CVE - CVE-2015-8215

CVE-ID
CVE-2015-8215	Learn more at National Vulnerability Database (NVD) • CVSS Severity Rating • Fix Information • Vulnerable Software Versions • SCAP Mappings • CPE Information
Description
net/ipv6/addrconf.c in the IPv6 stack in the Linux kernel before 4.0 does not validate attempted changes to the MTU value, which allows context-dependent attackers to cause a denial of service (packet loss) via a value that is (1) smaller than the minimum compliant value or (2) larger than the MTU of an interface, as demonstrated by a Router Advertisement (RA) message that is not validated by a daemon, a different vulnerability than CVE-2015-0272. NOTE: the scope of CVE-2015-0272 is limited to the NetworkManager product.
References
Note: References are provided for the convenience of the reader to help distinguish between vulnerabilities. The list is not intended to be complete.
BID:85274 URL:http://www.securityfocus.com/bid/85274 CONFIRM:http://git.kernel.org/cgit/linux/kernel/git/torvalds/linux.git/commit/?id=77751427a1ff25b27d47a4c36b12c3c8667855ac CONFIRM:http://www.oracle.com/technetwork/topics/security/linuxbulletinapr2016-2952096.html CONFIRM:https://bugs.launchpad.net/bugs/1500810 CONFIRM:https://bugzilla.novell.com/show_bug.cgi?id=944296 CONFIRM:https://github.com/torvalds/linux/commit/77751427a1ff25b27d47a4c36b12c3c8667855ac DEBIAN:DSA-3364 URL:http://www.debian.org/security/2015/dsa-3364 MISC:https://bugzilla.redhat.com/show_bug.cgi?id=1192132 REDHAT:RHSA-2016:0855 URL:http://rhn.redhat.com/errata/RHSA-2016-0855.html SUSE:SUSE-SU-2015:2194 URL:http://lists.opensuse.org/opensuse-security-announce/2015-12/msg00005.html SUSE:SUSE-SU-2015:2292 URL:http://lists.opensuse.org/opensuse-security-announce/2015-12/msg00018.html SUSE:SUSE-SU-2015:2339 URL:http://lists.opensuse.org/opensuse-security-announce/2015-12/msg00026.html SUSE:SUSE-SU-2015:2350 URL:http://lists.opensuse.org/opensuse-security-announce/2015-12/msg00031.html SUSE:SUSE-SU-2016:0354 URL:http://lists.opensuse.org/opensuse-security-announce/2016-02/msg00013.html SUSE:SUSE-SU-2016:2074 URL:http://lists.opensuse.org/opensuse-security-announce/2016-08/msg00038.html
Assigning CNA
Canonical Ltd.
Date Record Created
20151116	Disclaimer: The record creation date may reflect when the CVE ID was allocated or reserved, and does not necessarily indicate when this vulnerability was discovered, shared with the affected vendor, publicly disclosed, or updated in CVE.
Phase (Legacy)
Assigned (20151116)
Votes (Legacy)

Comments (Legacy)

Proposed (Legacy)
N/A
This is an record on the CVE List, which provides common identifiers for publicly known cybersecurity vulnerabilities.
Search CVE Using Keywords: You can also search by reference using the CVE Reference Maps.
For More Information: CVE Request Web Form (select "Other" from dropdown)