CVE-2016-5696: google android

Modified

AliasesRHSA-2016:1631RHSA-2016:1632RHSA-2016:1633+5 more

Published 06-08-2016Last modified 06-08-2024

Vulnerability summary

CVE-2016-5696 is a medium (CVSS 5.8) vulnerability in google android. EPSS estimates a 14.51% chance of exploitation in the next 30 days, higher than 96.6% of scored vulnerabilities. 1 public exploit is recorded.

Priority

Routine

Not severe (CVSS 4.8, network access); no exploitation reported by the 5 checked sources

Source freshness unavailable

How is this decided?

CVSS score

5.8/10

010

Medium · v2.0 (NVD)

EPSS score

14.51%

0%100%

Medium · -0.57 pp in 30 days

KEVNot listedNot listed by any tracked catalog.

RansomwareNot flaggedNo ransomware use recorded.

Public exploits1github

Advisory lineage

Upstream 0 · Downstream 19 · Duplicates 1 · Related 13

Timeline

06-08-2016
PublishedVulnerability first disclosed.
06-08-2024
Last modifiedVulnerability information updated.

Description

net/ipv4/tcp_input.c in the Linux kernel before 4.7 does not properly determine the rate of challenge ACK segments, which makes it easier for remote attackers to hijack TCP sessions via a blind in-window attack.

CVSS metrics

5 scores · 4 sources · 2 versions

v3.04.8v2.05.8

EPSS trend

Probability

14.51%

Chance of exploitation in the next 30 days

Percentile

97%

Versus all other CVEs

30-day change

Decrease -0.57 pp

From 15.07% on 04-10-2026

04-10-202603-11-2026

Known exploited

Compare KEV catalogs

CISA KEV

Not in the CISA KEV catalog.

ENISA CNW

Not in the ENISA CNW catalog.

CIRCL

Not in the CIRCL catalog.

Public exploits

1 found

githubUnverified
Mountain Goat
Maturity: poc

Weaknesses

CWE · root cause

CWE-200Exposure of Sensitive Information to an Unauthorized ActorThe product exposes sensitive information to an actor that is not explicitly authorized to have access to that information.

Affected systems

Version check

Known conditions: network-reachable, no authentication, no user interaction (CVSS vector). Other conditions: not stated in public data.

Redhat48 products

kernel< 0:3.10.0-327.28.3.el7 | < 0:2.6.32-642.4.2.el6 | < 0:2.6.32-573.34.1.el6 | < 0:2.6.32-504.52.1.el6
kernel-abi-whitelists< 0:3.10.0-327.28.3.el7 | < 0:2.6.32-642.4.2.el6 | < 0:2.6.32-573.34.1.el6 | < 0:2.6.32-504.52.1.el6
kernel-bootwrapper< 0:3.10.0-327.28.3.el7 | < 0:2.6.32-642.4.2.el6 | < 0:2.6.32-573.34.1.el6 | < 0:2.6.32-504.52.1.el6
kernel-debug< 0:3.10.0-327.28.3.el7 | < 0:2.6.32-642.4.2.el6 | < 0:2.6.32-573.34.1.el6 | < 0:2.6.32-504.52.1.el6
kernel-debug-debuginfo< 0:3.10.0-327.28.3.el7 | < 0:2.6.32-642.4.2.el6 | < 0:2.6.32-573.34.1.el6 | < 0:2.6.32-504.52.1.el6

