CVE-2015-3332

 

Published at: - 27-05-2015 12:59

Last modified: - 21-09-2022 08:44

Total changes: - 2

Description

A certain backport in the TCP Fast Open implementation for the Linux kernel before 3.18 does not properly maintain a count value, which allow local users to cause a denial of service (system crash) via the Fast Open feature, as demonstrated by visiting the chrome://flags/#enable-tcp-fast-open URL when using certain 3.10.x through 3.16.x kernel builds, including longterm-maintenance releases and ckt (aka Canonical Kernel Team) builds.

Common Vulnerability Scoring System (CVSS)

AV:L/AC:L/Au:N/C:N/I:N/A:C

 

Verification logic

 

Reference

• https://bugs.debian.org/782515
• [netdev] 20150414 [stable regression] tcp: make connect() mem charging friendly-
• https://bugzilla.redhat.com/show_bug.cgi?id=1213951
• [oss-security] 20150414 TCP Fast Open local DoS in some Linux stable branches-
• DSA-3237-

 

Keywords

NVD

 

CVE-2015-3332

 

CVE

 

Common vulnerabilities & exposures

 

CVSS

 

Common vulnerability scoring system

 

Security

 

Vulnerabilities

 

Exposures