DEBIAN-CVE-2016-3707

Advisory lineage Upstream: 1 Downstream: 0
Upstream
CVE-2016-3707
Published: 27 Jun 2016, 10:59
Last modified:28 Apr 2026, 20:15

Vulnerability Summary

Overall Risk (default)
medium
32/100
CVSS Score
8.1 HIGH
3.0 (osv_debian)
EPSS Score
No data
KEV
Not listed
Ransomware
No reports
Public exploits
None found
Dark Web
Not detected

Timeline

27 Jun 2016, 10:59
Published
Vulnerability first disclosed
28 Apr 2026, 20:15
Last Modified
Vulnerability information updated

Description

The icmp_check_sysrq function in net/ipv4/icmp.c in the kernel.org projects/rt patches for the Linux kernel, as used in the kernel-rt package before 3.10.0-327.22.1 in Red Hat Enterprise Linux for Real Time 7 and other products, allows remote attackers to execute SysRq commands via crafted ICMP Echo Request packets, as demonstrated by a brute-force attack to discover a cookie, or an attack that occurs after reading the local icmp_echo_sysrq file.

CVSS Metrics

  • v3.0•HIGH•Score: 8.1CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H

Affected Systems

  • debian•linux

    < 3.15~rc5-1~exp1 | < 3.15~rc5-1~exp1 | < 3.15~rc5-1~exp1 | < 3.15~rc5-1~exp1

References (1)