Detections
Analytics
CVE-2016-8666
high
Description
The IP stack in the Linux kernel before 4.6 allows remote attackers to cause a denial of service (stack consumption and panic) or possibly have unspecified other impact by triggering use of the GRO path for packets with tunnel stacking, as demonstrated by interleaved IPv4 headers and GRE headers, a related issue to CVE-2016-7039.
References
https://github.com/torvalds/linux/commit/fac8e0f579695a3ecbc4d3cac369139d7f819971
https://bugzilla.suse.com/show_bug.cgi?id=1001486
https://bugzilla.redhat.com/show_bug.cgi?id=1384991
https://bto.bluecoat.com/security-advisory/sa134
https://access.redhat.com/errata/RHSA-2017:0372
http://www.securityfocus.com/bid/93562
http://www.openwall.com/lists/oss-security/2016/10/13/11
http://rhn.redhat.com/errata/RHSA-2017-0004.html
http://rhn.redhat.com/errata/RHSA-2016-2110.html
http://rhn.redhat.com/errata/RHSA-2016-2107.html