The IPv4 implementation in the Linux kernel before 3.18.8 does not properly consider the length of the Read-Copy Update (RCU) grace period for redirecting lookups in the absence of caching, which allows remote attackers to cause a denial of service (memory consumption or system crash) via a flood of packets.
CVSS Details
- CVSS 3.1 Base Score: 7.5
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Debian | — | Upgrade linux | Jul 30, 2024 | Apr 5, 2015 |
| Oracle_linux | — | Upgrade kernel-uek-debug-develUpgrade kernel-uek-firmwareUpgrade kernel-uekUpgrade kernel-uek-develUpgrade kernel-uek-debugUpgrade kernel-uek-doc | Jul 1, 2017 | Apr 5, 2015 |
| Suse | — | Upgrade kernel-ec2-extraUpgrade kernel-defaultUpgrade kernel-obs-buildUpgrade kernel-ec2-develUpgrade kernel-docsUpgrade kernel-ec2 | Dec 18, 2015 | Apr 5, 2015 |
| Ubuntu | — | Upgrade linux-image-3.13.0-49-powerpc-e500mcUpgrade linux-image-3.16.0-33-lowlatencyUpgrade linux-image-3.16.0-33-powerpc-e500mcUpgrade linux-image-3.13.0-49-lowlatencyUpgrade linux-image-3.13.0-49-generic-lpaeUpgrade linux-image-3.16.0-33-generic-lpaeUpgrade linux-image-3.13.0-49-powerpc-e500Upgrade linux-image-3.16.0-33-genericUpgrade linux-image-3.16.0-33-powerpc64-smpUpgrade linux-image-3.16.0-33-powerpc-smpUpgrade linux-image-3.13.0-49-powerpc64-embUpgrade linux-image-3.13.0-49-powerpc64-smpUpgrade linux-image-3.13.0-49-genericUpgrade linux-image-3.16.0-33-powerpc64-embUpgrade linux-image-3.13.0-49-powerpc-smp | Nov 8, 2024 | Apr 5, 2015 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub