Red Hat Security AdvisoryRHSA-2016:1632
kernel-rt security and bug fix update
Released 2016-08-18 · Red Hat rating Important · View on Red Hat →
Fixed in
- Red Hat Enterprise Linux Realtime (v. 7) kernel-rt-3.10.0-327.28.3.rt56.235.el7, kernel-rt-debug-3.10.0-327.28.3.rt56.235.el7, kernel-rt-debug-devel-3.10.0-327.28.3.rt56.235.el7 +4
- Red Hat Enterprise Linux for Real Time for NFV (v. 7) kernel-rt-3.10.0-327.28.3.rt56.235.el7, kernel-rt-debug-3.10.0-327.28.3.rt56.235.el7, kernel-rt-debug-devel-3.10.0-327.28.3.rt56.235.el7 +7
Fixes 1 record
Priority LOW 37
net/ipv4/tcp_input.c in the Linux kernel before 4.7 does not properly determine the rate of challenge ACK segments, which makes it easier for remote attackers to hijack TCP sessions via a blind in-window attack.
CVSS 3.0MEDIUM 4.8· Network · No auth · No interaction · EPSS 0.14507 · Published 2016-08-06 · Fixed CWE-200
