⌘ + K

UBUNTU-CVE-2015-8787

Dashboard / Vulnerabilities / UBUNTU-CVE-2015-8787

UBUNTU-CVE-2015-8787

Published: 31 Dec 2015Last Modified: 4 Feb 2026

Upstream:

Aliases:

Summary:

Details: The nf_nat_redirect_ipv4 function in net/netfilter/nf_nat_redirect.c in the Linux kernel before 4.4 allows remote attackers to cause a denial of service (NULL pointer dereference and system crash) or possibly have unspecified other impact by sending certain IPv4 packets to an incompletely configured interface, a related issue to CVE-2003-1604.

References: https://ubuntu.com/security/CVE-2015-8787, https://bugzilla.redhat.com/show_bug.cgi?id=1300731, https://lkml.org/lkml/2015/12/2/618, http://www.openwall.com/lists/oss-security/2016/01/27/6, https://ubuntu.com/security/notices/USN-2889-2, https://ubuntu.com/security/notices/USN-2889-1, https://ubuntu.com/security/notices/USN-2890-1, https://ubuntu.com/security/notices/USN-2890-2, https://ubuntu.com/security/notices/USN-2890-3, https://www.cve.org/CVERecord?id=CVE-2015-8787

Affected packages

Package

Name: linux-lts-vivid

Purl: pkg:deb/ubuntu/[email protected]~14.04.1?arch=source&distro=trusty

Affected ranges

Type: ECOSYSTEM

Events:

Introduced- 0

Fixed -3.19.0-49.55~14.04.1

Affected versions

3.19.0-18.18~14.04.1

3.19.0-20.20~14.04.1

3.19.0-21.21~14.04.1

3.19.0-22.22~14.04.1

3.19.0-23.24~14.04.1

3.19.0-25.26~14.04.1

3.19.0-26.28~14.04.1

3.19.0-28.30~14.04.1

3.19.0-30.33~14.04.1

3.19.0-30.34~14.04.1

3.19.0-31.36~14.04.1

3.19.0-32.37~14.04.1

3.19.0-33.38~14.04.1

3.19.0-37.42~14.04.1

3.19.0-39.44~14.04.1

3.19.0-41.46~14.04.2

3.19.0-42.48~14.04.1

3.19.0-43.49~14.04.1

3.19.0-47.53~14.04.1

Common Vulnerability Scoring System

Attack Vector

Network

Adjacent

Local

Physical

Privileges Required

None

Low

High

User Interaction

None

Required

Scope

Unchanged

Changed

Confidentiality

None

Low

High

Integrity

None

Low

High

Availability

None

Low

High