Veracode Vulnerability DatabaseVERACODE:16931Denial Of Service (DoS)
5 Medium
CVSS2
Access Vector
NETWORK
Access Complexity
LOW
Authentication
NONE
Confidentiality Impact
NONE
Integrity Impact
NONE
Availability Impact
PARTIAL
AV:N/AC:L/Au:N/C:N/I:N/A:P
kernel is vulnerable to denial of service. It was found that the Linux kernel’s IPv6 network stack did not properly validate the value of the MTU variable when it was set. A remote attacker could potentially use this flaw to disrupt a target system’s networking (packet loss) by setting an invalid MTU value, for example, via a NetworkManager daemon that is processing router advertisement packets running on the target system.
References
git.kernel.org/cgit/linux/kernel/git/torvalds/linux.git/commit/?id=77751427a1ff25b27d47a4c36b12c3c8667855ac
lists.opensuse.org/opensuse-security-announce/2015-12/msg00005.html
lists.opensuse.org/opensuse-security-announce/2015-12/msg00018.html
lists.opensuse.org/opensuse-security-announce/2015-12/msg00026.html
lists.opensuse.org/opensuse-security-announce/2015-12/msg00031.html
lists.opensuse.org/opensuse-security-announce/2016-02/msg00013.html
lists.opensuse.org/opensuse-security-announce/2016-08/msg00038.html
rhn.redhat.com/errata/RHSA-2016-0855.html
www.debian.org/security/2015/dsa-3364
www.oracle.com/technetwork/topics/security/linuxbulletinapr2016-2952096.html
www.securityfocus.com/bid/85274
access.redhat.com/documentation/en-US/Red_Hat_Enterprise_Linux/6/html/6.8_Release_Notes/index.html
access.redhat.com/documentation/en-US/Red_Hat_Enterprise_Linux/6/html/6.8_Technical_Notes/index.html
access.redhat.com/security/cve/CVE-2016-3841
access.redhat.com/security/updates/classification/#moderate
bugs.launchpad.net/bugs/1500810
bugzilla.novell.com/show_bug.cgi?id=944296
bugzilla.redhat.com/show_bug.cgi?id=1066751
bugzilla.redhat.com/show_bug.cgi?id=1192132
bugzilla.redhat.com/show_bug.cgi?id=1197875
bugzilla.redhat.com/show_bug.cgi?id=1225359
bugzilla.redhat.com/show_bug.cgi?id=1242239
bugzilla.redhat.com/show_bug.cgi?id=1248507
bugzilla.redhat.com/show_bug.cgi?id=1254020
bugzilla.redhat.com/show_bug.cgi?id=1259870
bugzilla.redhat.com/show_bug.cgi?id=1310661
bugzilla.redhat.com/show_bug.cgi?id=697750
bugzilla.redhat.com/show_bug.cgi?id=723722
bugzilla.redhat.com/show_bug.cgi?id=889368
github.com/torvalds/linux/commit/77751427a1ff25b27d47a4c36b12c3c8667855ac
rhn.redhat.com/errata/RHSA-2016-0855.html
Related
5 Medium
CVSS2
Access Vector
NETWORK
Access Complexity
LOW
Authentication
NONE
Confidentiality Impact
NONE
Integrity Impact
NONE
Availability Impact
PARTIAL
AV:N/AC:L/Au:N/C:N/I:N/A:P