NVD

Id
26547  
Name
CVE-2015-5364  
Description
The (1) udp_recvmsg and (2) udpv6_recvmsg functions in the Linux kernel before 4.0.6 do not properly consider yielding a processor, which allows remote attackers to cause a denial of service (system hang) via incorrect checksums within a UDP packet flood.  
Reject
 
CVSS Version
2  
CVSS Score
7.8  
Severity
High  
CVSS Base Score
7.8  
CVSS Impact Subscore
6.9  
CVSS Exploit Subscore
10  
CVSS Vector
(AV:N/AC:L/Au:N/C:N/I:N/A:C)  
Pub Date
2017-01-19  
Published
2015-08-31  
Modified Date
2016-12-30  
Seq
2015-5364  

Actions

Related NVD References

Id NVD Id NVD No. Reference Actions
140490 26547 CVE-2015-5364 http://git.kernel.org/cgit/linux/kernel/git/torvalds/linux.git/commit/?id=beb39db59d14990e401e235faf66a6b9b31240b0  View
140491 26547 CVE-2015-5364 http://kb.juniper.net/InfoCenter/index?page=content&id=JSA10761  View
140492 26547 CVE-2015-5364 SUSE-SU-2015:1224  View
140493 26547 CVE-2015-5364 SUSE-SU-2015:1324  View
140494 26547 CVE-2015-5364 openSUSE-SU-2015:1382  View
140495 26547 CVE-2015-5364 SUSE-SU-2015:1478  View
140496 26547 CVE-2015-5364 SUSE-SU-2015:1487  View
140497 26547 CVE-2015-5364 SUSE-SU-2015:1488  View
140498 26547 CVE-2015-5364 SUSE-SU-2015:1489  View
140499 26547 CVE-2015-5364 SUSE-SU-2015:1490  View
140500 26547 CVE-2015-5364 SUSE-SU-2015:1491  View
140501 26547 CVE-2015-5364 SUSE-SU-2015:1592  View
140502 26547 CVE-2015-5364 SUSE-SU-2015:1611  View
140503 26547 CVE-2015-5364 RHSA-2015:1778  View
140504 26547 CVE-2015-5364 RHSA-2015:1787  View
140505 26547 CVE-2015-5364 RHSA-2016:0045  View
140506 26547 CVE-2015-5364 RHSA-2016:1096  View
140507 26547 CVE-2015-5364 RHSA-2016:1100  View
140508 26547 CVE-2015-5364 DSA-3313  View
140509 26547 CVE-2015-5364 DSA-3329  View
140510 26547 CVE-2015-5364 http://www.kernel.org/pub/linux/kernel/v4.x/ChangeLog-4.0.6  View
140511 26547 CVE-2015-5364 [oss-security] 20150630 CVE Request: UDP checksum DoS  View
140512 26547 CVE-2015-5364 http://www.oracle.com/technetwork/topics/security/linuxbulletinjan2016-2867209.html  View
140513 26547 CVE-2015-5364 http://www.oracle.com/technetwork/topics/security/linuxbulletinoct2015-2719645.html  View
140514 26547 CVE-2015-5364 75510  View
140515 26547 CVE-2015-5364 USN-2680-1  View
140516 26547 CVE-2015-5364 USN-2681-1  View
140517 26547 CVE-2015-5364 USN-2682-1  View
140518 26547 CVE-2015-5364 USN-2683-1  View
140519 26547 CVE-2015-5364 USN-2684-1  View
140520 26547 CVE-2015-5364 USN-2713-1  View
140521 26547 CVE-2015-5364 USN-2714-1  View
140522 26547 CVE-2015-5364 RHSA-2016:1225  View
140523 26547 CVE-2015-5364 https://bugzilla.redhat.com/show_bug.cgi?id=1239029  View
140524 26547 CVE-2015-5364 https://github.com/torvalds/linux/commit/beb39db59d14990e401e235faf66a6b9b31240b0  View
140525 26547 CVE-2015-5364 https://twitter.com/grsecurity/status/605854034260426753  View

Related JVN

Id Name Title Summary Cveinfo Name Cveinfo Id Nvdinfo Name Nvdinfo Id Cvssv2 Cvssv3 Jvnurl Published Date Last Updated Date Actions
9197 JVNDB-2015-004517 Linux Kernel の udp_recvmsg および udpv6_recvmsg 関数におけるサービス運用妨害 (DoS) の脆弱性 Linux Kernel の (1) udp_recvmsg および (2) udpv6_recvmsg 関数は、プロセッサの切り替えを適切に考慮しないため、サービス運用妨害 (システムハング) 状態にされる脆弱性が存在します。 CVE-2015-5364 82589 CVE-2015-5364 26547 7.8 http://jvndb.jvn.jp/ja/contents/2015/JVNDB-2015-004517.html 2015-06-22 2015-09-01 View