CVE-2015-2922

2015-04-0600:00:00

ubuntu.com

CVSS2

3.3

Attack Vector

ADJACENT_NETWORK

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

NONE

Integrity Impact

NONE

Availability Impact

PARTIAL

AV:A/AC:L/Au:N/C:N/I:N/A:P

EPSS

0.016

Percentile

87.2%

JSON

The ndisc_router_discovery function in net/ipv6/ndisc.c in the Neighbor
Discovery (ND) protocol implementation in the IPv6 stack in the Linux
kernel before 3.19.6 allows remote attackers to reconfigure a hop-limit
setting via a small hop_limit value in a Router Advertisement (RA) message.

Bugs

Notes

Author	Note
jdstrand	android kernels (flo, goldfish, grouper, maguro, mako and manta) are not supported on the Ubuntu Touch 14.10 and earlier preview kernels linux-lts-saucy no longer receives official support linux-lts-quantal no longer receives official support

OSVersionArchitecturePackageVersionFilename
ubuntu12.04noarchlinux< 3.2.0-82.119UNKNOWN
ubuntu14.04noarchlinux< 3.13.0-51.84UNKNOWN
ubuntu14.10noarchlinux< 3.16.0-36.48UNKNOWN
ubuntu12.04noarchlinux-armadaxp< 3.2.0-1649.69UNKNOWN
ubuntu12.04noarchlinux-lts-trusty< 3.13.0-51.84~precise1UNKNOWN
ubuntu14.04noarchlinux-lts-utopic< 3.16.0-36.48~14.04.1UNKNOWN
ubuntu12.04noarchlinux-ti-omap4< 3.2.0-1463.83UNKNOWN

OS	Version	Architecture	Package	Version	Filename
ubuntu	12.04	noarch	linux	< 3.2.0-82.119	UNKNOWN
ubuntu	14.04	noarch	linux	< 3.13.0-51.84	UNKNOWN
ubuntu	14.10	noarch	linux	< 3.16.0-36.48	UNKNOWN
ubuntu	12.04	noarch	linux-armadaxp	< 3.2.0-1649.69	UNKNOWN
ubuntu	12.04	noarch	linux-lts-trusty	< 3.13.0-51.84~precise1	UNKNOWN
ubuntu	14.04	noarch	linux-lts-utopic	< 3.16.0-36.48~14.04.1	UNKNOWN
ubuntu	12.04	noarch	linux-ti-omap4	< 3.2.0-1463.83	UNKNOWN