PT-2016-3104 · Palo Alto Networks+4 · Pan-Os+4

Published 2016-01-04 · Updated 2025-01-03 · CVE-2016-10229

Positive Technologies (AI Summary)

CVSS v2.0

10

Critical

Base vector

AV:N/AC:L/Au:N/C:C/I:C/A:C

Name of the Vulnerable Software and Affected Versions Linux kernel versions prior to 4.5 PAN-OS versions 6.1.17 and earlier, 7.0, 7.1.10 and earlier, 8.0.2 and earlier

Description The issue allows remote attackers to execute arbitrary code via UDP traffic that triggers an unsafe second checksum calculation during execution of a recv system call with the MSG PEEK flag. This is due to an incorrect implementation of security checks for standard elements in the udp.c component of the Linux kernel. Successful exploitation of this issue requires an attacker to be on the management network.

Recommendations For Linux kernel versions prior to 4.5, update to version 4.5 or later to resolve the issue. For PAN-OS versions 6.1.17 and earlier, 7.0, 7.1.10 and earlier, 8.0.2 and earlier, apply the relevant patch or update to a version that includes the fix for this issue. As a temporary workaround, consider restricting access to the management network to minimize the risk of exploitation.

Fix

RCE

Improperly Implemented Security Check for Standard

Weakness Enumeration

CWE-358

Related Identifiers

ALT-PU-2016-1262

ALT-PU-2016-1975

BDU:2017-00894

CVE-2016-10229

SUSE-SU-2017:2920-1

Affected Products

Alt Linux

Fortios

Linux Kernel

Pan-Os

Suse

References · 118

• https://github.com/torvalds/linux/commit/197c949e7798fbf28cfadc69d9ca0c2abbf93191 · Patch
• https://cve.org/CVERecord?id=CVE-2016-10229 · Security Note
• http://git.kernel.org/cgit/linux/kernel/git/torvalds/linux.git/commit/?id=197c949e7798fbf28cfadc69d9ca0c2abbf93191 · Patch
• https://osv.dev/vulnerability/CVE-2016-10229 · Vendor Advisory
• https://security-tracker.debian.org/tracker/CVE-2016-10229 · Vendor Advisory
• https://osv.dev/vulnerability/UBUNTU-CVE-2016-10229 · Vendor Advisory
• http://source.android.com/security/bulletin/2017-04-01.html · Patch
• https://bdu.fstec.ru/vul/2017-00894 · Security Note
• https://osv.dev/vulnerability/DEBIAN-CVE-2016-10229 · Vendor Advisory
• https://linux.oracle.com/errata/ELSA-2017-3538.html · Vendor Advisory
• https://osv.dev/vulnerability/SUSE-SU-2017:2920-1 · Vendor Advisory
• https://osv.dev/vulnerability/ALPINE-CVE-2016-10229 · Vendor Advisory
• https://ubuntu.com/security/CVE-2016-10229 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2016-10229 · Security Note
• https://bugzilla.suse.com/1044125 · Note