CVE-2015-5366

EPSS 6.25%
Veröffentlicht 31.08.2015 10:59:13
Zuletzt bearbeitet 06.05.2026 22:30:45
Quelle cve@mitre.org
CVE-Watchlists
Login
Unerledigt
Login

The (1) udp_recvmsg and (2) udpv6_recvmsg functions in the Linux kernel before 4.0.6 provide inappropriate -EAGAIN return values, which allows remote attackers to cause a denial of service (EPOLLET epoll application read outage) via an incorrect checksum in a UDP packet, a different vulnerability than CVE-2015-5364.

Betroffene Produkte Warnungen 0 Metriken 2 CWE 0 Referenzen 40

NVD 2 VulnDex Vulnerability Enrichment 6

Daten sind bereitgestellt durch National Vulnerability Database (NVD)

Linux ≫ Linux Kernel Version <= 4.0.5

Redhat ≫ Enterprise Linux Server Aus Version6.5

VulnDex Vulnerability Enrichment

Diese Information steht angemeldeten Benutzern zur Verfügung.

Zu dieser CVE wurde keine Warnung gefunden.

EPSS Metriken
Typ	Quelle	Score	Percentile
EPSS	FIRST.org	6.25%	0.926

CVSS Metriken
Quelle	Base Score	Exploit Score	Impact Score	Vector String
nvd@nist.gov	5	10	2.9	AV:N/AC:L/Au:N/C:N/I:N/A:P

Es wurden noch keine Informationen zu CWE veröffentlicht.

http://kb.juniper.net/InfoCenter/index?page=content&id=JSA10761

http://www.oracle.com/technetwork/topics/security/linuxbulletinjan2016-2867209.html

http://www.oracle.com/technetwork/topics/security/linuxbulletinoct2015-2719645.html

http://lists.opensuse.org/opensuse-security-announce/2015-09/msg00004.html

http://lists.opensuse.org/opensuse-security-announce/2015-09/msg00009.html

http://rhn.redhat.com/errata/RHSA-2015-1778.html

http://rhn.redhat.com/errata/RHSA-2015-1787.html

http://lists.opensuse.org/opensuse-security-announce/2015-09/msg00018.html

http://lists.opensuse.org/opensuse-security-announce/2015-09/msg00021.html

http://lists.opensuse.org/opensuse-security-announce/2015-09/msg00008.html

http://lists.opensuse.org/opensuse-security-announce/2015-09/msg00007.html

http://lists.opensuse.org/opensuse-security-announce/2015-09/msg00011.html

http://lists.opensuse.org/opensuse-security-announce/2015-07/msg00023.html

http://lists.opensuse.org/opensuse-security-announce/2015-08/msg00011.html

http://lists.opensuse.org/opensuse-security-announce/2015-07/msg00049.html

http://www.debian.org/security/2015/dsa-3329

http://www.ubuntu.com/usn/USN-2680-1

http://www.ubuntu.com/usn/USN-2681-1

http://www.ubuntu.com/usn/USN-2682-1

http://www.ubuntu.com/usn/USN-2683-1

http://www.ubuntu.com/usn/USN-2684-1

http://www.debian.org/security/2015/dsa-3313

http://lists.opensuse.org/opensuse-security-announce/2015-09/msg00010.html

http://www.ubuntu.com/usn/USN-2713-1

http://www.ubuntu.com/usn/USN-2714-1

http://www.kernel.org/pub/linux/kernel/v4.x/ChangeLog-4.0.6

http://git.kernel.org/cgit/linux/kernel/git/torvalds/linux.git/commit/?id=beb39db59d14990e401e235faf66a6b9b31240b0

http://rhn.redhat.com/errata/RHSA-2015-1623.html

http://rhn.redhat.com/errata/RHSA-2016-0045.html

http://rhn.redhat.com/errata/RHSA-2016-1096.html

http://rhn.redhat.com/errata/RHSA-2016-1100.html

http://www.openwall.com/lists/oss-security/2015/06/30/13

http://www.securityfocus.com/bid/75510

http://www.securitytracker.com/id/1032794

https://access.redhat.com/errata/RHSA-2016:1225

https://bugzilla.redhat.com/show_bug.cgi?id=1239029

https://github.com/torvalds/linux/commit/beb39db59d14990e401e235faf66a6b9b31240b0

https://nvd.nist.gov/vuln/detail/CVE-2015-5366

CVE Source (NVD)

https://cveawg.mitre.org/api/cve/CVE-2015-5366

CVE Source (JSON)

https://euvd.enisa.europa.eu/vulnerability/CVE-2015-5366

EUVD

Team-orientierte Vulnerability Management Plattform

Features der Plattform

CVE-2015-5366