Published: 27/05/2015 Updated: 11/04/2016

CVSS v2 Base Score: 4.9 | Impact Score: 6.9 | Exploitability Score: 3.9

VMScore: 436

Vector: AV:L/AC:L/Au:N/C:N/I:N/A:C

A certain backport in the TCP Fast Open implementation for the Linux kernel prior to 3.18 does not properly maintain a count value, which allow local users to cause a denial of service (system crash) via the Fast Open feature, as demonstrated by visiting the chrome://flags/#enable-tcp-fast-open URL when using certain 3.10.x up to and including 3.16.x kernel builds, including longterm-maintenance releases and ckt (aka Canonical Kernel Team) builds.

Vulnerable Product	Search on Vulmon	Subscribe to Product
debian debian linux
linux linux kernel

Debian Bug report logs - #782515 [regression] BUG in process context when using TCP Fast Open (CVE-2015-2015-3332) Package: src:linux; Maintainer for src:linux is Debian Kernel Team <debian-kernel@listsdebianorg>; Reported by: Antti Salmela <asalmela@ikifi> Date: Mon, 13 Apr 2015 14:48:02 UTC Severity: important ...

Debian Bug report logs - #782561 Buffer overruns in Linux kernel RFC4106 implementation using AESNI (CVE-2015-3331) Package: src:linux; Maintainer for src:linux is Debian Kernel Team <debian-kernel@listsdebianorg>; Reported by: Romain Francoise <rfrancoise@debianorg> Date: Tue, 14 Apr 2015 08:57:02 UTC Severity: n ...

Several vulnerabilities have been discovered in the Linux kernel that may lead to a privilege escalation, denial of service or information leaks CVE-2014-8159 It was found that the Linux kernel's InfiniBand/RDMA subsystem did not properly sanitize input parameters while registering memory regions from user space via the (u)verbs API ...

The system could be made to crash under certain conditions ...

Several security issues were fixed in the kernel ...

A certain backport in the TCP Fast Open implementation for the Linux kernel before 318 does not properly maintain a count value, which allow local users to cause a denial of service (system crash) via the Fast Open feature, as demonstrated by visiting the chrome://flags/#enable-tcp-fast-open URL when using certain 310x through 316x kernel buil ...

CWE-399 https://bugs.debian.org/782515 http://article.gmane.org/gmane.linux.network/359588 https://bugzilla.redhat.com/show_bug.cgi?id=1213951 http://www.openwall.com/lists/oss-security/2015/04/14/14 http://www.debian.org/security/2015/dsa-3237 https://nvd.nist.gov https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=782515 https://usn.ubuntu.com/2619-1/https://access.redhat.com/security/cve/cve-2015-3332 https://www.debian.org/security/./dsa-3237

CVE-2015-3332

Vulnerability Summary

Vendor Advisories

References

Vulmon Search

About

Products

Connect