CVE-2015-8787

Published: 31 December 2015

The nf_nat_redirect_ipv4 function in net/netfilter/nf_nat_redirect.c in the Linux kernel before 4.4 allows remote attackers to cause a denial of service (NULL pointer dereference and system crash) or possibly have unspecified other impact by sending certain IPv4 packets to an incompletely configured interface, a related issue to CVE-2003-1604.

From the Ubuntu Security Team

It was discovered that the netfilter Network Address Translation (NAT) implementation did not ensure that data structures were initialized when handling IPv4 addresses. An attacker could use this to cause a denial of service (system crash).

Notes

android kernels (flo, goldfish, grouper, maguro, mako and manta) are
not supported on the Ubuntu Touch 14.10 and earlier preview kernels
linux-lts-saucy no longer receives official support
linux-lts-quantal no longer receives official support

The "Introducing" commit message says IPv6 patch would follow --
we should investigate if it has the same flaw, if it ever followed.

Status

Severity score breakdown

References

• https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-8787
• https://bugzilla.redhat.com/show_bug.cgi?id=1300731
• https://lkml.org/lkml/2015/12/2/618
• http://www.openwall.com/lists/oss-security/2016/01/27/6
• https://ubuntu.com/security/notices/USN-2889-2
• https://ubuntu.com/security/notices/USN-2889-1
• https://ubuntu.com/security/notices/USN-2890-1
• https://ubuntu.com/security/notices/USN-2890-2
• https://ubuntu.com/security/notices/USN-2890-3
• NVD
• Launchpad
• Debian

Bugs

• https://bugzilla.redhat.com/show_bug.cgi?id=1300731
• https://launchpad.net/bugs/1539001