net/ipv4/tcp_input.c in certain Linux kernel versions does not properly determine the rate of challenge ACK segments, which makes it easier for remote attackers to hijack TCP sessions via a blind in-window attack.

CPENameOperatorVersion
fortioseq5.4.1
fortioseq5.4.0
fortioseq5.2.8
fortioseq5.2.7
fortioseq5.2.6
fortioseq5.2.5
fortioseq5.2.4
fortioseq5.2.3
fortioseq5.2.2
fortioseq5.2.1

Name	Operator	Version
fortios	eq	5.4.1
fortios	eq	5.4.0
fortios	eq	5.2.8
fortios	eq	5.2.7
fortios	eq	5.2.6
fortios	eq	5.2.5
fortios	eq	5.2.4
fortios	eq	5.2.3
fortios	eq	5.2.2
fortios	eq	5.2.1

Rows per page:

1-10 of 3181

redhatcve 1

nessus 46

f5 2

ubuntucve 1

paloalto 1

ibm 2

openvas 33

prion 2

redhat 8

cve 2

arista 1

debiancve 1

centos 2

archlinux 4

oraclelinux 6

thn 2

symantec 1

huawei 1

veracode 1

threatpost 1

fedora 2

ubuntu 8

debian 3

osv 2

amazon 1

mageia 3

suse 11

androidsecurity 1

lenovo 1

redhatcve

CVE-2016-5696

2016-07-12 08:48:22

nessus

RHEL 6 : kernel (RHSA-2016:1664)

2016-08-24 00:00:00

Scientific Linux Security Update : kernel on SL7.x x86_64 (20160818)

2016-08-22 00:00:00

Arista Networks EOS tcp_input Challenge ACKs Shared Counter Disclosure (SA0023)

2018-02-28 00:00:00

K46514822 : Linux TCP stack vulnerability CVE-2016-5696

2016-08-26 00:00:00

SOL46514822 - Linux TCP stack vulnerability CVE-2016-5696

2016-08-26 00:00:00

ubuntucve

CVE-2016-5696

2016-08-06 00:00:00

paloalto

Kernel Vulnerability

2017-05-23 03:00:00

ibm

Security Bulletin: Vulnerability in Linux Kernel affects SAN Volume Controller, Storwize family and FlashSystem V9000 products (CVE-2016-5696)

2023-03-29 01:48:02

Security Bulletin: Vulnerabilities in the Linux kernel affect PowerKVM

2018-06-18 01:34:02

openvas

RedHat Update for kernel RHSA-2016:1664-01

2016-08-24 00:00:00

Palo Alto PAN-OS Kernel Vulnerability

2017-05-23 00:00:00

CentOS Update for kernel CESA-2016:1664 centos6

2016-08-25 00:00:00

prion

Design/Logic Flaw

2016-08-06 20:59:00

Design/Logic Flaw

2016-07-13 16:59:00

redhat

(RHSA-2016:1664) Important: kernel security and bug fix update

2016-08-23 15:01:18

(RHSA-2016:1631) Important: realtime-kernel security and bug fix update

2016-08-18 15:32:31

(RHSA-2016:1632) Important: kernel-rt security and bug fix update

2016-08-18 15:33:21

cve

CVE-2016-5696

2016-08-06 20:59:00

CVE-2016-5389

2016-07-13 16:59:00

arista

Security Advisory 0023

2016-08-15 00:00:00

debiancve

CVE-2016-5696

2016-08-06 20:59:00

centos

kernel, perf, python security update

2016-08-23 20:59:58

kernel, perf, python security update

2016-08-20 02:00:21

archlinux

linux: information disclosure

2016-08-14 00:00:00

linux-grsec: information disclosure

2016-08-14 00:00:00

linux-lts: information disclosure

2016-08-21 00:00:00

oraclelinux

Unbreakable Enterprise kernel security update

2016-08-15 00:00:00

kernel security and bug fix update

2016-08-23 00:00:00

kernel security and bug fix update

2016-08-18 00:00:00

thn

Linux TCP Flaw allows Hackers to Hijack Internet Traffic and Inject Malware Remotely

