CVE-2016-5696

Published: Aug 6, 2016Modified: May 6, 2026

4.8

Vector

CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:L/A:L

Exploitability: 2.2 / Impact: 2.5

Source: NVD

Description

net/ipv4/tcp_input.c in the Linux kernel before 4.7 does not properly determine the rate of challenge ACK segments, which makes it easier for remote attackers to hijack TCP sessions via a blind in-window attack.

Affected (4)

Products: Google: Android · Oracle: Vm Server · Linux: Linux Kernel

1 product

1 product

1 product

Configuration A

1 vulnerable

Vulnerable Software	Affected Versions
Google Android	Up to 7.0

Configuration B

2 vulnerable

Vulnerable Software	Affected Versions
Oracle Vm Server	Version 3.3
Oracle Vm Server	Version 3.4

Configuration C

1 vulnerable

Vulnerable Software	Affected Versions
Linux Linux Kernel	Up to 4.6.6

Related CWEs

CWE-200

Exposure of Sensitive Information to an Unauthorized Actor

The product exposes sensitive information to an actor that is not explicitly authorized to have access to that information.

References (64)

http://git.kernel.org/cgit/linux/kernel/git/torvalds/linux.git/commit/?id=75ff39ccc1bd5d3c455b6822ab09e533c551f758

Source: cve@mitre.org

Issue TrackingPatch

http://rhn.redhat.com/errata/RHSA-2016-1631.html

Source: cve@mitre.org

http://rhn.redhat.com/errata/RHSA-2016-1632.html

Source: cve@mitre.org

http://rhn.redhat.com/errata/RHSA-2016-1633.html

Source: cve@mitre.org

http://rhn.redhat.com/errata/RHSA-2016-1657.html

Source: cve@mitre.org

http://rhn.redhat.com/errata/RHSA-2016-1664.html

Source: cve@mitre.org

http://rhn.redhat.com/errata/RHSA-2016-1814.html

Source: cve@mitre.org

http://rhn.redhat.com/errata/RHSA-2016-1815.html

Source: cve@mitre.org

http://rhn.redhat.com/errata/RHSA-2016-1939.html

Source: cve@mitre.org

http://source.android.com/security/bulletin/2016-10-01.html

Source: cve@mitre.org

Third Party Advisory

http://www.openwall.com/lists/oss-security/2016/07/12/2

Source: cve@mitre.org

Mailing ListThird Party Advisory

http://www.oracle.com/technetwork/topics/security/linuxbulletinjul2016-3090544.html

Source: cve@mitre.org

Third Party Advisory

http://www.oracle.com/technetwork/topics/security/ovmbulletinjul2016-3090546.html

Source: cve@mitre.org

Vendor Advisory

http://www.prnewswire.com/news-releases/mitnick-attack-reappears-at-geekpwn-macau-contest-300270779.html

Source: cve@mitre.org

Technical Description

http://www.securityfocus.com/bid/91704

Source: cve@mitre.org

http://www.securitytracker.com/id/1036625

Source: cve@mitre.org

http://www.ubuntu.com/usn/USN-3070-1

Source: cve@mitre.org

http://www.ubuntu.com/usn/USN-3070-2

Source: cve@mitre.org

http://www.ubuntu.com/usn/USN-3070-3

Source: cve@mitre.org

http://www.ubuntu.com/usn/USN-3070-4

Source: cve@mitre.org

http://www.ubuntu.com/usn/USN-3071-1

Source: cve@mitre.org

http://www.ubuntu.com/usn/USN-3071-2

Source: cve@mitre.org

http://www.ubuntu.com/usn/USN-3072-1

Source: cve@mitre.org

http://www.ubuntu.com/usn/USN-3072-2

Source: cve@mitre.org

https://bto.bluecoat.com/security-advisory/sa131

Source: cve@mitre.org

https://bugzilla.redhat.com/show_bug.cgi?id=1354708

Source: cve@mitre.org

Issue Tracking

https://github.com/Gnoxter/mountain_goat

Source: cve@mitre.org

ExploitThird Party Advisory

https://github.com/torvalds/linux/commit/75ff39ccc1bd5d3c455b6822ab09e533c551f758

Source: cve@mitre.org

Issue TrackingPatch

https://kc.mcafee.com/corporate/index?page=content&id=SB10167

Source: cve@mitre.org

https://security.paloaltonetworks.com/CVE-2016-5696

Source: cve@mitre.org

https://www.arista.com/en/support/advisories-notices/security-advisories/1461-security-advisory-23

Source: cve@mitre.org

https://www.usenix.org/system/files/conference/usenixsecurity16/sec16_paper_cao.pdf

Source: cve@mitre.org

Technical Description

http://git.kernel.org/cgit/linux/kernel/git/torvalds/linux.git/commit/?id=75ff39ccc1bd5d3c455b6822ab09e533c551f758