CVE-2016-10229
Published · Updated
8Vexday Risk Score
No sign of exploitation. No public exploitation artifact known so far.
ssvc Trackepss 13%
exploitation probability
13%top 4% of all CVEs
observed exploitation
nono source reports it
udp.c in the Linux kernel before 4.5 allows remote attackers to execute arbitrary code via UDP traffic that triggers an unsafe second checksum calculation during execution of a recv system call with the MSG_PEEK flag.
Affected products
n/a · n/aReferences
http://git.kernel.org/cgit/linux/kernel/git/torvalds/linux.git/commit/?id=197c949e7798fbf28cfadc69d9ca0c2abbf93191https://github.com/torvalds/linux/commit/197c949e7798fbf28cfadc69d9ca0c2abbf93191http://source.android.com/security/bulletin/2017-04-01.htmlhttps://security.netapp.com/advisory/ntap-20250103-0008/https://security.paloaltonetworks.com/CVE-2016-10229http://www.securityfocus.com/bid/97397http://www.securitytracker.com/id/1038201