CVE-2015-1465

Advisory lineage Upstream: 0 Downstream: 11
Modified
Published: 05 Apr 2015, 21:00
Last modified:06 Aug 2024, 04:47

Vulnerability Summary

Overall Risk (default)
medium
33/100
CVSS Score
7.8 HIGH
v2.0 (nvd)
EPSS Score
6.84% LOW
7% probability +1.65%
KEV
Not listed
Ransomware
No reports
Public exploits
None found
Dark Web
Not detected

Timeline

05 Apr 2015, 21:00
Published
Vulnerability first disclosed
06 Aug 2024, 04:47
Last Modified
Vulnerability information updated

Description

The IPv4 implementation in the Linux kernel before 3.18.8 does not properly consider the length of the Read-Copy Update (RCU) grace period for redirecting lookups in the absence of caching, which allows remote attackers to cause a denial of service (memory consumption or system crash) via a flood of packets.

CVSS Metrics

  • v2.0•HIGH•Score: 7.8AV:N/AC:L/Au:N/C:N/I:N/A:C

EPSS Trends

Current EPSS score: 6.84%• Percentile: 92%

Techniques & Countermeasures

  • CWE-17•DEPRECATED: Code

    This entry has been deprecated. It was originally used for organizing the Development View (CWE-699) and some other views, but it introduced unnecessary complexity and depth to the resulting tree.

Affected Systems

  • canonical•ubuntu_linux

    12.04 | 14.04 | 14.10

  • linux•linux_kernel

    ≥ 3.10.50, < 3.10.70 | ≥ 3.12.26, < 3.12.38 | ≥ 3.14.14, < 3.14.34 | ≥ 3.15.7, < 3.16.35 | ≥ 3.17, < 3.18.8

References (14)