The IPv6 stack in the Linux kernel before 4.3.3 mishandles options data, which allows local users to gain privileges or cause a denial of service (use-after-free and system crash) via a crafted sendmsg system call.
CVSS Details
- CVSS 3.1 Base Score: 7.3
- CVSS 3.1 Vector: (CVSS:3.1/AV:L/AC:L/PR:L/UI:R/S:U/C:H/I:H/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Debian | — | Upgrade linux | Jul 30, 2024 | Aug 6, 2016 |
| Huawei Euleros 2_0_sp1 | — | Upgrade kernel-debuginfo-common-x86_64Upgrade kernel-toolsUpgrade kernel-tools-libsUpgrade kernelUpgrade perfUpgrade python-perfUpgrade kernel-headersUpgrade kernel-debugUpgrade kernel-develUpgrade kernel-debuginfo | Nov 30, 2017 | Aug 6, 2016 |
| Oracle_linux | — | Upgrade kernel-uekUpgrade kernel | Nov 9, 2016 | Aug 8, 2016 |
| Redhat_linux | — | Upgrade kernelUpgrade kernel-rt-debuginfo-common-x86_64Upgrade python-perf-debuginfoUpgrade kernel-debuginfo-common-i686Upgrade kernel-debug-debuginfoUpgrade kernel-tools-libsUpgrade kernel-debuginfoUpgrade kernel-rt-develUpgrade kernel-debuginfo-common-x86_64Upgrade kernel-rt-debug-debuginfoUpgrade kernel-kdumpUpgrade kernel-headersUpgrade kernel-kdump-develUpgrade kernel-tools-libs-develUpgrade kernel-debug-develUpgrade kernel-tools-debuginfoUpgrade kernel-kdump-debuginfoUpgrade kernel-toolsUpgrade kernel-docUpgrade kernel-rt-debug-develUpgrade kernel-rt-traceUpgrade kernel-rt-trace-develUpgrade python-perfUpgrade perf-debuginfoUpgrade kernel-abi-whitelistsUpgrade kernel-firmwareUpgrade kernel-debuginfo-common-ppc64Upgrade kernel-rt-debugUpgrade kernel-debugUpgrade kernel-rtUpgrade kernel-rt-debuginfoUpgrade kernel-bootwrapperUpgrade kernel-debuginfo-common-s390xUpgrade perfUpgrade kernel-rt-trace-debuginfoUpgrade kernel-rt-docUpgrade kernel-devel | Oct 6, 2017 | Aug 6, 2016 |
| Suse | — | Upgrade kernel-defaultUpgrade kernel-docs | Dec 3, 2016 | Aug 6, 2016 |
| Ubuntu | — | Upgrade linux-image-3.13.0-96-powerpc-smpUpgrade linux-image-3.13.0-96-powerpc64-smpUpgrade linux-image-3.13.0-96-lowlatencyUpgrade linux-image-3.13.0-96-powerpc-e500mcUpgrade linux-image-3.13.0-96-generic-lpaeUpgrade linux-image-3.13.0-96-powerpc64-embUpgrade linux-image-3.13.0-96-powerpc-e500Upgrade linux-image-3.13.0-96-generic | Sep 19, 2016 | Aug 6, 2016 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub