CVE-2016-10229
Critical
Description
udp.c in the Linux kernel before 4.5 allows remote attackers to execute arbitrary code via UDP traffic that triggers an unsafe second checksum calculation during execution of a recv system call with the MSG_PEEK flag.
SeverityCritical
CVSS9.8
Exploit probability—
Product
Linux Kernel
PublishedApr 4, 2017
First seenApr 4, 2017
How to fix
Update
- linux linux_kernel3.2.76, 3.4.113, 3.10.103, 3.12.53, 3.14.77, 3.16.35, 3.18.45, 4.1.40, 4.4.21 or later
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| linux linux_kernel | 3.2 ≤ v < 3.2.76, 3.3 ≤ v < 3.4.113, 3.5 ≤ v < 3.10.103, 3.11 ≤ v < 3.12.53, 3.13 ≤ v < 3.14.77, 3.15 ≤ v < 3.16.35, 3.17 ≤ v < 3.18.45, 3.19 ≤ v < 4.1.40, 4.2 ≤ v < 4.4.21 | 3.2.76, 3.4.113, 3.10.103, 3.12.53, 3.14.77, 3.16.35, 3.18.45, 4.1.40, 4.4.21 |
| google android | v ≤ 7.1.1 | — |
Check your version
Choose the product and enter the version you run to see whether it falls in the affected range.
In the Intelligence 360 plan
Attack Surface Management
See the assets tied to your domains, the technologies they run and known vulnerabilities in one list.