Back to bug 1297389
| Who | When | What | Removed | Added |
|---|---|---|---|---|
| Wade Mealing | 2016-01-11 11:59:29 UTC | Blocks | 1281721 | |
| Wade Mealing | 2016-01-11 12:16:45 UTC | Depends On | 1270586 | |
| Wade Mealing | 2016-01-11 12:59:55 UTC | Whiteboard | impact=moderate,public=20150111,reported=20151113,source=,cvss2=5.0/AV:N/AC:L/Au:N/C:N/I:N/A:P,rhel-7/kernel=new | impact=moderate,public=20150111,reported=20151113,source=,cvss2=5.0/AV:N/AC:L/Au:N/C:N/I:N/A:P,fedora-all/kernel=affected,rhel-5/kernel=affected,rhel-6/kernel=affected,rhel-7/kernel=affected,rhel-7/kernel-rt=affected,rhelsa-7/kernel-biscayne=affected,mrg-2/realtime-kernel=affected |
| Wade Mealing | 2016-01-11 13:00:18 UTC | CC | arm-mgr, bhu, blc, gansalmon, itamar, jkacur, joelsmith, jonathan, kernel-maint, lgoncalv, madhu.chinakonda, mchehab, mlangsdo, rt-maint, williams | |
| Wade Mealing | 2016-01-11 13:27:40 UTC | Depends On | 1297419 | |
| Wade Mealing | 2016-01-11 13:27:53 UTC | Depends On | 1297420 | |
| Wade Mealing | 2016-01-11 13:30:48 UTC | Depends On | 1297421 | |
| Wade Mealing | 2016-01-11 13:31:02 UTC | Depends On | 1297422 | |
| Salvatore Bonaccorso | 2016-01-11 17:47:38 UTC | CC | carnil | |
| Martin Prpič | 2016-01-12 07:50:10 UTC | Whiteboard | impact=moderate,public=20150111,reported=20151113,source=,cvss2=5.0/AV:N/AC:L/Au:N/C:N/I:N/A:P,fedora-all/kernel=affected,rhel-5/kernel=affected,rhel-6/kernel=affected,rhel-7/kernel=affected,rhel-7/kernel-rt=affected,rhelsa-7/kernel-biscayne=affected,mrg-2/realtime-kernel=affected | impact=moderate,public=20150111,reported=20151113,source=git,cvss2=5.0/AV:N/AC:L/Au:N/C:N/I:N/A:P,fedora-all/kernel=affected,rhel-5/kernel=affected,rhel-6/kernel=affected,rhel-7/kernel=affected,rhel-7/kernel-rt=affected,rhelsa-7/kernel-biscayne=affected,mrg-2/realtime-kernel=affected |
| Slawomir Czarko | 2016-01-12 10:34:39 UTC | CC | slawomir | |
| Adam Mariš | 2016-01-12 11:05:39 UTC | CC | amaris | |
| Summary | kernel: SCTP denial of service during timeout | CVE-2015-8767 kernel: SCTP denial of service during timeout | ||
| Alias | CVE-2015-8767 | |||
| Wade Mealing | 2016-01-14 05:32:10 UTC | Depends On | 1298437 | |
| Wade Mealing | 2016-01-29 06:29:01 UTC | Whiteboard | impact=moderate,public=20150111,reported=20151113,source=git,cvss2=5.0/AV:N/AC:L/Au:N/C:N/I:N/A:P,fedora-all/kernel=affected,rhel-5/kernel=affected,rhel-6/kernel=affected,rhel-7/kernel=affected,rhel-7/kernel-rt=affected,rhelsa-7/kernel-biscayne=affected,mrg-2/realtime-kernel=affected | impact=moderate,public=20150111,reported=20151113,source=git,cvss2=7.1/AV:N/AC:M/Au:N/C:N/I:N/A:C,fedora-all/kernel=affected,rhel-5/kernel=affected,rhel-6/kernel=affected,rhel-7/kernel=affected,rhel-7/kernel-rt=affected,rhelsa-7/kernel-biscayne=affected,mrg-2/realtime-kernel=affected |
| Wade Mealing | 2016-01-29 06:48:12 UTC | Depends On | 1302957 | |
