PT-2015-6870 · Linux+5 · Linux Kernel+5

Martin Prpič · CVE-2015-5364 · Publicado 2015-06-23 · Atualizado 2023-02-02

Positive Technologies (AI Summary)

CVSS v2.0

7.8

Alta

Vetor base

AV:N/AC:L/Au:N/C:N/I:N/A:C

Name of the Vulnerable Software and Affected Versions Linux kernel versions prior to 4.0.6

Description The issue concerns the udp recvmsg and udpv6 recvmsg functions in the Linux kernel, which do not properly consider yielding a processor. This allows remote attackers to cause a denial of service, resulting in a system hang, by sending a flood of UDP packets with incorrect checksums.

Recommendations For Linux kernel versions prior to 4.0.6, update to version 4.0.6 or later to resolve the issue. As a temporary workaround, consider restricting access to the vulnerable functions udp recvmsg and udpv6 recvmsg to minimize the risk of exploitation.

Exploit

Correção

DoS

Enumeração de Fraquezas

CWE-399

Identificadores relacionados

ALT-PU-2015-1564

ALT-PU-2015-1568

CESA-2015_1623

CESA-2015_1778

CVE-2015-5364

DLA-310-1

DSA-3313-1

DSA-3329-1

OPENSUSE-SU-2015_1382-1

OPENSUSE-SU-2016_0301-1

RHSA-2015:1623

RHSA-2015:1778

RHSA-2015:1787

RHSA-2015:1788

RHSA-2015_1623

RHSA-2015_1778

RHSA-2015_1788

RHSA-2016:0045

RHSA-2016:1096

RHSA-2016:1100

RHSA-2016:1225

RHSA-2016_0045

SUSE-SU-2015:1224-1

SUSE-SU-2015:1324-1

SUSE-SU-2015:1478-1

SUSE-SU-2015:1487-1

SUSE-SU-2015:1488-1

SUSE-SU-2015:1489-1

SUSE-SU-2015:1490-1

SUSE-SU-2015:1491-1

SUSE-SU-2015:1592-1

SUSE-SU-2015:1611-1

SUSE-SU-2015:1678-1

SUSE-SU-2015:2167-1

USN-2680-1

USN-2681-1

USN-2682-1

USN-2683-1

USN-2684-1

USN-2685-1

USN-2713-1

USN-2714-1

Produtos afetados

Alt Linux

Centos

Linux Kernel

Red Hat

Suse

Ubuntu

Referências · 332

• 🔥 https://github.com/fi01/CVE-2015-3636 · Exploit
• 🔥 https://github.com/android-rooting-tools/libpingpong_exploit · Exploit
• 🔥 https://github.com/panyu6325/CVE-2015-1805 · Exploit
• 🔥 https://github.com/nardholio/cve-2016-0728 · Exploit
• 🔥 https://github.com/a7vinx/CVE-2015-3636 · Exploit
• 🔥 https://github.com/askk/libping_unhash_exploit_POC · Exploit
• 🔥 https://github.com/Kagami/docker_cve-2015-2925 · Exploit
• 🔥 https://github.com/bittorrent3389/cve-2016-0728 · Exploit
• 🔥 https://github.com/betalphafai/cve-2015-3636_crash · Exploit
• 🔥 https://github.com/FloatingGuy/cve-2015-1805 · Exploit
• 🔥 https://github.com/neuschaefer/cve-2016-0728-testbed · Exploit
• 🔥 https://github.com/ireshchaminda1/Android-Privilege-Escalation-Remote-Access-Vulnerability-CVE-2015-1805 · Exploit
• 🔥 https://github.com/geekben/cve-collections/blob/master/cve20160728poc.c · Exploit
• https://github.com/torvalds/linux/commit/beb39db59d14990e401e235faf66a6b9b31240b0 · Nota
• https://bugzilla.suse.com/932793 · Nota