CVE-2015-5364

Published: Aug 31, 2015Modified: May 6, 2026

7.8

Vector

AV:N/AC:L/Au:N/C:N/I:N/A:C

Exploitability: 10.0 / Impact: 6.9

Source: NVD

Description

The (1) udp_recvmsg and (2) udpv6_recvmsg functions in the Linux kernel before 4.0.6 do not properly consider yielding a processor, which allows remote attackers to cause a denial of service (system hang) via incorrect checksums within a UDP packet flood.

Affected (14)

Products: Linux: Linux Kernel · Redhat: Enterprise Linux Server Aus · Debian: Debian Linux · +1 more

Show all products

Linux: Linux Kernel · Redhat: Enterprise Linux Server Aus · Debian: Debian Linux · Canonical: Ubuntu Linux

Linux

1 product

Linux Kernel

Redhat

1 product

Enterprise Linux Server Aus

1 product

1 product

Configuration A

8 vulnerable

Vulnerable Software	Affected Versions
Linux Linux Kernel	Before 3.2.70
Linux Linux Kernel	From 3.11 to 3.12.44
Linux Linux Kernel	From 3.13 to 3.14.45
Linux Linux Kernel	From 3.15 to 3.16.35
Linux Linux Kernel	From 3.17 to 3.18.17
Linux Linux Kernel	From 3.19 to 4.0.6
Linux Linux Kernel	From 3.3 to 3.4.109
Linux Linux Kernel	From 3.5 to 3.10.81

Configuration B

1 vulnerable

Vulnerable Software	Affected Versions
Redhat Enterprise Linux Server Aus	Version 6.5

Configuration C

2 vulnerable

Vulnerable Software	Affected Versions
Debian Debian Linux	Version 7.0
Debian Debian Linux	Version 8.0

Configuration D

3 vulnerable

Vulnerable Software	Affected Versions
Canonical Ubuntu Linux	Version 12.04
Canonical Ubuntu Linux	Version 14.04
Canonical Ubuntu Linux	Version 15.04

Related CWEs

CWE-399

References (76)

http://git.kernel.org/cgit/linux/kernel/git/torvalds/linux.git/commit/?id=beb39db59d14990e401e235faf66a6b9b31240b0

Source: security@debian.org

Vendor Advisory

http://kb.juniper.net/InfoCenter/index?page=content&id=JSA10761

Source: security@debian.org

Third Party Advisory

http://lists.opensuse.org/opensuse-security-announce/2015-07/msg00023.html

Source: security@debian.org

Mailing ListThird Party Advisory

http://lists.opensuse.org/opensuse-security-announce/2015-07/msg00049.html

Source: security@debian.org

Mailing ListThird Party Advisory

http://lists.opensuse.org/opensuse-security-announce/2015-08/msg00011.html

Source: security@debian.org

Mailing ListThird Party Advisory

http://lists.opensuse.org/opensuse-security-announce/2015-09/msg00004.html

Source: security@debian.org

Mailing ListThird Party Advisory

http://lists.opensuse.org/opensuse-security-announce/2015-09/msg00007.html

Source: security@debian.org

Mailing ListThird Party Advisory

http://lists.opensuse.org/opensuse-security-announce/2015-09/msg00008.html

Source: security@debian.org

Mailing ListThird Party Advisory

http://lists.opensuse.org/opensuse-security-announce/2015-09/msg00009.html

Source: security@debian.org

Mailing ListThird Party Advisory

http://lists.opensuse.org/opensuse-security-announce/2015-09/msg00010.html

Source: security@debian.org

Mailing ListThird Party Advisory

http://lists.opensuse.org/opensuse-security-announce/2015-09/msg00011.html

Source: security@debian.org

Mailing ListThird Party Advisory

http://lists.opensuse.org/opensuse-security-announce/2015-09/msg00018.html

Source: security@debian.org

Mailing ListThird Party Advisory

http://lists.opensuse.org/opensuse-security-announce/2015-09/msg00021.html

Source: security@debian.org

Mailing ListThird Party Advisory

http://rhn.redhat.com/errata/RHSA-2015-1623.html

Source: security@debian.org

Third Party Advisory

http://rhn.redhat.com/errata/RHSA-2015-1778.html

Source: security@debian.org

Third Party Advisory

http://rhn.redhat.com/errata/RHSA-2015-1787.html

Source: security@debian.org

Third Party Advisory

http://rhn.redhat.com/errata/RHSA-2016-0045.html

Source: security@debian.org

Third Party Advisory

http://rhn.redhat.com/errata/RHSA-2016-1096.html

Source: security@debian.org

Third Party Advisory

http://rhn.redhat.com/errata/RHSA-2016-1100.html

Source: security@debian.org

Third Party Advisory

http://www.debian.org/security/2015/dsa-3313

Source: security@debian.org

Third Party Advisory

http://www.debian.org/security/2015/dsa-3329

Source: security@debian.org

Third Party Advisory

http://www.kernel.org/pub/linux/kernel/v4.x/ChangeLog-4.0.6

Source: security@debian.org

Vendor Advisory

http://www.openwall.com/lists/oss-security/2015/06/30/13

Source: security@debian.org

Mailing ListThird Party Advisory

http://www.oracle.com/technetwork/topics/security/linuxbulletinjan2016-2867209.html

Source: security@debian.org

Third Party Advisory

http://www.oracle.com/technetwork/topics/security/linuxbulletinoct2015-2719645.html

Source: security@debian.org

Third Party Advisory

http://www.securityfocus.com/bid/75510

Source: security@debian.org

Third Party AdvisoryVDB Entry

http://www.securitytracker.com/id/1032794

Source: security@debian.org

Third Party AdvisoryVDB Entry

http://www.ubuntu.com/usn/USN-2680-1

Source: security@debian.org

Third Party Advisory

http://www.ubuntu.com/usn/USN-2681-1

Source: security@debian.org

Third Party Advisory

http://www.ubuntu.com/usn/USN-2682-1

Source: security@debian.org

Third Party Advisory

http://www.ubuntu.com/usn/USN-2683-1

Source: security@debian.org

Third Party Advisory

http://www.ubuntu.com/usn/USN-2684-1

Source: security@debian.org

Third Party Advisory

http://www.ubuntu.com/usn/USN-2713-1

Source: security@debian.org

Third Party Advisory

http://www.ubuntu.com/usn/USN-2714-1

Source: security@debian.org

Third Party Advisory

https://access.redhat.com/errata/RHSA-2016:1225

Source: security@debian.org

Third Party Advisory

https://bugzilla.redhat.com/show_bug.cgi?id=1239029

Source: security@debian.org

Issue Tracking

https://github.com/torvalds/linux/commit/beb39db59d14990e401e235faf66a6b9b31240b0

Source: security@debian.org

Third Party Advisory

https://twitter.com/grsecurity/status/605854034260426753

Source: security@debian.org

Third Party Advisory

http://git.kernel.org/cgit/linux/kernel/git/torvalds/linux.git/commit/?id=beb39db59d14990e401e235faf66a6b9b31240b0