CVE-2016-3707
High
Description
The icmp_check_sysrq function in net/ipv4/icmp.c in the kernel.org projects/rt patches for the Linux kernel, as used in the kernel-rt package before 3.10.0-327.22.1 in Red Hat Enterprise Linux for Real Time 7 and other products, allows remote attackers to execute SysRq commands via crafted ICMP Echo Request packets, as demonstrated by a brute-force attack to discover a cookie, or an attack that occurs after reading the local icmp_echo_sysrq file.
SeverityHigh
CVSS8.1
Exploit probability89. percentile3.4%
Product
Linux Kernel-rt
PublishedJun 27, 2016
First seenJun 27, 2016
How to fix
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| linux linux_kernel-rt | v ≤ 3.10.0 | — |
| redhat enterprise_linux_for_real_time | 7 | — |
| redhat enterprise_linux_for_real_time_for_nfv | 7 | — |
| novell suse_linux_enterprise_real_time_extension | 12.0 | — |
Check your version
Choose the product and enter the version you run to see whether it falls in the affected range.
In the Intelligence 360 plan
Attack Surface Management
See the assets tied to your domains, the technologies they run and known vulnerabilities in one list.