VDB

CVE-2016-9755

CVE-2016-9755 PUBLISHED CVSS 7.800000190734863 HIGH

The netfilter subsystem in the Linux kernel before 4.9 mishandles IPv6 reassembly, which allows local users to cause a denial of service (integer overflow, out-of-bounds write, and GPF) or possibly have unspecified other impact via a crafted application that makes socket, connect, and writev system calls, related to net/ipv6/netfilter/nf_conntrack_reasm.c and net/ipv6/netfilter/nf_defrag_ipv6_hooks.c.

EPSS 0.39% · 30.5th percentile

Risk Scores

CVSS 3.0
7.800000190734863
CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
EPSS Score
0.39%
30.5th percentile

Affected Products

VendorProductVersions
Ubuntu:20.04:LTSlinux-azure-fde*, 5.4.0-1076.79+cvm1.1, *
Ubuntu:22.04:LTSlinux-intel-iot-realtime5.15.0-1073.75, 0
Ubuntu:20.04:LTSlinux-raspi25.4.0-1004.4, 0, 5.3.0-1007.8
Ubuntu:22.04:LTSlinux-realtime5.15.0-1032.35, 0
Ubuntu:18.04:LTSlinux-gcp4.15.0-1017.18, 4.15.0-1019.20, 4.15.0-1021.22
Ubuntu:18.04:LTSlinux-hwe5.0.0-25.26~18.04.1, 0, 4.18.0-13.14~18.04.1
Ubuntu:22.04:LTSlinux-riscv5.15.0-1008.8, 5.15.0-1012.13, 5.15.0-1015.17
Ubuntu:24.04:LTSlinux-raspi-realtime0, 6.8.0-2019.20
Ubuntu:18.04:LTSlinux-azure4.18.0-1024.25~18.04.1, 4.18.0-1025.27~18.04.1, 5.0.0-1014.14~18.04.1
Ubuntu:20.04:LTSlinux-riscv5.4.0-28.32, 5.4.0-27.31, 5.4.0-40.45
Ubuntu:16.04:LTSlinux-hwe4.8.0-42.45~16.04.1, 4.8.0-41.44~16.04.1, 4.8.0-36.36~16.04.1
Ubuntu:20.04:LTSlinux-gke5.4.0-1078.84, 5.4.0-1080.86, 5.4.0-1081.87

Timeline

  • Dec 28, 2016 CVE Published
  • Feb 4, 2022 EPSS Score
  • Mar 29, 2022 EPSS Score
  • May 21, 2022 EPSS Score
  • Jul 13, 2022 EPSS Score
  • Sep 6, 2022 EPSS Score
  • Oct 29, 2022 EPSS Score
  • Dec 21, 2022 EPSS Score
  • Feb 12, 2023 EPSS Score
  • Mar 7, 2023 EPSS Score
  • Apr 6, 2023 EPSS Score
  • May 29, 2023 EPSS Score

References

Open in Interactive Console →
$ Console Community · 100/wk Open console ›