CVE-2016-5696 in Google Android

Summary

net/ipv4/tcp_input.c in the Linux kernel before 4.7 does not properly determine the rate of challenge ACK segments, which makes it easier for remote attackers to hijack TCP sessions via a blind in-window attack.

Reservation

06/16/2016

Disclosure

08/06/2016

Entries

VulDB provides additional information and datapoints for this CVE:

ID	Vulnerability	CWE	Exp	Cou	CVE
92401	Google Android Kernel Networking information disclosure	200	Not defined	Official fix	CVE-2016-5696
90631	Linux Kernel tcp_input.c information disclosure	200	Not defined	Official fix	CVE-2016-5696

Sources

• MITRE
• NVD
• CVE Details