CVE-2016-5696 | Vulnetix

CVE-2016-5696 PUBLISHED

Reported by mitre · Published August 6, 2016

net/ipv4/tcp_input.c in the Linux kernel before 4.7 does not properly determine the rate of challenge ACK segments, which makes it easier for remote attackers to hijack TCP sessions via a blind in-window attack.

Fixed versions

Upgrade to a fixed version or later. Language registries are listed first, then Linux distributions, then vendor products.

Package	Ecosystem	Fixed in
linux_kernel	linux	4.6.6
linux	Ubuntu:16.04:LTS	4.4.0-36.55
linux-raspi2	Ubuntu:16.04:LTS	4.4.0-1021.27
linux-lts-xenial	Ubuntu:14.04:LTS	4.4.0-36.55~14.04.1

Affected products

Vendor	Product	Versions
n/a	n/a	n/a
n/a	n/a	*

Timeline

Aug 6, 2016 CVE Published
Aug 29, 2016 PoC Published
Feb 4, 2022 EPSS Score (30 in total, the first dated here)
Mar 5, 2026 Distribution Patch (21 in total, the first dated here)
Mar 5, 2026 Security Advisory (9 in total, the first dated here)
Oct 7, 2026 Coalition ESS Score

Query this with the API

The same record, from the CLI:

vulnetix vdb vuln CVE-2016-5696
vulnetix vdb fixes CVE-2016-5696

Or with curl, using the org id and key from your account page:

curl -s -H "Authorization: ApiKey ${VULNETIX_ORG_ID}:${VULNETIX_API_KEY}" \
  "https://api.vdb.vulnetix.com/v2/vuln/CVE-2016-5696/fixes/registry"

The Community plan is free and allows 50 queries a day. Get a free API key · API quickstart

References

x_refsource_CONFIRM
x_refsource_MISC
USN-3070-1 vendor-advisoryx_refsource_UBUNTU
RHSA-2016:1657 vendor-advisoryx_refsource_REDHAT
x_refsource_CONFIRM
x_refsource_CONFIRM
x_refsource_CONFIRM
RHSA-2016:1814 vendor-advisoryx_refsource_REDHAT
x_refsource_CONFIRM
x_refsource_CONFIRM
91704 vdb-entryx_refsource_BID
USN-3070-3 vendor-advisoryx_refsource_UBUNTU
USN-3070-2 vendor-advisoryx_refsource_UBUNTU
RHSA-2016:1815 vendor-advisoryx_refsource_REDHAT
RHSA-2016:1939 vendor-advisoryx_refsource_REDHAT
USN-3071-1 vendor-advisoryx_refsource_UBUNTU
RHSA-2016:1632 vendor-advisoryx_refsource_REDHAT
x_refsource_MISC
x_refsource_CONFIRM
USN-3070-4 vendor-advisoryx_refsource_UBUNTU

…and 12 more

Look up in the Resolve Platform →