Tracker / CVE-2016-5696
CVE-2016-5696
Medium 4.8
net/ipv4/tcp_input.c in the Linux kernel before 4.7 does not properly determine the rate of challenge ACK segments, which makes it easier for remote attackers to hijack TCP sessions via a blind in-window attack.
Affected products and versions
| android · … → 7.0 | |
| linux | linux_kernel · … → 4.6.6 |
| oracle | vm_server |
Analysis
This page is not indexable yet.Until it carries original analysis — what it actually exposes, how to check in two minutes whether a system was touched, what to do if it was — the page stays noindex. The database decides that, not the template.