Revision history [back]
 | 1 | initial version | posted 2017-04-26 12:20:29 +0200  |
fix behavior of wrong checksums in kernel/net/udp CVE-2015-5364 remote attackable
The (1) udp_recvmsg and (2) udpv6_recvmsg functions in the Linux kernel before 4.0.6 do not properly consider yielding a processor, which allows remote attackers to cause a denial of service (system hang) via incorrect checksums within a UDP packet flood.
CVSS v2 Base Score: 7.8 HIGH
Patch is available in kernel 3.4.109.
Files affected: kernel-adaptation-sbj-3.4.108.20161101.1/net/ipv4/udp.c: lines 1255-1264
kernel-adaptation-sbj-3.4.108.20161101.1/net/ipv6/udp.c: lines 451-460
Implementing at least kernel 3.4.110 would additionally fix CVE-2013-7446 and CVE-2015-7872