NVD

Id
26549  
Name
CVE-2015-5366  
Description
The (1) udp_recvmsg and (2) udpv6_recvmsg functions in the Linux kernel before 4.0.6 provide inappropriate -EAGAIN return values, which allows remote attackers to cause a denial of service (EPOLLET epoll application read outage) via an incorrect checksum in a UDP packet, a different vulnerability than CVE-2015-5364.  
Reject
 
CVSS Version
2  
CVSS Score
5  
Severity
Medium  
CVSS Base Score
5  
CVSS Impact Subscore
2.9  
CVSS Exploit Subscore
10  
CVSS Vector
(AV:N/AC:L/Au:N/C:N/I:N/A:P)  
Pub Date
2017-01-19  
Published
2015-08-31  
Modified Date
2016-12-30  
Seq
2015-5366  

Actions

Related NVD References

Id NVD Id NVD No. Reference Actions
140528 26549 CVE-2015-5366 http://git.kernel.org/cgit/linux/kernel/git/torvalds/linux.git/commit/?id=beb39db59d14990e401e235faf66a6b9b31240b0  View
140529 26549 CVE-2015-5366 http://kb.juniper.net/InfoCenter/index?page=content&id=JSA10761  View
140530 26549 CVE-2015-5366 SUSE-SU-2015:1224  View
140531 26549 CVE-2015-5366 SUSE-SU-2015:1324  View
140532 26549 CVE-2015-5366 openSUSE-SU-2015:1382  View
140533 26549 CVE-2015-5366 SUSE-SU-2015:1478  View
140534 26549 CVE-2015-5366 SUSE-SU-2015:1487  View
140535 26549 CVE-2015-5366 SUSE-SU-2015:1488  View
140536 26549 CVE-2015-5366 SUSE-SU-2015:1489  View
140537 26549 CVE-2015-5366 SUSE-SU-2015:1490  View
140538 26549 CVE-2015-5366 SUSE-SU-2015:1491  View
140539 26549 CVE-2015-5366 SUSE-SU-2015:1592  View
140540 26549 CVE-2015-5366 SUSE-SU-2015:1611  View
140541 26549 CVE-2015-5366 RHSA-2015:1778  View
140542 26549 CVE-2015-5366 RHSA-2015:1787  View
140543 26549 CVE-2015-5366 RHSA-2016:0045  View
140544 26549 CVE-2015-5366 RHSA-2016:1096  View
140545 26549 CVE-2015-5366 RHSA-2016:1100  View
140546 26549 CVE-2015-5366 DSA-3313  View
140547 26549 CVE-2015-5366 DSA-3329  View
140548 26549 CVE-2015-5366 http://www.kernel.org/pub/linux/kernel/v4.x/ChangeLog-4.0.6  View
140549 26549 CVE-2015-5366 [oss-security] 20150630 CVE Request: UDP checksum DoS  View
140550 26549 CVE-2015-5366 http://www.oracle.com/technetwork/topics/security/linuxbulletinjan2016-2867209.html  View
140551 26549 CVE-2015-5366 http://www.oracle.com/technetwork/topics/security/linuxbulletinoct2015-2719645.html  View
140552 26549 CVE-2015-5366 75510  View
140553 26549 CVE-2015-5366 USN-2680-1  View
140554 26549 CVE-2015-5366 USN-2681-1  View
140555 26549 CVE-2015-5366 USN-2682-1  View
140556 26549 CVE-2015-5366 USN-2683-1  View
140557 26549 CVE-2015-5366 USN-2684-1  View
140558 26549 CVE-2015-5366 USN-2713-1  View
140559 26549 CVE-2015-5366 USN-2714-1  View
140560 26549 CVE-2015-5366 RHSA-2016:1225  View
140561 26549 CVE-2015-5366 https://bugzilla.redhat.com/show_bug.cgi?id=1239029  View
140562 26549 CVE-2015-5366 https://github.com/torvalds/linux/commit/beb39db59d14990e401e235faf66a6b9b31240b0  View

Related JVN

Id Name Title Summary Cveinfo Name Cveinfo Id Nvdinfo Name Nvdinfo Id Cvssv2 Cvssv3 Jvnurl Published Date Last Updated Date Actions
9198 JVNDB-2015-004518 Linux Kernel の udp_recvmsg および udpv6_recvmsg 関数におけるサービス運用妨害 (DoS) の脆弱性 Linux Kernel の (1) udp_recvmsg および (2) udpv6_recvmsg 関数は、不適切な -EAGAIN の戻り値を返すため、サービス運用妨害 (EPOLLET epoll のアプリケーションの読み込み停止) 状態にされる脆弱性が存在します。 CVE-2015-5366 82591 CVE-2015-5366 26549 5 http://jvndb.jvn.jp/ja/contents/2015/JVNDB-2015-004518.html 2015-06-22 2015-09-01 View