| Wade Mealing | 2016-02-04 01:58:26 UTC | Doc Text | A service using the sctp protcol can cause a deadlock condition when sctp_accept() is called by the local software during a heartbeat timeout event. This can prevent software using sctp on the local machine from handling sockets. |
|
| Wade Mealing | 2016-02-04 02:03:25 UTC | Whiteboard | impact=moderate,public=20150111,reported=20151113,source=git,cvss2=7.1/AV:N/AC:M/Au:N/C:N/I:N/A:C,fedora-all/kernel=affected,rhel-5/kernel=affected,rhel-6/kernel=affected,rhel-7/kernel=affected,rhel-7/kernel-rt=affected,rhelsa-7/kernel-biscayne=affected,mrg-2/realtime-kernel=affected | impact=moderate,public=20150111,reported=20151113,source=git,cvss2=7.1/AV:N/AC:M/Au:N/C:N/I:N/A:C,cwe=CWE-367,fedora-all/kernel=affected,rhel-5/kernel=affected,rhel-6/kernel=affected,rhel-7/kernel=affected,rhel-7/kernel-rt=affected,rhelsa-7/kernel-biscayne=affected,mrg-2/realtime-kernel=affected |
| Wade Mealing | 2016-02-10 06:01:01 UTC | Whiteboard | impact=moderate,public=20150111,reported=20151113,source=git,cvss2=7.1/AV:N/AC:M/Au:N/C:N/I:N/A:C,cwe=CWE-367,fedora-all/kernel=affected,rhel-5/kernel=affected,rhel-6/kernel=affected,rhel-7/kernel=affected,rhel-7/kernel-rt=affected,rhelsa-7/kernel-biscayne=affected,mrg-2/realtime-kernel=affected | impact=moderate,public=20150111,reported=20151113,source=git,cvss2=7.1/AV:N/AC:M/Au:N/C:N/I:N/A:C,cwe=CWE-367,fedora-all/kernel=affected,rhel-5/kernel=affected,rhel-6/kernel=affected,rhel-7/kernel=affected,rhel-7/kernel-rt=affected,rhelsa-7/kernel-biscayne=affected,mrg-2/realtime-kernel=affected,rhel-6.1.z/kernel=affected |
| Wade Mealing | 2016-02-11 01:16:32 UTC | Whiteboard | impact=moderate,public=20150111,reported=20151113,source=git,cvss2=7.1/AV:N/AC:M/Au:N/C:N/I:N/A:C,cwe=CWE-367,fedora-all/kernel=affected,rhel-5/kernel=affected,rhel-6/kernel=affected,rhel-7/kernel=affected,rhel-7/kernel-rt=affected,rhelsa-7/kernel-biscayne=affected,mrg-2/realtime-kernel=affected,rhel-6.1.z/kernel=affected | impact=moderate,public=20150111,reported=20151113,source=git,cvss2=7.1/AV:N/AC:M/Au:N/C:N/I:N/A:C,cwe=CWE-367,fedora-all/kernel=affected,rhel-5/kernel=affected,rhel-6/kernel=affected,rhel-7/kernel=affected,rhel-7/kernel-rt=affected,rhelsa-7/kernel-biscayne=affected,mrg-2/realtime-kernel=affected,rhel-6.6.z/kernel=affected |
| Wade Mealing | 2016-02-11 01:17:16 UTC | Depends On | 1306488 | |
| Summer Long | 2016-02-13 01:51:51 UTC | CC | slong | |
| Doc Text | A service using the sctp protcol can cause a deadlock condition when sctp_accept() is called by the local software during a heartbeat timeout event. This can prevent software using sctp on the local machine from handling sockets. | A race-condition vulnerability was found in the kernel. A service using the SCTP protcol could cause a deadlock condition when sctp_accept() was called by local software during a heartbeat-timeout event. A remote, unauthenticated user could exploit this flaw to prevent software using SCTP on the local machine from handling sockets (denial of service). | ||
