fix behavior of wrong checksums in kernel/net/udp CVE-2015-5364 remote attackable

Tracked by Jolla (In release)

asked 2017-04-26 12:20:29 +0200

this post is marked as community wiki

This post is a wiki. Anyone with karma >75 is welcome to improve it.

updated 2017-04-26 12:20:29 +0200

lpr gravatar image

Description

The (1) udp_recvmsg and (2) udpv6_recvmsg functions in the Linux kernel before 4.0.6 do not properly consider yielding a processor, which allows remote attackers to cause a denial of service (system hang) via incorrect checksums within a UDP packet flood.

CVSS v2 Base Score: 7.8 HIGH

Patch is available in kernel 3.4.109.

Files affected: kernel-adaptation-sbj-3.4.108.20161101.1/net/ipv4/udp.c: lines 1255-1264
kernel-adaptation-sbj-3.4.108.20161101.1/net/ipv6/udp.c: lines 451-460

Implementing at least kernel 3.4.110 would additionally fix CVE-2013-7446 and CVE-2015-7872

edit retag flag offensive close delete

Comments

CVE-2015-5364 fixed in 2.1.1.12/Jämsänjoki

lpr ( 2017-06-14 18:00:49 +0200 )edit