Back to bug 1302219

Who When What Removed Added
Andrej Nemec 2016-01-27 08:57:37 UTC Blocks 1302222
Slawomir Czarko 2016-01-27 09:28:01 UTC CC slawomir
Vladis Dronov 2016-01-28 11:22:01 UTC CC vdronov
Doc Text A vulnerability was found in a way kernel processes tcp connections. A division-by-zero may occur, if the connection starts another cwnd reduction phase by setting tp->prior_cwnd to the current cwnd (0) in tcp_init_cwnd_reduction().
Whiteboard impact=moderate,public=20151221,reported=20160125,source=oss-security,cvss2=5.4/AV:N/AC:H/Au:N/C:N/I:N/A:C,cwe=CWE-369,rhel-7/kernel=affected,rhel-6/kernel=affected,rhel-5/kernel=affected impact=moderate,public=20151221,reported=20160125,source=oss-security,cvss2=5.4/AV:N/AC:H/Au:N/C:N/I:N/A:C,cwe=CWE-369,rhel-5/kernel=notaffected,rhel-6/kernel=notaffected,rhel-7/kernel=notaffected,rhel-7/kernel-rt=notaffected,mrg-2/realtime-kernel=notaffected,rhelsa-7/arm-kernel=notaffected,fedora-all/kernel=affected
Vladis Dronov 2016-01-28 11:22:52 UTC Depends On 1302673
Vladis Dronov 2016-01-28 11:27:28 UTC Status NEW CLOSED
Resolution --- NOTABUG
Last Closed 2016-01-28 06:27:28 UTC
Summer Long 2016-02-01 01:31:22 UTC CC slong
Doc Text A vulnerability was found in a way kernel processes tcp connections. A division-by-zero may occur, if the connection starts another cwnd reduction phase by setting tp->prior_cwnd to the current cwnd (0) in tcp_init_cwnd_reduction(). A divide-by-zero vulnerability was found in a way kernel processes TCP connections. The error can occur if a connection starts another cwnd reduction phase by setting tp->prior_cwnd to the current cwnd (0) in tcp_init_cwnd_reduction().
Flags needinfo?(vdronov)
Vladis Dronov 2016-02-09 09:08:39 UTC Flags needinfo?(vdronov)
Summer Long 2016-02-09 22:49:17 UTC Doc Text A divide-by-zero vulnerability was found in a way kernel processes TCP connections. The error can occur if a connection starts another cwnd reduction phase by setting tp->prior_cwnd to the current cwnd (0) in tcp_init_cwnd_reduction(). A divide-by-zero vulnerability was found in a way the kernel processes TCP connections. The error can occur if a connection starts another cwnd reduction phase by setting tp->prior_cwnd to the current cwnd (0) in tcp_init_cwnd_reduction(). A remote, unauthenticated attacker could use this flaw to crash the kernel (denial of service).
Product Security DevOps Team 2019-09-29 13:43:28 UTC Whiteboard impact=moderate,public=20151221,reported=20160125,source=oss-security,cvss2=5.4/AV:N/AC:H/Au:N/C:N/I:N/A:C,cwe=CWE-369,rhel-5/kernel=notaffected,rhel-6/kernel=notaffected,rhel-7/kernel=notaffected,rhel-7/kernel-rt=notaffected,mrg-2/realtime-kernel=notaffected,rhelsa-7/arm-kernel=notaffected,fedora-all/kernel=affected

Back to bug 1302219