CVE-2016-5696
Published · Updated
8Vexday Risk Score
No sign of exploitation. No public exploitation artifact known so far.
ssvc Trackepss 15%
exploitation probability
15%top 3% of all CVEs
observed exploitation
nono source reports it
net/ipv4/tcp_input.c in the Linux kernel before 4.7 does not properly determine the rate of challenge ACK segments, which makes it easier for remote attackers to hijack TCP sessions via a blind in-window attack.
Affected products
n/a · n/aReferences
http://git.kernel.org/cgit/linux/kernel/git/torvalds/linux.git/commit/?id=75ff39ccc1bd5d3c455b6822ab09e533c551f758http://rhn.redhat.com/errata/RHSA-2016-1631.htmlhttp://rhn.redhat.com/errata/RHSA-2016-1632.htmlhttp://rhn.redhat.com/errata/RHSA-2016-1633.htmlhttp://rhn.redhat.com/errata/RHSA-2016-1657.htmlhttp://rhn.redhat.com/errata/RHSA-2016-1664.htmlhttp://rhn.redhat.com/errata/RHSA-2016-1814.htmlhttp://rhn.redhat.com/errata/RHSA-2016-1815.htmlhttp://rhn.redhat.com/errata/RHSA-2016-1939.htmlhttps://bto.bluecoat.com/security-advisory/sa131https://bugzilla.redhat.com/show_bug.cgi?id=1354708https://github.com/Gnoxter/mountain_goat