IM
IronMonkey Threat Research

CVE-2015-5364 HIGH

Published: 2015-08-31 | Last Modified: 2026-06-17 | Status: Modified

Description

The (1) udp_recvmsg and (2) udpv6_recvmsg functions in the Linux kernel before 4.0.6 do not properly consider yielding a processor, which allows remote attackers to cause a denial of service (system hang) via incorrect checksums within a UDP packet flood.

Additional Descriptions (1)

Vulnerabilidad en las funciones (1) udp_recvmsg y (2) udpv6_recvmsg en el kernel de Linux en versiones anteriores a 4.0.6, no considera adecuadamente ceder un procesador, lo que permite a atacantes remotos causar una denegación de servicio (colgado del sistema) a través de sumas de comprobación incorrectas dentro de una inundación de paquetes UDP.

CVSS Metrics

Base Score: 7.8 (HIGH)

AV:N/AC:L/Au:N/C:N/I:N/A:C

Access VectorNETWORK
Access ComplexityLOW
AuthenticationNONE
Confidentiality ImpactNONE
Integrity ImpactNONE
Availability ImpactCOMPLETE

Source: [email protected]

Type: Primary

Exploitability Score: 10.0

Impact Score: 6.9

Weaknesses

Source Type Description
[email protected] Primary
en CWE-399

Affected Products

Vendor Product Version Update Type
linux linux_kernel * <built-in method update of dict object at 0x72a9b0a77200> Operating System
linux linux_kernel * <built-in method update of dict object at 0x72a9b0b5ffc0> Operating System
linux linux_kernel * <built-in method update of dict object at 0x72a9cc55f6c0> Operating System
linux linux_kernel * <built-in method update of dict object at 0x72a9b0a75e40> Operating System
linux linux_kernel * <built-in method update of dict object at 0x72a9b0a74440> Operating System
linux linux_kernel * <built-in method update of dict object at 0x72a9b0a75700> Operating System
linux linux_kernel * <built-in method update of dict object at 0x72a9b0c78480> Operating System
linux linux_kernel * <built-in method update of dict object at 0x72a9b0a77b40> Operating System
redhat enterprise_linux_server_aus 6.5 <built-in method update of dict object at 0x72a9b0a76580> Operating System
debian debian_linux 7.0 <built-in method update of dict object at 0x72a9b0a742c0> Operating System
debian debian_linux 8.0 <built-in method update of dict object at 0x72a9cc55d080> Operating System
canonical ubuntu_linux 12.04 <built-in method update of dict object at 0x72a9b0b5c4c0> Operating System
canonical ubuntu_linux 14.04 <built-in method update of dict object at 0x72a9cc55f700> Operating System
canonical ubuntu_linux 15.04 <built-in method update of dict object at 0x72a9cc55d340> Operating System

Affected Configurations

Operator: OR

Vulnerable CPE
Yes cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*
Yes cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*
Yes cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*
Yes cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*
Yes cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*
Yes cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*
Yes cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*
Yes cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*

Operator: OR

Vulnerable CPE
Yes cpe:2.3:o:redhat:enterprise_linux_server_aus:6.5:*:*:*:*:*:*:*

Operator: OR

Vulnerable CPE
Yes cpe:2.3:o:debian:debian_linux:7.0:*:*:*:*:*:*:*
Yes cpe:2.3:o:debian:debian_linux:8.0:*:*:*:*:*:*:*

Operator: OR

Vulnerable CPE
Yes cpe:2.3:o:canonical:ubuntu_linux:12.04:*:*:*:-:*:*:*
Yes cpe:2.3:o:canonical:ubuntu_linux:14.04:*:*:*:esm:*:*:*
Yes cpe:2.3:o:canonical:ubuntu_linux:15.04:*:*:*:*:*:*:*

References

Notification
Message here