PT-2016-7190 · Linux+5 · Linux Kernel+5

Vladimír Beneš · Published 2016-10-10 · Updated 2024-06-15 · CVE-2016-7039

Positive Technologies (AI Summary)

CVSS v2.0

7.8

High

Base vector

AV:N/AC:L/Au:N/C:N/I:N/A:C

Name of the Vulnerable Software and Affected Versions Linux kernel versions prior to 4.8.3

Description The issue in the Linux kernel allows remote attackers to cause a denial of service or possibly have other impacts by triggering the use of the GRO path for large crafted packets. This can be demonstrated by packets containing only VLAN headers.

Recommendations For Linux kernel versions prior to 4.8.3, update to version 4.8.3 or later to resolve the issue.

Fix

DoS

Weakness Enumeration

CWE-399

Related Identifiers

ALT-PU-2016-2299

ALT-PU-2016-2300

CESA-2016_2047

CVE-2016-7039

MGASA-2016-0347

MGASA-2016-0364

MGASA-2016-0372

MGASA-2016-0411

OPENSUSE-SU-2016_2583-1

OPENSUSE-SU-2024:10128-1

RHSA-2016:2047

RHSA-2016:2107

RHSA-2016:2110

RHSA-2016_2047

RHSA-2016_2110

RHSA-2017:0372

RHSA-2017_0372

SUSE-SU-2017:0181-1

USN-3098-1

USN-3098-2

USN-3099-1

USN-3099-2

USN-3099-3

USN-3099-4

Affected Products

Alt Linux

Centos

Linux Kernel

Red Hat

Suse

Ubuntu

References · 299

• https://osv.dev/vulnerability/openSUSE-SU-2024:10128-1 · Vendor Advisory
• https://ubuntu.com/security/CVE-2016-6136 · Vendor Advisory
• https://osv.dev/vulnerability/MGASA-2016-0347 · Vendor Advisory
• https://ubuntu.com/security/CVE-2016-7039 · Vendor Advisory
• https://osv.dev/vulnerability/MGASA-2016-0364 · Vendor Advisory
• https://ubuntu.com/security/notices/USN-3098-1 · Vendor Advisory
• http://rhn.redhat.com/errata/RHSA-2016-2047.html · Vendor Advisory
• https://cve.org/CVERecord?id=CVE-2016-7039 · Security Note
• https://osv.dev/vulnerability/USN-3098-1 · Vendor Advisory
• https://osv.dev/vulnerability/UBUNTU-CVE-2016-7039 · Vendor Advisory
• https://ubuntu.com/security/CVE-2016-6130 · Vendor Advisory
• http://openwall.com/lists/oss-security/2016/10/10/15 · Patch
• https://osv.dev/vulnerability/MGASA-2016-0372 · Vendor Advisory
• https://osv.dev/vulnerability/SUSE-SU-2017:0181-1 · Vendor Advisory
• https://ubuntu.com/security/CVE-2016-6828 · Vendor Advisory