PT-2015-6872 · Linux+5 · Linux Kernel+5

Martin Prpič · Published 2015-06-23 · Updated 2018-01-05 · CVE-2015-5366

Positive Technologies (AI Summary)

CVSS v2.0

5.0

Medium

Base vector

AV:N/AC:L/Au:N/C:N/I:N/A:P

Name of the Vulnerable Software and Affected Versions Linux kernel versions prior to 4.0.6

Description The issue allows remote attackers to cause a denial of service, specifically an EPOLLET epoll application read outage, via an incorrect checksum in a UDP packet. This is achieved through the udp recvmsg and udpv6 recvmsg functions in the Linux kernel.

Recommendations For Linux kernel versions prior to 4.0.6, update to version 4.0.6 or later to resolve the issue.

Exploit

Fix

DoS

Weakness Enumeration

CWE-399

Related Identifiers

ALT-PU-2015-1564

ALT-PU-2015-1849

CESA-2015_1623

CESA-2015_1778

CVE-2015-5366

DLA-310-1

DSA-3313-1

DSA-3329-1

OPENSUSE-SU-2015_1382-1

OPENSUSE-SU-2016_0301-1

RHSA-2015:1623

RHSA-2015:1778

RHSA-2015:1787

RHSA-2015:1788

RHSA-2015_1623

RHSA-2015_1778

RHSA-2015_1788

RHSA-2016:0045

RHSA-2016:1096

RHSA-2016:1100

RHSA-2016:1225

RHSA-2016_0045

SUSE-SU-2015:1224-1

SUSE-SU-2015:1324-1

SUSE-SU-2015:1478-1

SUSE-SU-2015:1487-1

SUSE-SU-2015:1488-1

SUSE-SU-2015:1489-1

SUSE-SU-2015:1490-1

SUSE-SU-2015:1491-1

SUSE-SU-2015:1592-1

SUSE-SU-2015:1611-1

SUSE-SU-2015:1678-1

SUSE-SU-2015:2167-1

USN-2680-1

USN-2681-1

USN-2682-1

USN-2683-1

USN-2684-1

USN-2685-1

USN-2713-1

USN-2714-1

Affected Products

Alt Linux

Centos

Linux Kernel

Red Hat

Suse

Ubuntu

References · 338

• 🔥 https://github.com/rapid7/metasploit-framework/blob/master/modules/exploits/linux/local/overlayfs_priv_esc.rb · Exploit
• 🔥 https://github.com/fi01/CVE-2015-3636 · Exploit
• 🔥 https://github.com/android-rooting-tools/libpingpong_exploit · Exploit
• 🔥 https://github.com/panyu6325/CVE-2015-1805 · Exploit
• 🔥 https://github.com/nardholio/cve-2016-0728 · Exploit
• 🔥 https://github.com/a7vinx/CVE-2015-3636 · Exploit
• 🔥 https://github.com/askk/libping_unhash_exploit_POC · Exploit
• 🔥 https://github.com/Kagami/docker_cve-2015-2925 · Exploit
• 🔥 https://github.com/hhj4ck/CVE-2016-2067 · Exploit
• 🔥 https://github.com/bittorrent3389/cve-2016-0728 · Exploit
• 🔥 https://github.com/x1ns4n3/CVE-2015-1328-GoldenEye · Exploit
• 🔥 https://github.com/elit3pwner/CVE-2015-1328-GoldenEye · Exploit
• 🔥 https://github.com/0x1ns4n3/CVE-2015-1328-GoldenEye · Exploit
• 🔥 https://github.com/betalphafai/CVE-2015-0568 · Exploit
• 🔥 https://github.com/betalphafai/cve-2015-3636_crash · Exploit