| Summer Long | 2016-02-13 01:52:46 UTC | CC | wmealing | |
| Flags | needinfo?(wmealing) | |||
| Summer Long | 2016-02-15 01:33:49 UTC | Flags | needinfo?(wmealing) | |
| Petr Matousek | 2016-04-07 07:54:35 UTC | CC | pmatouse | |
| Petr Matousek | 2016-04-07 07:55:09 UTC | Depends On | 1324748 | |
| Petr Matousek | 2016-04-07 08:07:10 UTC | Whiteboard | impact=moderate,public=20150111,reported=20151113,source=git,cvss2=7.1/AV:N/AC:M/Au:N/C:N/I:N/A:C,cwe=CWE-367,fedora-all/kernel=affected,rhel-5/kernel=affected,rhel-6/kernel=affected,rhel-7/kernel=affected,rhel-7/kernel-rt=affected,rhelsa-7/kernel-biscayne=affected,mrg-2/realtime-kernel=affected,rhel-6.6.z/kernel=affected | impact=moderate,public=20150111,reported=20151113,source=git,cvss2=7.1/AV:N/AC:M/Au:N/C:N/I:N/A:C,cwe=CWE-367,fedora-all/kernel=affected,rhel-5/kernel=wontfix,rhel-6/kernel=affected,rhel-7/kernel=affected,rhel-7/kernel-rt=affected,rhelsa-7/kernel-biscayne=affected,mrg-2/realtime-kernel=affected,rhel-6.6.z/kernel=affected |
| Martin Prpič | 2016-05-02 09:26:16 UTC | Doc Text | A race-condition vulnerability was found in the kernel. A service using the SCTP protcol could cause a deadlock condition when sctp_accept() was called by local software during a heartbeat-timeout event. A remote, unauthenticated user could exploit this flaw to prevent software using SCTP on the local machine from handling sockets (denial of service). | A race condition flaw was found in the way the Linux kernel's SCTP implementation handled sctp_accept() during the processing of heartbeat timeout events. A remote attacker could use this flaw to prevent further connections to be accepted by the SCTP server running on the system, resulting in a denial of service. |
| Vladis Dronov | 2016-05-05 10:01:43 UTC | CC | vdronov | |
| Wade Mealing | 2016-05-16 05:35:39 UTC | Depends On | 1336273 | |
| Wade Mealing | 2016-05-16 05:35:50 UTC | Depends On | 1336274 | |
| Wade Mealing | 2016-05-16 05:36:02 UTC | Depends On | 1336275 | |
| Wade Mealing | 2016-05-16 05:36:07 UTC | Depends On | 1336276 | |
| Wade Mealing | 2016-05-16 05:36:14 UTC | Depends On | 1336277 | |
| Wade Mealing | 2016-05-16 05:36:19 UTC | Depends On | 1336278 | |
| Vladis Dronov | 2016-06-24 11:02:29 UTC | Status | NEW | CLOSED |
| Resolution | --- | ERRATA | ||
| Last Closed | 2016-06-24 07:02:29 UTC | |||
| Adam Mariš | 2016-11-08 16:12:09 UTC | CC | amaris | |
| Product Security DevOps Team | 2019-09-29 13:41:49 UTC | Whiteboard | impact=moderate,public=20150111,reported=20151113,source=git,cvss2=7.1/AV:N/AC:M/Au:N/C:N/I:N/A:C,cwe=CWE-367,fedora-all/kernel=affected,rhel-5/kernel=wontfix,rhel-6/kernel=affected,rhel-7/kernel=affected,rhel-7/kernel-rt=affected,rhelsa-7/kernel-biscayne=affected,mrg-2/realtime-kernel=affected,rhel-6.6.z/kernel=affected |
Back to bug 1297389