Ubuntu.comUB:CVE-2015-8787CVE-2015-8787
10 High
CVSS2
Attack Vector
NETWORK
Attack Complexity
LOW
Authentication
NONE
Confidentiality Impact
COMPLETE
Integrity Impact
COMPLETE
Availability Impact
COMPLETE
AV:N/AC:L/Au:N/C:C/I:C/A:C
9.8 High
CVSS3
Attack Vector
NETWORK
Attack Complexity
LOW
Privileges Required
NONE
User Interaction
NONE
Scope
UNCHANGED
Confidentiality Impact
HIGH
Integrity Impact
HIGH
Availability Impact
HIGH
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
0.047 Low
EPSS
Percentile
92.7%
The nf_nat_redirect_ipv4 function in net/netfilter/nf_nat_redirect.c in the
Linux kernel before 4.4 allows remote attackers to cause a denial of
service (NULL pointer dereference and system crash) or possibly have
unspecified other impact by sending certain IPv4 packets to an incompletely
configured interface, a related issue to CVE-2003-1604.
Bugs
Notes
| Author | Note |
|---|---|
| jdstrand | android kernels (flo, goldfish, grouper, maguro, mako and manta) are not supported on the Ubuntu Touch 14.10 and earlier preview kernels linux-lts-saucy no longer receives official support linux-lts-quantal no longer receives official support |
| seth-arnold | The “Introducing” commit message says IPv6 patch would follow – we should investigate if it has the same flaw, if it ever followed. |
References
www.openwall.com/lists/oss-security/2016/01/27/6
bugzilla.redhat.com/show_bug.cgi?id=1300731
launchpad.net/bugs/cve/CVE-2015-8787
lkml.org/lkml/2015/12/2/618
nvd.nist.gov/vuln/detail/CVE-2015-8787
security-tracker.debian.org/tracker/CVE-2015-8787
ubuntu.com/security/notices/USN-2889-1
ubuntu.com/security/notices/USN-2889-2
ubuntu.com/security/notices/USN-2890-1
ubuntu.com/security/notices/USN-2890-2
ubuntu.com/security/notices/USN-2890-3
www.cve.org/CVERecord?id=CVE-2015-8787
Related
10 High
CVSS2
Attack Vector
NETWORK
Attack Complexity
LOW
Authentication
NONE
Confidentiality Impact
COMPLETE
Integrity Impact
COMPLETE
Availability Impact
COMPLETE
AV:N/AC:L/Au:N/C:C/I:C/A:C
9.8 High
CVSS3
Attack Vector
NETWORK
Attack Complexity
LOW
Privileges Required
NONE
User Interaction
NONE
Scope
UNCHANGED
Confidentiality Impact
HIGH
Integrity Impact
HIGH
Availability Impact
HIGH
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
0.047 Low
EPSS
Percentile
92.7%