CVE-2016-8666
CVE-2016-8666
This page contains facts from public vulnerability sources. Check the original advisory before updating.
The IP stack in the Linux kernel before 4.6 allows remote attackers to cause a denial of service (stack consumption and panic) or possibly have unspecified other impact by triggering use of the GRO path for packets with tunnel stacking, as demonstrated by interleaved IPv4 headers and GRE headers, a related issue to CVE-2016-7039.
CVSS 7.5 · High · EPSS 4.7% · Fix available
- Published
- Updated
Stack: system
Affected products and versions
n/a
- Versions
- n/a: Affected
No fix published
linux Debian:12
- Affected ranges
- ECOSYSTEM: < 4.6.1-1
Update to 4.6.1-1
linux Debian:13
- Affected ranges
- ECOSYSTEM: < 4.6.1-1
Update to 4.6.1-1
linux Debian:14
- Affected ranges
- ECOSYSTEM: < 4.6.1-1
Update to 4.6.1-1
linux Ubuntu:14.04:LTS
- Versions
- 3.11.0-12.19
- 3.12.0-1.3
- 3.12.0-2.5
- 3.12.0-2.7
- 3.12.0-3.8
- 3.12.0-3.9
- 3.12.0-4.10
- 3.12.0-4.12
- 3.12.0-5.13
- 3.12.0-7.15
- 3.13.0-1.16
- 3.13.0-2.17
- 3.13.0-3.18
- 3.13.0-4.19
- 3.13.0-5.20
- 3.13.0-6.23
- 3.13.0-7.25
- 3.13.0-7.26
- 3.13.0-8.27
- 3.13.0-8.28
- 3.13.0-10.30
- 3.13.0-11.31
- 3.13.0-12.32
- 3.13.0-13.33
- 3.13.0-14.34
- 3.13.0-15.35
- 3.13.0-16.36
- 3.13.0-17.37
- 3.13.0-18.38
- 3.13.0-19.39
- 3.13.0-19.40
- 3.13.0-20.42
- 3.13.0-21.43
- 3.13.0-22.44
- 3.13.0-23.45
- 3.13.0-24.46
- 3.13.0-24.47
- 3.13.0-27.50
- 3.13.0-29.53
- 3.13.0-30.54
- 3.13.0-30.55
- 3.13.0-32.57
- 3.13.0-33.58
- 3.13.0-34.60
- 3.13.0-35.62
- 3.13.0-36.63
- 3.13.0-37.64
- 3.13.0-39.66
- 3.13.0-40.69
- 3.13.0-41.70
- 3.13.0-43.72
- 3.13.0-44.73
- 3.13.0-45.74
- 3.13.0-46.75
- 3.13.0-46.76
- 3.13.0-46.77
- 3.13.0-46.79
- 3.13.0-48.80
- 3.13.0-49.81
- 3.13.0-49.83
- 3.13.0-51.84
- 3.13.0-52.85
- 3.13.0-52.86
- 3.13.0-53.88
- 3.13.0-53.89
- 3.13.0-54.91
- 3.13.0-55.92
- 3.13.0-55.94
- 3.13.0-57.95
- 3.13.0-58.97
- 3.13.0-59.98
- 3.13.0-61.100
- 3.13.0-62.102
- 3.13.0-63.103
- 3.13.0-65.105
- 3.13.0-65.106
- 3.13.0-66.108
- 3.13.0-67.110
- 3.13.0-68.111
- 3.13.0-70.113
- 3.13.0-71.114
- 3.13.0-73.116
- 3.13.0-74.118
- 3.13.0-76.120
- 3.13.0-77.121
- 3.13.0-79.123
- 3.13.0-83.127
- 3.13.0-85.129
- 3.13.0-86.130
- 3.13.0-86.131
- 3.13.0-87.133
- 3.13.0-88.135
- 3.13.0-91.138
- 3.13.0-92.139
- 3.13.0-93.140
- 3.13.0-95.142
- 3.13.0-96.143
- Affected ranges
- ECOSYSTEM: < 3.13.0-98.145
Update to 3.13.0-98.145
linux-lts-vivid Ubuntu:14.04:LTS
- Versions
- 3.19.0-18.18~14.04.1
- 3.19.0-20.20~14.04.1
- 3.19.0-21.21~14.04.1
- 3.19.0-22.22~14.04.1
- 3.19.0-23.24~14.04.1
- 3.19.0-25.26~14.04.1
- 3.19.0-26.28~14.04.1
- 3.19.0-28.30~14.04.1
- 3.19.0-30.33~14.04.1
- 3.19.0-30.34~14.04.1
- 3.19.0-31.36~14.04.1
- 3.19.0-32.37~14.04.1
- 3.19.0-33.38~14.04.1
- 3.19.0-37.42~14.04.1
- 3.19.0-39.44~14.04.1
