Lucene search

K
ubuntucveUbuntu.comUB:CVE-2015-5366
HistoryJul 06, 2015 - 12:00 a.m.

CVE-2015-5366

2015-07-0600:00:00
ubuntu.com
ubuntu.com
12

5 Medium

CVSS2

Access Vector

NETWORK

Access Complexity

LOW

Authentication

NONE

Confidentiality Impact

NONE

Integrity Impact

NONE

Availability Impact

PARTIAL

AV:N/AC:L/Au:N/C:N/I:N/A:P

0.399 Low

EPSS

Percentile

97.2%

The (1) udp_recvmsg and (2) udpv6_recvmsg functions in the Linux kernel
before 4.0.6 provide inappropriate -EAGAIN return values, which allows
remote attackers to cause a denial of service (EPOLLET epoll application
read outage) via an incorrect checksum in a UDP packet, a different
vulnerability than CVE-2015-5364.

Bugs

Notes

Author Note
jdstrand android kernels (flo, goldfish, grouper, maguro, mako and manta) are not supported on the Ubuntu Touch 14.10 and earlier preview kernels linux-lts-saucy no longer receives official support linux-lts-quantal no longer receives official support
OSVersionArchitecturePackageVersionFilename
ubuntu12.04noarchlinux<Β 3.2.0-89.127UNKNOWN
ubuntu14.04noarchlinux<Β 3.13.0-58.97UNKNOWN
ubuntu15.04noarchlinux<Β 3.19.0-23.24UNKNOWN
ubuntu12.04noarchlinux-armadaxp<Β 3.2.0-1655.76UNKNOWN
ubuntu12.04noarchlinux-lts-trusty<Β 3.13.0-58.97~precise1UNKNOWN
ubuntu14.04noarchlinux-lts-utopic<Β 3.16.0-44.59~14.04.1UNKNOWN
ubuntu14.04noarchlinux-lts-vivid<Β 3.19.0-23.24~14.04.1UNKNOWN
ubuntu12.04noarchlinux-ti-omap4<Β 3.2.0-1469.90UNKNOWN

5 Medium

CVSS2

Access Vector

NETWORK

Access Complexity

LOW

Authentication

NONE

Confidentiality Impact

NONE

Integrity Impact

NONE

Availability Impact

PARTIAL

AV:N/AC:L/Au:N/C:N/I:N/A:P

0.399 Low

EPSS

Percentile

97.2%