comments
 

Actions

Related CVE References

Id CVE Id CVE No. Reference Actions
753420 85492 CVE-2015-8215 MISC:https://bugzilla.redhat.com/show_bug.cgi?id=1192132  View
753421 85492 CVE-2015-8215 CONFIRM:http://git.kernel.org/cgit/linux/kernel/git/torvalds/linux.git/commit/?id=77751427a1ff25b27d47a4c36b12c3c8667855ac  View
753422 85492 CVE-2015-8215 CONFIRM:https://bugs.launchpad.net/bugs/1500810  View
753423 85492 CVE-2015-8215 CONFIRM:https://bugzilla.novell.com/show_bug.cgi?id=944296  View
753424 85492 CVE-2015-8215 CONFIRM:https://github.com/torvalds/linux/commit/77751427a1ff25b27d47a4c36b12c3c8667855ac  View
753425 85492 CVE-2015-8215 CONFIRM:http://www.oracle.com/technetwork/topics/security/linuxbulletinapr2016-2952096.html  View
753426 85492 CVE-2015-8215 REDHAT:RHSA-2016:0855  View
753427 85492 CVE-2015-8215 URL:http://rhn.redhat.com/errata/RHSA-2016-0855.html  View
753428 85492 CVE-2015-8215 SUSE:SUSE-SU-2016:2074  View
753429 85492 CVE-2015-8215 URL:http://lists.opensuse.org/opensuse-security-announce/2016-08/msg00038.html  View
753430 85492 CVE-2015-8215 SUSE:SUSE-SU-2016:0354  View
753431 85492 CVE-2015-8215 URL:http://lists.opensuse.org/opensuse-security-announce/2016-02/msg00013.html  View
753432 85492 CVE-2015-8215 SUSE:SUSE-SU-2015:2194  View
753433 85492 CVE-2015-8215 URL:http://lists.opensuse.org/opensuse-security-announce/2015-12/msg00005.html  View
753434 85492 CVE-2015-8215 SUSE:SUSE-SU-2015:2292  View
753435 85492 CVE-2015-8215 URL:http://lists.opensuse.org/opensuse-security-announce/2015-12/msg00018.html  View
753436 85492 CVE-2015-8215 SUSE:SUSE-SU-2015:2339  View
753437 85492 CVE-2015-8215 URL:http://lists.opensuse.org/opensuse-security-announce/2015-12/msg00026.html  View
753438 85492 CVE-2015-8215 SUSE:SUSE-SU-2015:2350  View
753439 85492 CVE-2015-8215 URL:http://lists.opensuse.org/opensuse-security-announce/2015-12/msg00031.html  View
753440 85492 CVE-2015-8215 BID:85274  View

Related JVN

Id JVN No. Title Summary CVE No. CVE Id CVSS_v2 CVSS_v3 JVN URL Actions
11163 JVNDB-2015-006483 Dovestones Software AD Self Password Reset に脆弱性 Dovestones Software が提供する AD Self Password Reset は、パスワードのリセットをリクエストしたユーザを正しく検証しないため、攻撃者によって任意のアカウントのパスワードをリセットされる可能性があります。 CVE-2015-8267 85492 7.5 http://jvndb.jvn.jp/ja/contents/2015/JVNDB-2015-006483.html  View