NetSight
IP …
high7.8

CVE-2015-1465

The IPv4 implementation in the Linux kernel before 3.18.8 does not properly consider the length of the Read-Copy Update (RCU) grace period for redirecting look…

Impact

The IPv4 implementation in the Linux kernel before 3.18.8 does not properly consider the length of the Read-Copy Update (RCU) grace period for redirecting lookups in the absence of caching, which allows remote attackers to cause a denial of service (memory consumption or system crash) via a flood of packets.

Affected products

VendorProductAffected versions
LinuxLinux Kernel
from 3.10.50 before 3.10.70
from 3.12.26 before 3.12.38
from 3.14.14 before 3.14.34
from 3.15.7 before 3.16.35
from 3.17 before 3.18.8
CanonicalUbuntu Linux
Versions 12.04, 14.04, 14.10

Weakness classification

CWE-17

References