Red Hat Security AdvisoryRHSA-2016:1633
kernel security and bug fix update
Released 2016-08-18 · Red Hat rating Important · View on Red Hat →
Fixed in
- Red Hat Enterprise Linux Client (v. 7) kernel-3.10.0-327.28.3.el7, kernel-abi-whitelists-3.10.0-327.28.3.el7, kernel-debug-3.10.0-327.28.3.el7 +8
- Red Hat Enterprise Linux Client Optional (v. 7) kernel-tools-libs-devel-3.10.0-327.28.3.el7
- Red Hat Enterprise Linux ComputeNode (v. 7) kernel-3.10.0-327.28.3.el7, kernel-abi-whitelists-3.10.0-327.28.3.el7, kernel-debug-3.10.0-327.28.3.el7 +8
- Red Hat Enterprise Linux ComputeNode Optional (v. 7) kernel-tools-libs-devel-3.10.0-327.28.3.el7
- Red Hat Enterprise Linux Server (v. 7) kernel-3.10.0-327.28.3.el7, kernel-abi-whitelists-3.10.0-327.28.3.el7, kernel-bootwrapper-3.10.0-327.28.3.el7 +11
- Red Hat Enterprise Linux Server Optional (v. 7) kernel-debug-devel-3.10.0-327.28.3.el7, kernel-tools-libs-devel-3.10.0-327.28.3.el7
- Red Hat Enterprise Linux Workstation (v. 7) kernel-3.10.0-327.28.3.el7, kernel-abi-whitelists-3.10.0-327.28.3.el7, kernel-debug-3.10.0-327.28.3.el7 +8
- Red Hat Enterprise Linux Workstation Optional (v. 7) kernel-tools-libs-devel-3.10.0-327.28.3.el7
Fixes 1 record
Priority LOW 37
net/ipv4/tcp_input.c in the Linux kernel before 4.7 does not properly determine the rate of challenge ACK segments, which makes it easier for remote attackers to hijack TCP sessions via a blind in-window attack.
CVSS 3.0MEDIUM 4.8· Network · No auth · No interaction · EPSS 0.14507 · Published 2016-08-06 · Fixed CWE-200
