CVE-2015-8787

Critical

Published: 08/02/2016(UTC)Translated: 15/06/2026(UTC)NVD NIST

Summary

The nf_nat_redirect_ipv4 function in the Linux kernel before version 4.4 allows remote attackers to cause a denial of service through a NULL pointer dereference, leading to system crashes. This issue is related to CVE-2003-1604.

Risk Assessment

Attackers can exploit this vulnerability to remotely crash the system, potentially leading to service downtime. Unsecured interfaces may be particularly vulnerable to such attacks.

Recommendation

It is recommended to update the Linux kernel to version 4.4 or later to mitigate this vulnerability. Additionally, ensure that all interfaces are properly configured.

Original NVD description (English source)

The nf_nat_redirect_ipv4 function in net/netfilter/nf_nat_redirect.c in the Linux kernel before 4.4 allows remote attackers to cause a denial of service (NULL pointer dereference and system crash) or possibly have unspecified other impact by sending certain IPv4 packets to an incompletely configured interface, a related issue to CVE-2003-1604.