Lucene search

K
cve[email protected]CVE-2015-5366
HistoryAug 31, 2015 - 10:59 a.m.

CVE-2015-5366

2015-08-3110:59:13
CWE-399
web.nvd.nist.gov
97
cve-2015-5366
linux kernel
denial of service
udp packet
checksum
nvd

5 Medium

CVSS2

Attack Vector

NETWORK

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

NONE

Integrity Impact

NONE

Availability Impact

PARTIAL

AV:N/AC:L/Au:N/C:N/I:N/A:P

5.7 Medium

AI Score

Confidence

High

0.399 Low

EPSS

Percentile

97.3%

The (1) udp_recvmsg and (2) udpv6_recvmsg functions in the Linux kernel before 4.0.6 provide inappropriate -EAGAIN return values, which allows remote attackers to cause a denial of service (EPOLLET epoll application read outage) via an incorrect checksum in a UDP packet, a different vulnerability than CVE-2015-5364.

Affected configurations

NVD
Node
linuxlinux_kernelRange4.0.5
Node
redhatenterprise_linux_server_ausMatch6.5

References

5 Medium

CVSS2

Attack Vector

NETWORK

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

NONE

Integrity Impact

NONE

Availability Impact

PARTIAL

AV:N/AC:L/Au:N/C:N/I:N/A:P

5.7 Medium

AI Score

Confidence

High

0.399 Low

EPSS

Percentile

97.3%