net/ipv4/tcp_input.c in the Linux kernel before 4.7 does not properly determine the rate of challenge ACK segments, which makes it easier for remote attackers to hijack TCP sessions via a blind in-window attack.
CVSS Details
- CVSS 3.1 Base Score: 4.8
- CVSS 3.0 Vector: (CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:L/A:L)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Amazon_linux | — | Upgrade kernel | Aug 22, 2016 | Aug 1, 2016 |
| Centos_linux | — | Upgrade kernel-tools-libsUpgrade kernelUpgrade kernel-develUpgrade kernel-toolsUpgrade kernel-tools-libs-develUpgrade kernel-docUpgrade kernel-abi-whitelistsUpgrade python-perfUpgrade kernel-debugUpgrade kernel-headersUpgrade perfUpgrade kernel-firmwareUpgrade kernel-debug-devel | Aug 22, 2016 | Aug 6, 2016 |
| Debian | — | Upgrade linux | Sep 5, 2016 | Aug 6, 2016 |
| F5 Big Ip | — | Update F5 BIG-IP to the latest version | Jun 17, 2026 | Aug 26, 2016 |
| Huawei Euleros 2_0_sp1 | — | Upgrade kernel-headersUpgrade kernel-debugUpgrade kernel-debuginfoUpgrade perfUpgrade kernel-develUpgrade python-perfUpgrade kernel-debuginfo-common-x86_64Upgrade kernel-toolsUpgrade kernelUpgrade kernel-tools-libs | Nov 30, 2017 | Aug 6, 2016 |
| Oracle_linux | — | Upgrade kernel-uekUpgrade kernel | Aug 17, 2016 | Jul 12, 2016 |
| Panos | — | Update PAN-OS 7.1 to the latest workaround for your deviceUpgrade PAN-OS 7.0 to the latest version | May 24, 2017 | Aug 6, 2016 |
| Redhat_linux | — | Upgrade kernel-rt-debugUpgrade kernel-rt-debuginfo-common-x86_64Upgrade kernel-debug-develUpgrade kernel-develUpgrade kernel-debuginfoUpgrade kernelUpgrade kernel-tools-libsUpgrade kernel-firmwareUpgrade kernel-kdumpUpgrade kernel-rt-traceUpgrade kernel-debug-debuginfoUpgrade kernel-kdump-develUpgrade kernel-rt-debug-debuginfoUpgrade kernel-rt-develUpgrade kernel-rt-trace-debuginfoUpgrade kernel-tools-debuginfoUpgrade kernel-debugUpgrade kernel-rtUpgrade kernel-headersUpgrade kernel-rt-debuginfoUpgrade kernel-debuginfo-common-s390xUpgrade kernel-debuginfo-common-ppc64Upgrade kernel-rt-trace-develUpgrade kernel-tools-libs-develUpgrade perf-debuginfoUpgrade kernel-docUpgrade kernel-debuginfo-common-i686Upgrade kernel-bootwrapperUpgrade kernel-abi-whitelistsUpgrade kernel-toolsUpgrade python-perfUpgrade kernel-rt-docUpgrade kernel-debuginfo-common-x86_64Upgrade perfUpgrade python-perf-debuginfoUpgrade kernel-kdump-debuginfoUpgrade kernel-rt-debug-devel | Aug 22, 2016 | Aug 6, 2016 |
| Suse | — | Upgrade kernel-docsUpgrade gfs2-kmp-defaultUpgrade kernel-obs-buildUpgrade kernel-ec2-extraUpgrade kernel-ec2Upgrade dlm-kmp-defaultUpgrade ocfs2-kmp-defaultUpgrade kernel-defaultUpgrade cluster-network-kmp-defaultUpgrade cluster-md-kmp-defaultUpgrade kernel-ec2-devel | Sep 6, 2016 | Aug 6, 2016 |
| Ubuntu | — | Upgrade linux-image-3.2.0-109-omapUpgrade linux-image-3.13.0-95-powerpc64-smpUpgrade linux-image-4.4.0-36-powerpc-smpUpgrade linux-image-3.13.0-95-lowlatencyUpgrade linux-image-3.13.0-95-powerpc-e500mcUpgrade linux-image-4.4.0-36-powerpc64-embUpgrade linux-image-3.2.0-109-generic-paeUpgrade linux-image-4.4.0-36-lowlatencyUpgrade linux-image-3.13.0-95-powerpc-smpUpgrade linux-image-3.2.0-109-powerpc-smpUpgrade linux-image-3.13.0-95-powerpc64-embUpgrade linux-image-3.13.0-95-generic-lpaeUpgrade linux-image-3.13.0-95-genericUpgrade linux-image-3.2.0-109-powerpc64-smpUpgrade linux-image-4.4.0-36-genericUpgrade linux-image-4.4.0-1021-raspi2Upgrade linux-image-4.4.0-1024-snapdragonUpgrade linux-image-3.2.0-109-virtualUpgrade linux-image-3.2.0-109-genericUpgrade linux-image-4.4.0-36-powerpc64-smpUpgrade linux-image-3.2.0-109-highbankUpgrade linux-image-3.2.0-1487-omap4Upgrade linux-image-3.13.0-95-powerpc-e500Upgrade linux-image-4.4.0-36-generic-lpaeUpgrade linux-image-4.4.0-36-powerpc-e500mc | Aug 29, 2016 | Aug 6, 2016 |
| Vmware Photon_os | — | Use 'tdnf update' to upgrade all packages to the latest version. | Jan 20, 2025 | Aug 6, 2016 |
Prioritize with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub