CVE-2016-3156

CWE-399CWE-400 — Uncontrolled Resource Consumption21 documents8 sources
Severity
5.5MEDIUM
EPSS
0.0%
top 94.90%
CISA KEV
Not in KEV
Exploit
No known exploits
Affected products
10
Linux Linux KernelCanonical Ubuntu LinuxNovell Suse Linux Enterprise Debuginfo+7 more
Timeline
PublishedApr 27
Latest updateMay 14

Description

The IPv4 implementation in the Linux kernel before 4.5.2 mishandles destruction of device objects, which allows guest OS users to cause a denial of service (host OS networking outage) by arranging for a large number of IP addresses.

CVSS vector

CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:HExploitability: 1.8 | Impact: 3.6

Affected Packages10 packages

▶Debianlinux< 4.5.1-1+3

Also affects: Ubuntu Linux 12.04

Patches

Patch: github.com ↗Patch: github.com ↗

🔴Vulnerability Details

3
GHSA
GHSA-5hqg-57xw-cp2p: The IPv4 implementation in the Linux kernel before 4↗2022-05-14
▶
OSV
CVE-2016-3156: The IPv4 implementation in the Linux kernel before 4↗2016-04-27
▶
CVEList
CVE-2016-3156: The IPv4 implementation in the Linux kernel before 4↗2016-04-27
▶

📋Vendor Advisories

15
Ubuntu
Linux kernel (OMAP4) vulnerabilities↗2016-06-10
▶
Ubuntu
Linux kernel vulnerabilities↗2016-06-10
▶
Ubuntu
Linux kernel (Wily HWE) vulnerabilities↗2016-05-09
▶
Ubuntu
Linux kernel vulnerabilities↗2016-05-09
▶
Ubuntu
Linux kernel (Utopic HWE) vulnerabilities↗2016-05-09
▶

💬Community

2
Bugzilla
CVE-2016-3156 kernel: ipv4: denial of service when destroying a network interface [fedora-all]↗2016-03-16
▶
Bugzilla
CVE-2016-3156 kernel: ipv4: denial of service when destroying a network interface↗2016-03-16
▶
CVE-2016-3156 (MEDIUM CVSS 5.5) | The IPv4 implementation in the Linu | cvebase.io