NVD

Id
22156  
Name
CVE-2016-8666  
Description
The IP stack in the Linux kernel before 4.6 allows remote attackers to cause a denial of service (stack consumption and panic) or possibly have unspecified other impact by triggering use of the GRO path for packets with tunnel stacking, as demonstrated by interleaved IPv4 headers and GRE headers, a related issue to CVE-2016-7039.  
Reject
 
CVSS Version
2  
CVSS Score
7.8  
Severity
High  
CVSS Base Score
7.8  
CVSS Impact Subscore
6.9  
CVSS Exploit Subscore
10  
CVSS Vector
(AV:N/AC:L/Au:N/C:N/I:N/A:C)  
Pub Date
2017-01-19  
Published
2016-10-16  
Modified Date
2017-01-06  
Seq
2016-8666  

Actions

Related NVD References

Id NVD Id NVD No. Reference Actions
118253 22156 CVE-2016-8666 http://git.kernel.org/cgit/linux/kernel/git/torvalds/linux.git/commit/?id=fac8e0f579695a3ecbc4d3cac369139d7f819971  View
118254 22156 CVE-2016-8666 RHSA-2017:0004  View
118255 22156 CVE-2016-8666 [oss-security] 20161013 CVE Request: another recursion in GRE  View
118256 22156 CVE-2016-8666 93562  View
118257 22156 CVE-2016-8666 https://bto.bluecoat.com/security-advisory/sa134  View
118258 22156 CVE-2016-8666 https://bugzilla.redhat.com/show_bug.cgi?id=1384991  View
118259 22156 CVE-2016-8666 https://bugzilla.suse.com/show_bug.cgi?id=1001486  View
118260 22156 CVE-2016-8666 https://github.com/torvalds/linux/commit/fac8e0f579695a3ecbc4d3cac369139d7f819971  View

Related JVN

Id Name Title Summary Cveinfo Name Cveinfo Id Nvdinfo Name Nvdinfo Id Cvssv2 Cvssv3 Jvnurl Published Date Last Updated Date Actions
4830 JVNDB-2016-005603 Linux Kernel の IP スタックにおけるサービス運用妨害 (DoS) の脆弱性 Linux Kernel の IP スタックには、サービス運用妨害 (スタックの消費およびパニック) 状態にされるなど、不特定の影響を受ける脆弱性が存在します。 CVE-2016-8666 95173 CVE-2016-8666 22156 7.8 7.5 http://jvndb.jvn.jp/ja/contents/2016/JVNDB-2016-005603.html 2016-03-20 2016-10-25 View