Vulnerability Description
The IP stack in the Linux kernel through 4.8.2 allows remote attackers to cause a denial of service (stack consumption and panic) or possibly have unspecified other impact by triggering use of the GRO path for large crafted packets, as demonstrated by packets that contain only VLAN headers, a related issue to CVE-2016-8666.
CVSS Score
HIGH
Affected Products
| Vendor | Product | Versions |
|---|---|---|
| Oracle | Linux | 6 |
| Oracle | Vm Server | 3.4 |
| Linux | Linux Kernel | >= 4.0, < 4.1.37 |
Related Weaknesses (CWE)
References
- http://rhn.redhat.com/errata/RHSA-2016-2047.htmlThird Party Advisory
- http://rhn.redhat.com/errata/RHSA-2016-2107.htmlThird Party Advisory
- http://rhn.redhat.com/errata/RHSA-2016-2110.htmlThird Party Advisory
- http://www.openwall.com/lists/oss-security/2016/10/10/15Mailing ListPatchThird Party Advisory
- http://www.oracle.com/technetwork/topics/security/linuxbulletinoct2016-3090545.hThird Party Advisory
- http://www.oracle.com/technetwork/topics/security/ovmbulletinoct2016-3090547.htmThird Party Advisory
- http://www.securityfocus.com/bid/93476Third Party AdvisoryVDB Entry
- https://access.redhat.com/errata/RHSA-2017:0372Third Party Advisory
- https://bto.bluecoat.com/security-advisory/sa134Third Party Advisory
- https://bugzilla.redhat.com/show_bug.cgi?id=1375944Issue TrackingThird Party Advisory
- https://patchwork.ozlabs.org/patch/680412/Issue TrackingPatch
- http://rhn.redhat.com/errata/RHSA-2016-2047.htmlThird Party Advisory
- http://rhn.redhat.com/errata/RHSA-2016-2107.htmlThird Party Advisory
- http://rhn.redhat.com/errata/RHSA-2016-2110.htmlThird Party Advisory
- http://www.openwall.com/lists/oss-security/2016/10/10/15Mailing ListPatchThird Party Advisory
FAQ
What is CVE-2016-7039?
CVE-2016-7039 is a vulnerability with a CVSS score of 7.5 (HIGH). The IP stack in the Linux kernel through 4.8.2 allows remote attackers to cause a denial of service (stack consumption and panic) or possibly have unspecified other impact by triggering use of the GRO...
How severe is CVE-2016-7039?
CVE-2016-7039 has been rated HIGH with a CVSS base score of 7.5/10. Review the CVSS metrics above for detailed severity breakdown.
Is there a patch for CVE-2016-7039?
Check the references section above for vendor advisories and patch information. Affected products include: Oracle Linux, Oracle Vm Server, Linux Linux Kernel.