1. Home
  2. Security Advisories
  3. Alpine Linux
  4. ALPINE:CVE-2016-10229

[ALPINE:CVE-2016-10229] linux-grsec vulnerability

Severity High
Affected Packages 3
Fixed Packages 3
CVEs 1
Info Packages Vulnerabilities

[From CVE-2016-10229] udp.c in the Linux kernel before 4.5 allows remote attackers to execute arbitrary code via UDP traffic that triggers an unsafe second checksum calculation during execution of a recv system call with the MSG_PEEK flag.

Package Affected Version
pkg:apk/alpine/linux-grsec?arch=x86_64&distro=alpine-3.3 < 4.1.39-r0
pkg:apk/alpine/linux-grsec?arch=x86&distro=alpine-3.3 < 4.1.39-r0
pkg:apk/alpine/linux-grsec?arch=armhf&distro=alpine-3.3 < 4.1.39-r0
Package Fixed Version
pkg:apk/alpine/linux-grsec?arch=x86_64&distro=alpine-3.3 = 4.1.39-r0
pkg:apk/alpine/linux-grsec?arch=x86&distro=alpine-3.3 = 4.1.39-r0
pkg:apk/alpine/linux-grsec?arch=armhf&distro=alpine-3.3 = 4.1.39-r0
ID
ALPINE:CVE-2016-10229
Severity
high
URL
https://security.alpinelinux.org/vuln/CVE-2016-10229
Published
2017-04-04T05:59:00
(7 years ago)
Modified
2017-04-04T05:59:00
(7 years ago)
Rights
Alpine Linux Security Team
Other Advisories
Type Package URL Namespace Name / Product Version Distribution / Platform Arch Patch / Fix
Fixed pkg:apk/alpine/linux-grsec?arch=x86_64&distro=alpine-3.3 alpine linux-grsec = 4.1.39-r0 alpine-3.3 x86_64
Affected pkg:apk/alpine/linux-grsec?arch=x86_64&distro=alpine-3.3 alpine linux-grsec < 4.1.39-r0 alpine-3.3 x86_64
Fixed pkg:apk/alpine/linux-grsec?arch=x86&distro=alpine-3.3 alpine linux-grsec = 4.1.39-r0 alpine-3.3 x86
Affected pkg:apk/alpine/linux-grsec?arch=x86&distro=alpine-3.3 alpine linux-grsec < 4.1.39-r0 alpine-3.3 x86
Fixed pkg:apk/alpine/linux-grsec?arch=armhf&distro=alpine-3.3 alpine linux-grsec = 4.1.39-r0 alpine-3.3 armhf
Affected pkg:apk/alpine/linux-grsec?arch=armhf&distro=alpine-3.3 alpine linux-grsec < 4.1.39-r0 alpine-3.3 armhf
# CVE Description CVSS EPSS EPSS Trend (30 days) Affected Products Weaknesses Security Advisories Exploits PoC Pubblication Date Modification Date
# CVE Description CVSS EPSS EPSS Trend (30 days) Affected Products Weaknesses Security Advisories PoC Pubblication Date Modification Date