NetSight
IP …
high7.8

CVE-2016-8632

The tipc_msg_build function in net/tipc/msg.c in the Linux kernel through 4.8.11 does not validate the relationship between the minimum fragment length and the…

Impact

The tipc_msg_build function in net/tipc/msg.c in the Linux kernel through 4.8.11 does not validate the relationship between the minimum fragment length and the maximum packet size, which allows local users to gain privileges or cause a denial of service (heap-based buffer overflow) by leveraging the CAP_NET_ADMIN capability.

Affected products

VendorProductAffected versions
LinuxLinux Kernel
from 2.6.16 before 3.2.85
from 3.3 before 3.16.40
from 3.17 before 4.1.37
from 4.2 before 4.4.65
from 4.5 before 4.8.14

Weakness classification

CWE-119CWE-264

References