CVE-2015-5366
EPSS 6.2%
描述
The (1) udp_recvmsg and (2) udpv6_recvmsg functions in the Linux kernel before 4.0.6 provide inappropriate -EAGAIN return values, which allows remote attackers to cause a denial of service (EPOLLET epoll application read outage) via an incorrect checksum in a UDP packet, a different vulnerability than CVE-2015-5364.
如何修補 CVE-2015-5366
要修補 CVE-2015-5366,請將受影響套件升級到下列已修補版本。
- Debian/linux—升級至 4.0.7-1 或更新版本
CVE-2015-5366 正在被利用嗎?
中等 — EPSS 為 6.2%,可持續追蹤但非最高優先。
受影響套件(1)
- from 0, < 4.0.7-1