Red Hat Security AdvisoryRHSA-2016:1815
kernel security and bug fix update
Released 2016-09-06 · Red Hat rating Important · View on Red Hat →
Fixed in
- Red Hat Enterprise Linux HPC Node EUS (v. 6.7) kernel-2.6.32-573.34.1.el6, kernel-abi-whitelists-2.6.32-573.34.1.el6, kernel-debug-2.6.32-573.34.1.el6 +6
- Red Hat Enterprise Linux HPC Node Optional EUS (v. 6.7) python-perf-2.6.32-573.34.1.el6
- Red Hat Enterprise Linux Server EUS (v. 6.7) kernel-2.6.32-573.34.1.el6, kernel-abi-whitelists-2.6.32-573.34.1.el6, kernel-bootwrapper-2.6.32-573.34.1.el6 +9
- Red Hat Enterprise Linux Server Optional EUS (v. 6.7) python-perf-2.6.32-573.34.1.el6
Fixes 1 record
Priority LOW 37
net/ipv4/tcp_input.c in the Linux kernel before 4.7 does not properly determine the rate of challenge ACK segments, which makes it easier for remote attackers to hijack TCP sessions via a blind in-window attack.
CVSS 3.0MEDIUM 4.8· Network · No auth · No interaction · EPSS 0.14507 · Published 2016-08-06 · Fixed CWE-200
