CVE-2016-3707

Advisory lineage Upstream: 0 Downstream: 7
Modified
Published: 27 Jun 2016, 10:00
Last modified:06 Aug 2024, 00:03

Vulnerability Summary

Overall Risk (default)
medium
33/100
CVSS Score
8.1 HIGH
v3.0 (nvd)
EPSS Score
1.79% LOW
2% probability 0.00%
KEV
Not listed
Ransomware
No reports
Public exploits
None found
Dark Web
Not detected

Timeline

27 Jun 2016, 10:00
Published
Vulnerability first disclosed
06 Aug 2024, 00:03
Last Modified
Vulnerability information updated

Description

The icmp_check_sysrq function in net/ipv4/icmp.c in the kernel.org projects/rt patches for the Linux kernel, as used in the kernel-rt package before 3.10.0-327.22.1 in Red Hat Enterprise Linux for Real Time 7 and other products, allows remote attackers to execute SysRq commands via crafted ICMP Echo Request packets, as demonstrated by a brute-force attack to discover a cookie, or an attack that occurs after reading the local icmp_echo_sysrq file.

CVSS Metrics

  • v3.0•HIGH•Score: 8.1CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H
  • v2.0•MEDIUM•Score: 6.8AV:N/AC:M/Au:N/C:P/I:P/A:P

EPSS Trends

Current EPSS score: 1.79%• Percentile: 83%

Techniques & Countermeasures

  • CWE-284•Improper Access Control

    The product does not restrict or incorrectly restricts access to a resource from an unauthorized actor.

Affected Systems

  • linux•linux_kernel-rt

    ≤ 3.10.0

  • novell•suse_linux_enterprise_real_time_extension

    12.0:sp1

  • redhat•enterprise_linux_for_real_time

    7

  • redhat•enterprise_linux_for_real_time_for_nfv

    7

References (7)