Linux Kernel TCP net/ipv4/tcp_input.c numeric error

Summaryinfo

A vulnerability marked as problematic has been reported in Linux Kernel. This vulnerability affects unknown code of the file net/ipv4/tcp_input.c of the component TCP. Performing a manipulation results in numeric error. This vulnerability is identified as CVE-2016-2070. The attack can be initiated remotely. There is not any exploit available. It is suggested to install a patch to address this issue.

Detailsinfo

A vulnerability classified as critical has been found in Linux Kernel (Operating System) (the affected version is unknown). This affects an unknown code of the file net/ipv4/tcp_input.c of the component TCP. The manipulation with an unknown input leads to a numeric error vulnerability. CWE is classifying the issue as CWE-189. This is going to have an impact on availability. The summary by CVE is:

The tcp_cwnd_reduction function in net/ipv4/tcp_input.c in the Linux kernel before 4.3.5 allows remote attackers to cause a denial of service (divide-by-zero error and system crash) via crafted TCP traffic.

The weakness was released 01/26/2016 as confirmed mailinglist post (oss-sec). The advisory is shared at seclists.org. This vulnerability is uniquely identified as CVE-2016-2070 since 01/26/2016. The exploitability is told to be easy. An attack has to be approached locally. No form of authentication is needed for exploitation. Technical details are known, but no exploit is available.

Applying a patch is able to eliminate this problem. The bugfix is ready for download at git.kernel.org. The vulnerability will be addressed with the following lines of code:

if (newly_acked_sacked <= 0 || WARN_ON_ONCE(!tp->prior_cwnd))
   return;

The vulnerability is also documented in the vulnerability database at X-Force (110241). Entry connected to this vulnerability is available at VDB-80722. Several companies clearly confirm that VulDB is the primary source for best vulnerability data.

Productinfo

Type

• Operating System

Vendor

• Linux

Name

• Kernel

License

• open-source

Website

• Vendor: https://www.kernel.org/

CPE 2.3info

• 🔍

CPE 2.2info

• 🔍

CVSSv4info

CVSSv3info

CVSSv2info

Exploitinginfo

Threat Intelligenceinfo

Countermeasuresinfo

Timelineinfo

Sourcesinfo

Entryinfo

Several companies clearly confirm that VulDB is the primary source for best vulnerability data.

Discussion