VDB
RHSA-2016%3A1631
RHSA-2016%3A1631
PUBLISHED
CVSS 4.800000190734863 MEDIUM
Red Hat Security Advisory: realtime-kernel security and bug fix update
Risk Scores
CVSS 3.0
4.800000190734863
CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:L/A:L
Affected Products
| Vendor | Product | Versions |
|---|---|---|
| Red Hat:enterprise_mrg:2:server:el6 | kernel-rt-debug | 0, 0 |
| Red Hat:enterprise_mrg:2:server:el6 | kernel-rt-vanilla-debuginfo | 0, 0 |
| Red Hat:enterprise_mrg:2:server:el6 | kernel-rt-devel | 0, 0 |
| Red Hat:enterprise_mrg:2:server:el6 | kernel-rt-trace-debuginfo | 0, 0 |
| Red Hat:enterprise_mrg:2:server:el6 | kernel-rt-debuginfo-common-x86_64 | 0, 0 |
| Red Hat:enterprise_mrg:2:server:el6 | kernel-rt-firmware | 0, 0 |
| Red Hat:enterprise_mrg:2:server:el6 | kernel-rt-doc | 0, 0 |
| Red Hat:enterprise_mrg:2:server:el6 | kernel-rt-debug-devel | 0, 0 |
| Red Hat:enterprise_mrg:2:server:el6 | kernel-rt-vanilla-devel | 0, 0 |
| Red Hat:enterprise_mrg:2:server:el6 | kernel-rt-trace | 0, 0 |
| Red Hat:enterprise_mrg:2:server:el6 | kernel-rt-debuginfo | 0, 0 |
| Red Hat:enterprise_mrg:2:server:el6 | kernel-rt-vanilla | 0, 0 |
| Red Hat:enterprise_mrg:2:server:el6 | kernel-rt-debug-debuginfo | 0, 0 |
| Red Hat:enterprise_mrg:2:server:el6 | kernel-rt | 0, 0 |
| Red Hat:enterprise_mrg:2:server:el6 | kernel-rt-trace-devel | 0, 0 |
Exploit Intelligence
- A PoC demonstrating techniques exploiting CVE-2016-5696 Off-Path TCP Exploits: Global Rate Limit Considered Dangerous (github-poc-repo)
- A PoC demonstrating techniques exploiting CVE-2016-5696 Off-Path TCP Exploits: Global Rate Limit Considered Dangerous (github-poc-repo)
- Proof of Concept code for CVE-2016-5696 (github-poc-repo)
- Proof of Concept code for CVE-2016-5696 (github-poc-repo)
- Daemon to randomize tcp_challenge_ack_limit to prevent side channel attacks CVE-2016-5696 (github-poc-repo)
- Daemon to randomize tcp_challenge_ack_limit to prevent side channel attacks CVE-2016-5696 (github-poc-repo)
- Proof-of-concept exploit code for CVE-2016-5696 (github-poc-repo)
- Proof-of-concept exploit code for CVE-2016-5696 (github-poc-repo)
- global rate-limiting in Linux (CVE-2016-5696) scanner (github-poc-repo)
- global rate-limiting in Linux (CVE-2016-5696) scanner (github-poc-repo)
…and 10 more exploits
Timeline
- Aug 18, 2016 CVE Published
- Feb 26, 2026 CVE Updated
- Apr 30, 2026 Distribution Patch
- Apr 30, 2026 Distribution Patch
- Apr 30, 2026 Security Advisory
- Apr 30, 2026 Security Advisory
References
- https://access.redhat.com/errata/RHSA-2016:1631 advisory
- https://access.redhat.com/security/updates/classification/#important article
- https://bugzilla.redhat.com/show_bug.cgi?id=1354708 report
- https://security.access.redhat.com/data/csaf/v2/advisories/2016/rhsa-2016_1631.json advisory
- https://access.redhat.com/security/cve/CVE-2016-5696 report
- https://www.cve.org/CVERecord?id=CVE-2016-5696 advisory
- https://nvd.nist.gov/vuln/detail/CVE-2016-5696 advisory
- http://lwn.net/Articles/696868/ article