2016-08-10 23:18:00

Internet Traffic Hijacking Linux Flaw Affects 80% of Android Devices

2016-08-16 01:31:00

symantec

SA131 : TCP Session Hijacking in Operating Systems Supporting RFC 5961

2016-09-14 08:00:00

huawei

Security Advisory - TCP Connection Hijack Vulnerability

2016-09-07 00:00:00

veracode

TCP Session Hijack

2019-01-15 09:12:58

threatpost

Serious TCP Bug in Linux Systems Allows Traffic Hijacking

2016-08-10 12:55:01

fedora

[SECURITY] Fedora 23 Update: kernel-4.6.4-201.fc23

2016-07-19 22:24:43

[SECURITY] Fedora 24 Update: kernel-4.6.4-301.fc24

2016-07-20 00:27:07

ubuntu

Linux kernel (OMAP4) vulnerabilities

2016-08-29 00:00:00

Linux kernel vulnerabilities

2016-08-29 00:00:00

Linux kernel vulnerabilities

2016-08-29 00:00:00

debian

[SECURITY] [DSA 3659-1] linux security update

2016-09-04 17:24:55

[SECURITY] [DSA 3659-1] linux security update

2016-09-04 17:24:55

[SECURITY] [DLA 609-1] linux security update

2016-09-03 11:53:47

osv

linux - security update

2016-09-04 00:00:00

linux - security update

2016-09-03 00:00:00

amazon

Medium: kernel

2016-08-01 13:30:00

mageia

Updated kernel-tmb packages fix security vulnerabilities

2016-08-31 18:32:33

Updated kernel packages fix security vulnerability

2016-07-31 23:39:13

Update request kernel-linus-4.4.26-1 fixes security issues

2016-11-04 10:58:56

suse

Security update for the Linux Kernel (important)

2016-12-09 18:11:19

Security update for the Linux Kernel (important)

2016-12-06 13:08:43

Security update for the Linux Kernel (important)

2016-11-25 17:07:36

androidsecurity

Android Security Bulletin—October 2016

2016-10-03 00:00:00

lenovo

AMI MegaRAC SP-X BMC Vulnerabilities - Lenovo Support US

2020-04-13 19:22:04

Products

Security Intelligence
Non-intrusive assessment
Developers SDK
Windows scanner
Linux scanner
Perimeter control tool
MSSP

Database

Vulnerabilities
Exploits
IOC
Security News
BugBounty
Popular
Wild Exploited
Top Vulnerabilities

Tools

Linux Security Scanner
API integration
Subscriptions
Plugins
Manual Audit

Learn More

Stats
API
Docs
Api-keys
License
Pricing
Glossary
FAQ

Company

Blog
Contacts
About Us
OpenSource
EULA
Brand Guideline
Privacy Policy

This site is protected by reCAPTCHA and the Google Privacy Policy and Terms of Service apply. All product names, logos, and brands are property of their respective owners. All company, product and service names used in this website are for identification purposes only. Use of these names, logos, and brands does not imply endorsement.If you are an owner of some content and want it to be removed, please contact us. Using Vulners services you are accepting Vulners services end-user license agreement

@2024 Vulners Inc

4.8 Medium

CVSS3

Attack Vector

NETWORK

Attack Complexity

HIGH

Privileges Required

NONE

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

NONE

Integrity Impact

LOW

Availability Impact

LOW

CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:L/A:L

5.8 Medium

CVSS2

Access Vector

NETWORK

Access Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

NONE

Integrity Impact

PARTIAL

Availability Impact

PARTIAL

AV:N/AC:M/Au:N/C:N/I:P/A:P

0.003 Low

EPSS

Percentile

65.9%

JSON

Related for FG-IR-16-047