CVE-2015-3332

State: Published
Severity: Not scored
Published: May 27, 2015
Updated: Aug 6, 2024
Reserved: Apr 17, 2015

Description

A certain backport in the TCP Fast Open implementation for the Linux kernel before 3.18 does not properly maintain a count value, which allow local users to cause a denial of service (system crash) via the Fast Open feature, as demonstrated by visiting the chrome://flags/#enable-tcp-fast-open URL when using certain 3.10.x through 3.16.x kernel builds, including longterm-maintenance releases and ckt (aka Canonical Kernel Team) builds.

Scores

The record has no CVSS score.

Weaknesses

The record names no weakness.

Affected Products

Product	Versions
n/an/a	n/aAffected

References

[oss-security] 20150414 TCP Fast Open local DoS in some Linux stable branchesmailing-list
https://bugzilla.redhat.com/show_bug.cgi?id=1213951
DSA-3237vendor-advisory
https://bugs.debian.org/782515
[netdev] 20150414 [stable regression] tcp: make connect() mem charging friendlymailing-list

Every record here comes from the CVE Program’s CVE List. © 1999–2026 The MITRE Corporation. CVE is a registered trademark of The MITRE Corporation. The records are reproduced under the CVE Program terms of use.