Lucene search

K
cve[email protected]CVE-2015-5366
HistoryAug 31, 2015 - 10:59 a.m.

CVE-2015-5366

2015-08-3110:59:13
CWE-399
web.nvd.nist.gov
99
cve-2015-5366
linux kernel
denial of service
udp packet
checksum
nvd

CVSS2

5

Attack Vector

NETWORK

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

NONE

Integrity Impact

NONE

Availability Impact

PARTIAL

AV:N/AC:L/Au:N/C:N/I:N/A:P

AI Score

5.7

Confidence

High

EPSS

0.399

Percentile

97.3%

The (1) udp_recvmsg and (2) udpv6_recvmsg functions in the Linux kernel before 4.0.6 provide inappropriate -EAGAIN return values, which allows remote attackers to cause a denial of service (EPOLLET epoll application read outage) via an incorrect checksum in a UDP packet, a different vulnerability than CVE-2015-5364.

Affected configurations

NVD
Node
linuxlinux_kernelRange≀4.0.5
Node
redhatenterprise_linux_server_ausMatch6.5
VendorProductVersionCPE
linuxlinux_kernelcpe:/o:linux:linux_kernel::::

References

CVSS2

5

Attack Vector

NETWORK

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

NONE

Integrity Impact

NONE

Availability Impact

PARTIAL

AV:N/AC:L/Au:N/C:N/I:N/A:P

AI Score

5.7

Confidence

High

EPSS

0.399

Percentile

97.3%