CVE-2016-3707
Fixed in a distro release EPSS 3%
The icmp_check_sysrq function in net/ipv4/icmp.c in the kernel.org projects/rt patches for the Linux kernel, as used in the kernel-rt package before 3.10.0-327.22.1 in Red Hat Enterprise Linux for Real Time 7 and other products, allows remote attackers to execute SysRq commands via crafted ICMP Echo Request packets, as demonstrated by a brute-force attack to discover a cookie, or an attack that occurs after reading the local icmp_echo_sysrq file.
Products: linux_kernel-rt, redhat enterprise_linux_for_real_time, redhat enterprise_linux_for_real_time_for_nfv, novell suse_linux_enterprise_real_time_extension
Distro releases
| Release | Package | Fixed in |
|---|---|---|
| Debian 12 | linux | 3.15~rc5-1~exp1 |
| Debian 13 | linux | 3.15~rc5-1~exp1 |
| Debian 14 | linux | 3.15~rc5-1~exp1 |
| Red Hat enterprise mrg 2 server el6 | kernel-rt | 1:3.10.0-327.rt56.190.el6rt |
| Red Hat enterprise mrg 2 server el6 | kernel-rt-debug | 1:3.10.0-327.rt56.190.el6rt |
| Red Hat enterprise mrg 2 server el6 | kernel-rt-debug-debuginfo | 1:3.10.0-327.rt56.190.el6rt |
| Red Hat enterprise mrg 2 server el6 | kernel-rt-debug-devel | 1:3.10.0-327.rt56.190.el6rt |
| Red Hat enterprise mrg 2 server el6 | kernel-rt-debuginfo | 1:3.10.0-327.rt56.190.el6rt |
| Red Hat enterprise mrg 2 server el6 | kernel-rt-debuginfo-common-x86_64 | 1:3.10.0-327.rt56.190.el6rt |
| Red Hat enterprise mrg 2 server el6 | kernel-rt-devel | 1:3.10.0-327.rt56.190.el6rt |
| Red Hat enterprise mrg 2 server el6 | kernel-rt-doc | 1:3.10.0-327.rt56.190.el6rt |
| Red Hat enterprise mrg 2 server el6 | kernel-rt-firmware | 1:3.10.0-327.rt56.190.el6rt |
| Red Hat enterprise mrg 2 server el6 | kernel-rt-trace | 1:3.10.0-327.rt56.190.el6rt |
| Red Hat enterprise mrg 2 server el6 | kernel-rt-trace-debuginfo | 1:3.10.0-327.rt56.190.el6rt |
| Red Hat enterprise mrg 2 server el6 | kernel-rt-trace-devel | 1:3.10.0-327.rt56.190.el6rt |
| Red Hat enterprise mrg 2 server el6 | kernel-rt-vanilla | 1:3.10.0-327.rt56.190.el6rt |
| Red Hat enterprise mrg 2 server el6 | kernel-rt-vanilla-debuginfo | 1:3.10.0-327.rt56.190.el6rt |
| Red Hat enterprise mrg 2 server el6 | kernel-rt-vanilla-devel | 1:3.10.0-327.rt56.190.el6rt |
| Red Hat rhel extras rt 7 | kernel-rt | 0:3.10.0-327.22.2.rt56.230.el7_2 |
| Red Hat rhel extras rt 7 | kernel-rt-debug | 0:3.10.0-327.22.2.rt56.230.el7_2 |
| Red Hat rhel extras rt 7 | kernel-rt-debug-debuginfo | 0:3.10.0-327.22.2.rt56.230.el7_2 |
| Red Hat rhel extras rt 7 | kernel-rt-debug-devel | 0:3.10.0-327.22.2.rt56.230.el7_2 |
| Red Hat rhel extras rt 7 | kernel-rt-debug-kvm | 0:3.10.0-327.22.2.rt56.230.el7_2 |
| Red Hat rhel extras rt 7 | kernel-rt-debug-kvm-debuginfo | 0:3.10.0-327.22.2.rt56.230.el7_2 |
| Red Hat rhel extras rt 7 | kernel-rt-debuginfo | 0:3.10.0-327.22.2.rt56.230.el7_2 |
| Red Hat rhel extras rt 7 | kernel-rt-debuginfo-common-x86_64 | 0:3.10.0-327.22.2.rt56.230.el7_2 |
| Red Hat rhel extras rt 7 | kernel-rt-devel | 0:3.10.0-327.22.2.rt56.230.el7_2 |
| Red Hat rhel extras rt 7 | kernel-rt-doc | 0:3.10.0-327.22.2.rt56.230.el7_2 |
| Red Hat rhel extras rt 7 | kernel-rt-kvm | 0:3.10.0-327.22.2.rt56.230.el7_2 |
| Red Hat rhel extras rt 7 | kernel-rt-kvm-debuginfo | 0:3.10.0-327.22.2.rt56.230.el7_2 |
| Red Hat rhel extras rt 7 | kernel-rt-trace | 0:3.10.0-327.22.2.rt56.230.el7_2 |
| Red Hat rhel extras rt 7 | kernel-rt-trace-debuginfo | 0:3.10.0-327.22.2.rt56.230.el7_2 |
| Red Hat rhel extras rt 7 | kernel-rt-trace-devel | 0:3.10.0-327.22.2.rt56.230.el7_2 |
| Red Hat rhel extras rt 7 | kernel-rt-trace-kvm | 0:3.10.0-327.22.2.rt56.230.el7_2 |
| Red Hat rhel extras rt 7 | kernel-rt-trace-kvm-debuginfo | 0:3.10.0-327.22.2.rt56.230.el7_2 |
| SUSE Linux Enterprise Real Time 11 SP4 | kernel-rt | 3.0.101.rt130-57.1 |
| SUSE Linux Enterprise Real Time 11 SP4 | kernel-rt_trace | 3.0.101.rt130-57.1 |
| SUSE Linux Enterprise Real Time 11 SP4 | kernel-source-rt | 3.0.101.rt130-57.1 |
| SUSE Linux Enterprise Real Time 11 SP4 | kernel-syms-rt | 3.0.101.rt130-57.1 |
| SUSE Linux Enterprise Real Time 12 SP1 | kernel-compute | 3.12.58-14.1 |
| SUSE Linux Enterprise Real Time 12 SP1 | kernel-compute | 3.12.61-60.18.1 |
| SUSE Linux Enterprise Real Time 12 SP1 | kernel-compute_debug | 3.12.58-14.1 |
| SUSE Linux Enterprise Real Time 12 SP1 | kernel-compute_debug | 3.12.61-60.18.1 |
| SUSE Linux Enterprise Real Time 12 SP1 | kernel-rt | 3.12.61-60.18.1 |
| SUSE Linux Enterprise Real Time 12 SP1 | kernel-rt | 3.12.58-14.1 |
| SUSE Linux Enterprise Real Time 12 SP1 | kernel-rt_debug | 3.12.61-60.18.1 |
| SUSE Linux Enterprise Real Time 12 SP1 | kernel-rt_debug | 3.12.58-14.1 |
| SUSE Linux Enterprise Real Time 12 SP1 | kernel-source-rt | 3.12.61-60.18.1 |
| SUSE Linux Enterprise Real Time 12 SP1 | kernel-source-rt | 3.12.58-14.1 |
| SUSE Linux Enterprise Real Time 12 SP1 | kernel-syms-rt | 3.12.61-60.18.1 |
| SUSE Linux Enterprise Real Time 12 SP1 | kernel-syms-rt | 3.12.58-14.1 |