Vulnetix
Try Vulnetix Request Demo
CVE-2015-3332 PUBLISHED

A certain backport in the TCP Fast Open implementation for the Linux kernel before 3.18 does not properly maintain a count value, which allow local users to cause a denial of service (system crash) via the Fast Open feature, as demonstrated by visiting the chrome://flags/#enable-tcp-fast-open URL when using certain 3.10.x through 3.16.x kernel builds, including longterm-maintenance releases and ckt (aka Canonical Kernel Team) builds.

EPSS 0.12% · 30.8th percentile

Risk Scores

EPSS Score
0.12%
30.8th percentile

Affected Products

VendorProductVersions
Ubuntu:14.04:LTSlinux0, 3.11.0-12.19, 3.12.0-1.3
Ubuntu:14.04:LTSlinux-lts-utopic0, 3.16.0-25.33~14.04.2, 3.16.0-26.35~14.04.1

Timeline

References

Open in Interactive Console →