NVD

Id
22149  
Name
CVE-2016-8645  
Description
The TCP stack in the Linux kernel before 4.8.10 mishandles skb truncation, which allows local users to cause a denial of service (system crash) via a crafted application that makes sendto system calls, related to net/ipv4/tcp_ipv4.c and net/ipv6/tcp_ipv6.c.  
Reject
 
CVSS Version
2  
CVSS Score
4.9  
Severity
Medium  
CVSS Base Score
4.9  
CVSS Impact Subscore
6.9  
CVSS Exploit Subscore
3.9  
CVSS Vector
(AV:L/AC:L/Au:N/C:N/I:N/A:C)  
Pub Date
2017-01-19  
Published
2016-11-27  
Modified Date
2016-12-02  
Seq
2016-8645  

Actions

Related NVD References

Id NVD Id NVD No. Reference Actions
118191 22149 CVE-2016-8645 http://git.kernel.org/cgit/linux/kernel/git/torvalds/linux.git/commit/?id=ac6e780070e30e4c35bd395acfe9191e6268bdd3  View
118192 22149 CVE-2016-8645 http://www.kernel.org/pub/linux/kernel/v4.x/ChangeLog-4.8.10  View
118193 22149 CVE-2016-8645 [oss-security] 20161111 CVE-2016-8645: linux kernel: net: a BUG() statement can be hit in net/ipv4/tcp_input.c  View
118194 22149 CVE-2016-8645 [oss-security] 20161130 Re: CVE-2016-8645: linux kernel: net: a BUG() statement can be hit in net/ipv4/tcp_input.c  View
118195 22149 CVE-2016-8645 94264  View
118196 22149 CVE-2016-8645 https://bugzilla.redhat.com/show_bug.cgi?id=1393904  View
118197 22149 CVE-2016-8645 https://github.com/torvalds/linux/commit/ac6e780070e30e4c35bd395acfe9191e6268bdd3  View

Related JVN

Id Name Title Summary Cveinfo Name Cveinfo Id Nvdinfo Name Nvdinfo Id Cvssv2 Cvssv3 Jvnurl Published Date Last Updated Date Actions
5263 JVNDB-2016-006036 Linux Kernel の TCP スタックにおけるサービス運用妨害 (DoS) の脆弱性 Linux Kernel の TCP スタックは、skb トランケーションを誤って処理するため、サービス運用妨害 (システムクラッシュ) 状態にされる脆弱性が存在します。 CVE-2016-8645 95152 CVE-2016-8645 22149 4.9 5.5 http://jvndb.jvn.jp/ja/contents/2016/JVNDB-2016-006036.html 2016-11-21 2016-11-30 View