CVE-2016-3707
- State
- Published
- Severity
- Not scored
- Published
- Jun 27, 2016
- Updated
- Aug 6, 2024
- Reserved
- Mar 30, 2016
Description
The icmp_check_sysrq function in net/ipv4/icmp.c in the kernel.org projects/rt patches for the Linux kernel, as used in the kernel-rt package before 3.10.0-327.22.1 in Red Hat Enterprise Linux for Real Time 7 and other products, allows remote attackers to execute SysRq commands via crafted ICMP Echo Request packets, as demonstrated by a brute-force attack to discover a cookie, or an attack that occurs after reading the local icmp_echo_sysrq file.
Scores
The record has no CVSS score.
Weaknesses
The record names no weakness.
Affected Products
| Product | Versions |
|---|---|
n/an/a |
|
References
- RHSA-2016:1341vendor-advisory
- SUSE-SU-2016:1985vendor-advisory
- RHSA-2016:1301vendor-advisory
- [oss-security] 20160517 CVE-2016-3707 : kernel-rt - Sending SysRq command via ICMP echo requestmailing-list
- SUSE-SU-2016:1764vendor-advisory
- https://bugzilla.redhat.com/show_bug.cgi?id=1327484
- SUSE-SU-2016:1937vendor-advisory
Every record here comes from the CVE Program’s CVE List. © 1999–2026 The MITRE Corporation. CVE is a registered trademark of The MITRE Corporation. The records are reproduced under the CVE Program terms of use.