CVE-2016-3707 Security feature bypass in n/a
Remote attackers can execute SysRq commands via crafted ICMP packets if the feature is enabled, potentially leading to privilege escalation or denial of service.
- Exploited in the wild
- Not known
- Login needed
- Not needed
- Attackable
- Over the internet
- Victim action needed
- Not needed
- Fix
- Available
What is CVE-2016-3707?
CVE-2016-3707 is a high-severity vulnerability in n/a, published on 27 Jun 2016. An attacker can exploit it over the internet without logging in, with no action from the victim.
Official description
The icmp_check_sysrq function in net/ipv4/icmp.c in the kernel.org projects/rt patches for the Linux kernel, as used in the kernel-rt package before 3.10.0-327.22.1 in Red Hat Enterprise Linux for Real Time 7 and other products, allows remote attackers to execute SysRq commands via crafted ICMP Echo Request packets, as demonstrated by a brute-force attack to discover a cookie, or an attack that occurs after reading the local icmp_echo_sysrq file.
Weakness: CWE-284
Which versions are affected by CVE-2016-3707?
It affects 4 products.
Products include Linux Linux Kernel-Rt, Novell Suse Linux Enterprise Real Time Extension, Redhat Enterprise Linux for Real Time, Redhat Enterprise Linux for Real Time for Nfv.
How do I fix CVE-2016-3707?
Apply the vendor's patch.
Is CVE-2016-3707 being exploited?
There is no known exploitation of CVE-2016-3707 in the wild and no public exploit code.
Sources
Also known as DEBIAN-CVE-2016-3707, GHSA-558g-x28c-wmj6.