Lucene search

K
cve[email protected]CVE-2015-5366
HistoryAug 31, 2015 - 10:59 a.m.

CVE-2015-5366

2015-08-3110:59:00
CWE-399
web.nvd.nist.gov
91
cve-2015-5366
linux kernel
denial of service
udp packet
checksum
nvd

8.7 High

AI Score

Confidence

High

5 Medium

CVSS2

Access Vector

NETWORK

Access Complexity

LOW

Authentication

NONE

Confidentiality Impact

NONE

Integrity Impact

NONE

Availability Impact

PARTIAL

AV:N/AC:L/Au:N/C:N/I:N/A:P

0.399 Low

EPSS

Percentile

97.2%

The (1) udp_recvmsg and (2) udpv6_recvmsg functions in the Linux kernel before 4.0.6 provide inappropriate -EAGAIN return values, which allows remote attackers to cause a denial of service (EPOLLET epoll application read outage) via an incorrect checksum in a UDP packet, a different vulnerability than CVE-2015-5364.

References

8.7 High

AI Score

Confidence

High

5 Medium

CVSS2

Access Vector

NETWORK

Access Complexity

LOW

Authentication

NONE

Confidentiality Impact

NONE

Integrity Impact

NONE

Availability Impact

PARTIAL

AV:N/AC:L/Au:N/C:N/I:N/A:P

0.399 Low

EPSS

Percentile

97.2%

Related for CVE-2015-5366