NVD

Id
20907  
Name
CVE-2016-5696  
Description
net/ipv4/tcp_input.c in the Linux kernel before 4.7 does not properly determine the rate of challenge ACK segments, which makes it easier for remote attackers to hijack TCP sessions via a blind in-window attack.  
Reject
 
CVSS Version
2  
CVSS Score
5.8  
Severity
Medium  
CVSS Base Score
5.8  
CVSS Impact Subscore
4.9  
CVSS Exploit Subscore
8.6  
CVSS Vector
(AV:N/AC:M/Au:N/C:N/I:P/A:P)  
Pub Date
2017-01-19  
Published
2016-08-06  
Modified Date
2016-12-23  
Seq
2016-5696  

Actions

Related NVD References

Id NVD Id NVD No. Reference Actions
113876 20907 CVE-2016-5696 http://git.kernel.org/cgit/linux/kernel/git/torvalds/linux.git/commit/?id=75ff39ccc1bd5d3c455b6822ab09e533c551f758  View
113877 20907 CVE-2016-5696 RHSA-2016:1631  View
113878 20907 CVE-2016-5696 RHSA-2016:1632  View
113879 20907 CVE-2016-5696 RHSA-2016:1633  View
113880 20907 CVE-2016-5696 RHSA-2016:1657  View
113881 20907 CVE-2016-5696 RHSA-2016:1664  View
113882 20907 CVE-2016-5696 RHSA-2016:1814  View
113883 20907 CVE-2016-5696 RHSA-2016:1815  View
113884 20907 CVE-2016-5696 http://source.android.com/security/bulletin/2016-10-01.html  View
113885 20907 CVE-2016-5696 [oss-security] 20160712 Re: CVE-2016-5389: linux kernel - challange ack information leak.  View
113886 20907 CVE-2016-5696 http://www.oracle.com/technetwork/topics/security/linuxbulletinjul2016-3090544.html  View
113887 20907 CVE-2016-5696 http://www.oracle.com/technetwork/topics/security/ovmbulletinjul2016-3090546.html  View
113888 20907 CVE-2016-5696 http://www.prnewswire.com/news-releases/mitnick-attack-reappears-at-geekpwn-macau-contest-300270779.html  View
113889 20907 CVE-2016-5696 91704  View
113890 20907 CVE-2016-5696 1036625  View
113891 20907 CVE-2016-5696 USN-3070-1  View
113892 20907 CVE-2016-5696 USN-3070-2  View
113893 20907 CVE-2016-5696 USN-3070-3  View
113894 20907 CVE-2016-5696 USN-3070-4  View
113895 20907 CVE-2016-5696 USN-3071-1  View
113896 20907 CVE-2016-5696 USN-3071-2  View
113897 20907 CVE-2016-5696 USN-3072-1  View
113898 20907 CVE-2016-5696 USN-3072-2  View
113899 20907 CVE-2016-5696 https://bto.bluecoat.com/security-advisory/sa131  View
113900 20907 CVE-2016-5696 https://bugzilla.redhat.com/show_bug.cgi?id=1354708  View
113901 20907 CVE-2016-5696 https://github.com/Gnoxter/mountain_goat  View
113902 20907 CVE-2016-5696 https://github.com/torvalds/linux/commit/75ff39ccc1bd5d3c455b6822ab09e533c551f758  View
113903 20907 CVE-2016-5696 https://kc.mcafee.com/corporate/index?page=content&id=SB10167  View
113904 20907 CVE-2016-5696 https://www.usenix.org/system/files/conference/usenixsecurity16/sec16_paper_cao.pdf  View

Related JVN

Id Name Title Summary Cveinfo Name Cveinfo Id Nvdinfo Name Nvdinfo Id Cvssv2 Cvssv3 Jvnurl Published Date Last Updated Date Actions
3602 JVNDB-2016-004375 Linux Kernel の net/ipv4/tcp_input.c における TCP セッションをハイジャックされる脆弱性 Linux Kernel の net/ipv4/tcp_input.c は、challenge ACK セグメントの割合を適切に判定しないため、TCP セッションをハイジャックされる脆弱性が存在します。 CVE-2016-5696 92202 CVE-2016-5696 20907 5.8 4.8 http://jvndb.jvn.jp/ja/contents/2016/JVNDB-2016-004375.html 2016-07-10 2016-10-27 View