NetSight
IP …
high7.3

CVE-2016-3841

The IPv6 stack in the Linux kernel before 4.3.3 mishandles options data, which allows local users to gain privileges or cause a denial of service (use-after-fr…

Impact

The IPv6 stack in the Linux kernel before 4.3.3 mishandles options data, which allows local users to gain privileges or cause a denial of service (use-after-free and system crash) via a crafted sendmsg system call.

Affected products

VendorProductAffected versions
GoogleAndroid
Version 6.0.1
LinuxLinux Kernel
before 3.2.75
from 3.3 before 3.12.52
from 3.13 before 3.16.35
from 3.17 before 3.18.25
from 3.19 before 4.1.15
from 4.2 before 4.2.8

Weakness classification

CWE-264CWE-416

References