DEBIAN-CVE-2016-3707

DEBIAN-CVE-2016-3707 PUBLISHED CVSS 8.100000381469727 HIGH

The icmp_check_sysrq function in net/ipv4/icmp.c in the kernel.org projects/rt patches for the Linux kernel, as used in the kernel-rt package before 3.10.0-327.22.1 in Red Hat Enterprise Linux for Real Time 7 and other products, allows remote attackers to execute SysRq commands via crafted ICMP Echo Request packets, as demonstrated by a brute-force attack to discover a cookie, or an attack that occurs after reading the local icmp_echo_sysrq file.

Risk Scores

CVSS v3.0

8.100000381469727

CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H

Affected Products

Vendor	Product	Versions
Debian:12	linux	0, 0, 0
Debian:11	linux	0, 0, 0
Debian:14	linux	0, 0, 0
Debian:13	linux	0, 0, 0

Timeline

Jun 27, 2016 CVE Published
Apr 28, 2026 CVE Updated

References

https://security-tracker.debian.org/tracker/CVE-2016-3707 advisory

Open in Interactive Console →