What is CVE-2015-3332?

CVE-2015-3332 is a vulnerability in Linux Kernel, classified under CWE-399. Published 2015-05-27.

Is CVE-2015-3332 known to be exploited?

1 public proof-of-concept repositories are indexed. Not currently listed in the CISA KEV catalog.

Vulnerability in Linux Kernel

CVE-2015-3332

A certain backport in the TCP Fast Open implementation for the Linux kernel before 3.18 does not properly maintain a count value, which allow local users to cause a denial of service (system crash) via the Fast Open feature, as demonstrated by visiting the chrome://flags/#enable-tcp-fast-open URL when using certain 3.10.x through 3.16.x kernel builds, including longterm-maintenance releases and ckt (aka Canonical Kernel Team) builds.

EPSS: 0.004 (30.8th percentile) — read the EPSS interpretation.

Affected products

Weakness classification (CWE)

CWE-399

Public proof-of-concept exploits

thdusdl1219/CVE-Study

References

cve@mitre.org (mailing-list, x_refsource_MLIST)
cve@mitre.org (x_refsource_CONFIRM)
cve@mitre.org (vendor-advisory, x_refsource_DEBIAN)
cve@mitre.org (x_refsource_CONFIRM)
cve@mitre.org (mailing-list, x_refsource_MLIST)

Frequently asked questions

What is CVE-2015-3332?: CVE-2015-3332 is a vulnerability in Linux Kernel, classified under CWE-399. Published 2015-05-27.
Is CVE-2015-3332 known to be exploited?: 1 public proof-of-concept repositories are indexed. Not currently listed in the CISA KEV catalog.