vulnerability
ELSA-2016-0045-1 Important: Oracle Linux kernel security update
| Severity | CVSS | Published | Added | Modified |
|---|---|---|---|---|
| 8 | (AV:N/AC:L/Au:N/C:N/I:N/A:C) | 2016-01-20 | 2016-01-21 | 2025-02-18 |
Severity
8
CVSS
(AV:N/AC:L/Au:N/C:N/I:N/A:C)
Published
2016-01-20
Added
2016-01-21
Modified
2025-02-18
Description
The (1) udp_recvmsg and (2) udpv6_recvmsg functions in the Linux kernel before 4.0.6 do not properly consider yielding a processor, which allows remote attackers to cause a denial of service (system hang) via incorrect checksums within a UDP packet flood.
Solution(s)
linuxrpm-upgrade-ols5-ia64-kernellinuxrpm-upgrade-ols5-ia64-kernel-debuglinuxrpm-upgrade-ols5-ia64-kernel-debug-devellinuxrpm-upgrade-ols5-ia64-kernel-devellinuxrpm-upgrade-ols5-ia64-kernel-doclinuxrpm-upgrade-ols5-ia64-kernel-headerslinuxrpm-upgrade-ols5-ia64-kernel-xenlinuxrpm-upgrade-ols5-ia64-kernel-xen-devellinuxrpm-upgrade-ols5-ia64-ocfs2linuxrpm-upgrade-ols5-ia64-oracleasmlinuxrpm-upgrade-ols5-x86-kernellinuxrpm-upgrade-ols5-x86-kernel-PAElinuxrpm-upgrade-ols5-x86-kernel-PAE-devellinuxrpm-upgrade-ols5-x86-kernel-debuglinuxrpm-upgrade-ols5-x86-kernel-debug-devellinuxrpm-upgrade-ols5-x86-kernel-devellinuxrpm-upgrade-ols5-x86-kernel-doclinuxrpm-upgrade-ols5-x86-kernel-headerslinuxrpm-upgrade-ols5-x86-kernel-xenlinuxrpm-upgrade-ols5-x86-kernel-xen-devellinuxrpm-upgrade-ols5-x86-ocfs2linuxrpm-upgrade-ols5-x86-oracleasmlinuxrpm-upgrade-ols5-x86_64-kernellinuxrpm-upgrade-ols5-x86_64-kernel-debuglinuxrpm-upgrade-ols5-x86_64-kernel-debug-devellinuxrpm-upgrade-ols5-x86_64-kernel-devellinuxrpm-upgrade-ols5-x86_64-kernel-doclinuxrpm-upgrade-ols5-x86_64-kernel-headerslinuxrpm-upgrade-ols5-x86_64-kernel-xenlinuxrpm-upgrade-ols5-x86_64-kernel-xen-devellinuxrpm-upgrade-ols5-x86_64-ocfs2linuxrpm-upgrade-ols5-x86_64-oracleasm
References
- BID-75510
- CVE-2015-5364
- https://attackerkb.com/topics/CVE-2015-5364
- CVE-2015-5366
- https://attackerkb.com/topics/CVE-2015-5366
- DEBIAN-DSA-3313
- DEBIAN-DSA-3329
- DISA_SEVERITY-Category I
- IAVM-2016-A-0293
- REDHAT-RHSA-2015:1623
- REDHAT-RHSA-2015:1778
- REDHAT-RHSA-2015:1787
- REDHAT-RHSA-2016:0045
- REDHAT-RHSA-2016:1096
- REDHAT-RHSA-2016:1100
- REDHAT-RHSA-2016:1225
- URL-http://oss.oracle.com/pipermail/el-errata/2016-January/005705.html
- URL-http://oss.oracle.com/pipermail/el-errata/2016-January/005709.html
NEW
Explore Exposure Command
Confidently identify and prioritize exposures from endpoint to cloud with full attack surface visibility and threat-aware risk context.