fix behavior of wrong checksums in kernel/net/udp CVE-2015-5364 remote attackable
asked 2017-04-26 12:20:29 +0200
This post is a wiki. Anyone with karma >75 is welcome to improve it.
The (1) udp_recvmsg and (2) udpv6_recvmsg functions in the Linux kernel before 4.0.6 do not properly consider yielding a processor, which allows remote attackers to cause a denial of service (system hang) via incorrect checksums within a UDP packet flood.
CVSS v2 Base Score: 7.8 HIGH
Patch is available in kernel 3.4.109.
Files affected: kernel-adaptation-sbj-3.4.108.20161101.1/net/ipv4/udp.c: lines 1255-1264
kernel-adaptation-sbj-3.4.108.20161101.1/net/ipv6/udp.c: lines 451-460
Implementing at least kernel 3.4.110 would additionally fix CVE-2013-7446 and CVE-2015-7872
CVE-2015-5364 fixed in 2.1.1.12/Jämsänjoki
lpr ( 2017-06-14 18:00:49 +0200 )edit