ID:2267 - Exploit for Man-in-the-middle attack in Linux kernel - CVE-2016-5696

Link to public exploit:

Vulnerability description

The vulnerability allows a remote attacker to write arbitrary files and cause DoS condition on the target system.

The weakness exists due to an error in net/ipv4/tcp_input.c while determining the rate of challenge ACK segments. A remote attacker can perform man-in-the-middle attack and hijack TCP sessions via a blind in-window attack.

Remediation