kernel-debug-devel< 0:3.10.0-327.28.3.el7 | < 0:2.6.32-642.4.2.el6 | < 0:2.6.32-573.34.1.el6 | < 0:2.6.32-504.52.1.el6
kernel-debuginfo< 0:3.10.0-327.28.3.el7 | < 0:2.6.32-642.4.2.el6 | < 0:2.6.32-573.34.1.el6 | < 0:2.6.32-504.52.1.el6
kernel-debuginfo-common-i686< 0:2.6.32-642.4.2.el6 | < 0:2.6.32-573.34.1.el6 | < 0:2.6.32-504.52.1.el6
kernel-debuginfo-common-ppc64< 0:3.10.0-327.28.3.el7 | < 0:2.6.32-642.4.2.el6 | < 0:2.6.32-573.34.1.el6 | < 0:2.6.32-504.52.1.el6
kernel-debuginfo-common-ppc64le< 0:3.10.0-327.28.3.el7
kernel-debuginfo-common-s390x< 0:3.10.0-327.28.3.el7 | < 0:2.6.32-642.4.2.el6 | < 0:2.6.32-573.34.1.el6 | < 0:2.6.32-504.52.1.el6
kernel-debuginfo-common-x86_64< 0:3.10.0-327.28.3.el7 | < 0:2.6.32-642.4.2.el6 | < 0:2.6.32-573.34.1.el6 | < 0:2.6.32-504.52.1.el6
kernel-devel< 0:3.10.0-327.28.3.el7 | < 0:2.6.32-642.4.2.el6 | < 0:2.6.32-573.34.1.el6 | < 0:2.6.32-504.52.1.el6
kernel-doc< 0:3.10.0-327.28.3.el7 | < 0:2.6.32-642.4.2.el6 | < 0:2.6.32-573.34.1.el6 | < 0:2.6.32-504.52.1.el6
kernel-firmware< 0:2.6.32-642.4.2.el6 | < 0:2.6.32-573.34.1.el6 | < 0:2.6.32-504.52.1.el6
kernel-headers< 0:3.10.0-327.28.3.el7 | < 0:2.6.32-642.4.2.el6 | < 0:2.6.32-573.34.1.el6 | < 0:2.6.32-504.52.1.el6
kernel-kdump< 0:3.10.0-327.28.3.el7 | < 0:2.6.32-642.4.2.el6 | < 0:2.6.32-573.34.1.el6 | < 0:2.6.32-504.52.1.el6
kernel-kdump-debuginfo< 0:3.10.0-327.28.3.el7 | < 0:2.6.32-642.4.2.el6 | < 0:2.6.32-573.34.1.el6 | < 0:2.6.32-504.52.1.el6
kernel-kdump-devel< 0:3.10.0-327.28.3.el7 | < 0:2.6.32-642.4.2.el6 | < 0:2.6.32-573.34.1.el6 | < 0:2.6.32-504.52.1.el6
kernel-rt< 1:3.10.0-327.rt56.195.el6rt | < 0:3.10.0-327.28.3.rt56.235.el7
kernel-rt-debug< 1:3.10.0-327.rt56.195.el6rt | < 0:3.10.0-327.28.3.rt56.235.el7
kernel-rt-debug-debuginfo< 1:3.10.0-327.rt56.195.el6rt | < 0:3.10.0-327.28.3.rt56.235.el7
kernel-rt-debug-devel< 1:3.10.0-327.rt56.195.el6rt | < 0:3.10.0-327.28.3.rt56.235.el7
kernel-rt-debug-kvm< 0:3.10.0-327.28.3.rt56.235.el7
kernel-rt-debug-kvm-debuginfo< 0:3.10.0-327.28.3.rt56.235.el7
kernel-rt-debuginfo< 1:3.10.0-327.rt56.195.el6rt | < 0:3.10.0-327.28.3.rt56.235.el7
kernel-rt-debuginfo-common-x86_64< 1:3.10.0-327.rt56.195.el6rt | < 0:3.10.0-327.28.3.rt56.235.el7
kernel-rt-devel< 1:3.10.0-327.rt56.195.el6rt | < 0:3.10.0-327.28.3.rt56.235.el7
kernel-rt-doc< 1:3.10.0-327.rt56.195.el6rt | < 0:3.10.0-327.28.3.rt56.235.el7
kernel-rt-firmware< 1:3.10.0-327.rt56.195.el6rt
kernel-rt-kvm< 0:3.10.0-327.28.3.rt56.235.el7
kernel-rt-kvm-debuginfo< 0:3.10.0-327.28.3.rt56.235.el7
kernel-rt-trace< 1:3.10.0-327.rt56.195.el6rt | < 0:3.10.0-327.28.3.rt56.235.el7
kernel-rt-trace-debuginfo< 1:3.10.0-327.rt56.195.el6rt | < 0:3.10.0-327.28.3.rt56.235.el7
kernel-rt-trace-devel< 1:3.10.0-327.rt56.195.el6rt | < 0:3.10.0-327.28.3.rt56.235.el7
kernel-rt-trace-kvm< 0:3.10.0-327.28.3.rt56.235.el7
kernel-rt-trace-kvm-debuginfo< 0:3.10.0-327.28.3.rt56.235.el7
kernel-rt-vanilla< 1:3.10.0-327.rt56.195.el6rt
kernel-rt-vanilla-debuginfo< 1:3.10.0-327.rt56.195.el6rt
kernel-rt-vanilla-devel< 1:3.10.0-327.rt56.195.el6rt
kernel-tools< 0:3.10.0-327.28.3.el7
kernel-tools-debuginfo< 0:3.10.0-327.28.3.el7
kernel-tools-libs< 0:3.10.0-327.28.3.el7
kernel-tools-libs-devel< 0:3.10.0-327.28.3.el7
perf< 0:3.10.0-327.28.3.el7 | < 0:2.6.32-642.4.2.el6 | < 0:2.6.32-573.34.1.el6 | < 0:2.6.32-504.52.1.el6
perf-debuginfo< 0:3.10.0-327.28.3.el7 | < 0:2.6.32-642.4.2.el6 | < 0:2.6.32-573.34.1.el6 | < 0:2.6.32-504.52.1.el6
python-perf< 0:3.10.0-327.28.3.el7 | < 0:2.6.32-642.4.2.el6 | < 0:2.6.32-573.34.1.el6 | < 0:2.6.32-504.52.1.el6
python-perf-debuginfo< 0:3.10.0-327.28.3.el7 | < 0:2.6.32-642.4.2.el6 | < 0:2.6.32-573.34.1.el6 | < 0:2.6.32-504.52.1.el6