CVE-2016-5696

net/ipv4/tcp_input.c in the Linux kernel before 4.7 does not properly determine the rate of challenge ACK segments, which makes it easier for remote attackers to hijack TCP sessions via a blind in-window attack.

CVSS v3.0

4.8 MEDIUMCVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:L/A:L

CVSS v2.0

5.8 MEDIUMAV:N/AC:M/Au:N/C:N/I:P/A:P

EPSS

15.07% chance of exploitation in the next 30 days, 96th percentile

Published

2016-08-06

Updated

2024-08-06

Proof-of-concept exploits (3)

• Gnoxter/mountain_goat40★ · 2016-08-23
• jduck/challack76★ · 2016-08-30
• violentshell/rover102★ · 2016-08-24

References

• CVE Record
• NVD entry

Related

• CVE-2015-1538
• CVE-2016-5682
• CVE-2016-5699
• CVE-2016-5680
• CVE-2016-5715
• CVE-2016-5679