Vulnerability identifier: #VU357

Vulnerability risk: Low

CVSSv3.1: 5.9 [CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:L/E:P/RL:O/RC:C]

CVE-ID: CVE-2016-5696

CWE-ID: CWE-300

Exploitation vector: Network

Exploits in database: 2

• April 7, 2020
  • challack (Proof-of-concept exploit code for CVE-2016-5696) [Github]
• March 18, 2020
  • mountain_goat (A PoC demonstrating techniques exploiting CVE-2016-5696 Off-Path TCP Exploits: Global Rate Limit Considered Dangerous ) [Github]

Impact: Data manipulation

Vulnerable software:
Linux kernel
Operating systems & Components / Operating system

Vendor: Linux Foundation