Published: 08/02/2016 Updated: 19/01/2023

CVSS v2 Base Score: 10 | Impact Score: 10 | Exploitability Score: 10

CVSS v3 Base Score: 9.8 | Impact Score: 5.9 | Exploitability Score: 3.9

VMScore: 890

Vector: AV:N/AC:L/Au:N/C:C/I:C/A:C

The nf_nat_redirect_ipv4 function in net/netfilter/nf_nat_redirect.c in the Linux kernel prior to 4.4 allows remote malicious users to cause a denial of service (NULL pointer dereference and system crash) or possibly have unspecified other impact by sending certain IPv4 packets to an incompletely configured interface, a related issue to CVE-2003-1604.

Vulnerable Product	Search on Vulmon	Subscribe to Product
linux linux kernel

A race condition in the IPC object implementation in the Linux kernel through 423 allows local users to gain privileges by triggering an ipc_addid call that leads to uid and gid comparisons against uninitialized data, related to msgc, shmc, and utilc (CVE-2015-7613) Linux kernels built with the name spaces support(CONFIG_NAMESPACE) is vulnera ...

Several security issues were fixed in the kernel ...

A NULL-pointer dereference vulnerability was found in the Linux kernel's TCP stack, in net/netfilter/nf_nat_redirectc in the nf_nat_redirect_ipv4() function A remote, unauthenticated user could exploit this flaw to create a system crash (denial of service) ...

A Script to find fixes for CVE ids by parsing nvd website and respective git repository log.

CVE Fix Reporter A Script to find fixes for CVE ids by parsing nvd website and respective git repository log This can be used if there is a pattern for CVEID report in nvd website with fix urls and proper upstream git repository HOW to Clone this repo Update config file as per the comments (no error checking is done) Any invalid configuration causes empty report Add al

CWE-476 http://git.kernel.org/cgit/linux/kernel/git/torvalds/linux.git/commit/?id=94f9cd81436c85d8c3a318ba92e236ede73752fc https://bugzilla.redhat.com/show_bug.cgi?id=1300731 https://github.com/torvalds/linux/commit/94f9cd81436c85d8c3a318ba92e236ede73752fc http://www.openwall.com/lists/oss-security/2016/01/27/6 http://www.oracle.com/technetwork/topics/security/linuxbulletinjul2016-3090544.html http://www.oracle.com/technetwork/topics/security/ovmbulletinoct2016-3090547.html http://lists.opensuse.org/opensuse-security-announce/2016-04/msg00015.html http://www.ubuntu.com/usn/USN-2889-1 http://lists.fedoraproject.org/pipermail/package-announce/2016-February/176484.html http://lists.fedoraproject.org/pipermail/package-announce/2016-February/176464.html http://www.ubuntu.com/usn/USN-2890-1 http://www.ubuntu.com/usn/USN-2890-3 http://www.ubuntu.com/usn/USN-2890-2 http://www.ubuntu.com/usn/USN-2889-2 https://nvd.nist.gov https://github.com/sriramkandukuri/cve-fix-reporter https://alas.aws.amazon.com/ALAS-2015-603.html https://usn.ubuntu.com/2889-1/

CVE-2015-8787

Vulnerability Summary

Vulnerability Trend

Vendor Advisories

Github Repositories

References

Vulmon Search

About

Products

Connect