- 3.19.0-41.46~14.04.2
- 3.19.0-42.48~14.04.1
- 3.19.0-43.49~14.04.1
- 3.19.0-47.53~14.04.1
- 3.19.0-49.55~14.04.1
- 3.19.0-51.57~14.04.1
- 3.19.0-51.58~14.04.1
- 3.19.0-56.62~14.04.1
- 3.19.0-58.64~14.04.1
- 3.19.0-59.65~14.04.1
- 3.19.0-59.66~14.04.1
- 3.19.0-61.69~14.04.1
- 3.19.0-64.72~14.04.1
- 3.19.0-65.73~14.04.1
- 3.19.0-66.74~14.04.1
- 3.19.0-68.76~14.04.1
- 3.19.0-69.77~14.04.1
- Affected ranges
- ECOSYSTEM: < 3.19.0-71.79~14.04.1
Update to 3.19.0-71.79~14.04.1
linux-lts-xenial Ubuntu:14.04:LTS
- Versions
- 4.4.0-13.29~14.04.1
- 4.4.0-14.30~14.04.2
- 4.4.0-15.31~14.04.1
- 4.4.0-18.34~14.04.1
- 4.4.0-21.37~14.04.1
- 4.4.0-22.39~14.04.1
- 4.4.0-22.40~14.04.1
- 4.4.0-24.43~14.04.1
- 4.4.0-28.47~14.04.1
- 4.4.0-31.50~14.04.1
- 4.4.0-34.53~14.04.1
- 4.4.0-36.55~14.04.1
- 4.4.0-38.57~14.04.1
- Affected ranges
- ECOSYSTEM: < 4.4.0-42.62~14.04.1
Update to 4.4.0-42.62~14.04.1
linux Ubuntu:16.04:LTS
- Versions
- 4.2.0-16.19
- 4.2.0-17.21
- 4.2.0-19.23
- 4.3.0-1.10
- 4.3.0-2.11
- 4.3.0-5.16
- 4.3.0-6.17
- 4.3.0-7.18
- 4.4.0-2.16
- 4.4.0-4.19
- 4.4.0-6.21
- 4.4.0-7.22
- 4.4.0-8.23
- 4.4.0-9.24
- 4.4.0-10.25
- 4.4.0-11.26
- 4.4.0-12.28
- 4.4.0-13.29
- 4.4.0-14.30
- 4.4.0-15.31
- 4.4.0-16.32
- 4.4.0-17.33
- 4.4.0-18.34
- 4.4.0-21.37
- 4.4.0-22.39
- 4.4.0-22.40
- 4.4.0-24.43
- 4.4.0-28.47
- 4.4.0-31.50
- 4.4.0-34.53
- 4.4.0-36.55
- 4.4.0-38.57
- Affected ranges
- ECOSYSTEM: < 4.4.0-42.62
Update to 4.4.0-42.62
linux-raspi2 Ubuntu:16.04:LTS
- Versions
- 4.2.0-1013.19
- 4.2.0-1014.21
- 4.3.0-1006.6
- 4.4.0-1003.4
- 4.4.0-1004.5
- 4.4.0-1009.10
- 4.4.0-1010.12
- 4.4.0-1010.13
- 4.4.0-1012.16
- 4.4.0-1016.22
- 4.4.0-1017.23
- 4.4.0-1019.25
- 4.4.0-1021.27
- 4.4.0-1023.29
- Affected ranges
- ECOSYSTEM: < 4.4.0-1027.33
Update to 4.4.0-1027.33
linux-snapdragon Ubuntu:16.04:LTS
- Versions
- 4.4.0-1012.12
- 4.4.0-1013.14
- 4.4.0-1013.15
- 4.4.0-1015.18
- 4.4.0-1019.22
- 4.4.0-1020.23
- 4.4.0-1022.25
- 4.4.0-1024.27
- 4.4.0-1026.29
- Affected ranges
- ECOSYSTEM: < 4.4.0-1030.33
Update to 4.4.0-1030.33
Original sources
- http://rhn.redhat.com/errata/RHSA-2016-2107.html
- https://access.redhat.com/errata/RHSA-2017:0372
- https://bto.bluecoat.com/security-advisory/sa134
- http://www.securityfocus.com/bid/93562
- http://git.kernel.org/cgit/linux/kernel/git/torvalds/linux.git/commit/?id=fac8e0f579695a3ecbc4d3cac369139d7f819971
- http://rhn.redhat.com/errata/RHSA-2016-2047.html
- http://rhn.redhat.com/errata/RHSA-2016-2110.html
- http://www.openwall.com/lists/oss-security/2016/10/13/11
- https://github.com/torvalds/linux/commit/fac8e0f579695a3ecbc4d3cac369139d7f819971
- http://rhn.redhat.com/errata/RHSA-2017-0004.html
- https://bugzilla.redhat.com/show_bug.cgi?id=1384991
- https://bugzilla.suse.com/show_bug.cgi?id=1001486
- https://nvd.nist.gov/vuln/detail/CVE-2016-8666