NVD Vulnerability Detail

CVE-2015-2922

Summary	The ndisc_router_discovery function in net/ipv6/ndisc.c in the Neighbor Discovery (ND) protocol implementation in the IPv6 stack in the Linux kernel before 3.19.6 allows remote attackers to reconfigure a hop-limit setting via a small hop_limit value in a Router Advertisement (RA) message.
Publication Date	May 27, 2015, 7:59 p.m.
Registration Date	Jan. 26, 2021, 2:48 p.m.
Last Update	Nov. 21, 2024, 11:28 a.m.

CVSS2.0 : LOW
Score	3.3
Vector	AV:A/AC:L/Au:N/C:N/I:N/A:P
攻撃元区分(AV)	隣接
攻撃条件の複雑さ(AC)	低
攻撃前の認証要否(Au)	不要
機密性への影響(C)	なし
完全性への影響(I)	なし
可用性への影響(A)	低
Get all privileges.	いいえ
Get user privileges	いいえ
Get other privileges	いいえ
User operation required	いいえ

Affected software configurations

Configuration1		or higher	or less	more than	less than
cpe:2.3:o:linux:linux_kernel::::::::			3.19.5

Configuration2	or higher	or less	more than	less than
cpe:2.3:o:fedoraproject:fedora:22:::::::*
cpe:2.3:o:fedoraproject:fedora:20:::::::*
cpe:2.3:o:fedoraproject:fedora:21:::::::*

Configuration3	or higher	or less	more than	less than
cpe:2.3:o:oracle:linux:5.0:::::::*
cpe:2.3:o:oracle:solaris:11.3:::::::*

Configuration4		or higher	or less	more than	less than
cpe:2.3:o:redhat:enterprise_mrg:2.5:::::::*

Configuration5	or higher	or less	more than	less than
cpe:2.3:o:debian:debian_linux:8.0:::::::*
cpe:2.3:o:debian:debian_linux:7.0:::::::*

Related information, measures and tools

No	URL	タグ
1	http://git.kernel.org/?p=linux/kernel/git/torvalds/linux-2.6.git%3Ba=commit%3Bh=6fd99094de2b83d1d4c8457f2c83483b2828e75a
2	http://git.kernel.org/?p=linux/kernel/git/torvalds/linux-2.6.git%3Ba=commit%3Bh=6fd99094de2b83d1d4c8457f2c83483b2828e75a
3	http://lists.fedoraproject.org/pipermail/package-announce/2015-April/155804.html	Third Party Advisory
4	http://lists.fedoraproject.org/pipermail/package-announce/2015-April/155804.html	Third Party Advisory
5	http://lists.fedoraproject.org/pipermail/package-announce/2015-April/155854.html	Third Party Advisory
6	http://lists.fedoraproject.org/pipermail/package-announce/2015-April/155854.html	Third Party Advisory
7	http://lists.fedoraproject.org/pipermail/package-announce/2015-April/155908.html	Third Party Advisory
8	http://lists.fedoraproject.org/pipermail/package-announce/2015-April/155908.html	Third Party Advisory
9	http://lists.opensuse.org/opensuse-security-announce/2015-07/msg00023.html
10	http://lists.opensuse.org/opensuse-security-announce/2015-07/msg00023.html
11	http://lists.opensuse.org/opensuse-security-announce/2015-08/msg00011.html
12	http://lists.opensuse.org/opensuse-security-announce/2015-08/msg00011.html
13	http://lists.opensuse.org/opensuse-security-announce/2015-09/msg00004.html
14	http://lists.opensuse.org/opensuse-security-announce/2015-09/msg00004.html
15	http://rhn.redhat.com/errata/RHSA-2015-1221.html
16	http://rhn.redhat.com/errata/RHSA-2015-1221.html
17	http://rhn.redhat.com/errata/RHSA-2015-1534.html
18	http://rhn.redhat.com/errata/RHSA-2015-1534.html
19	http://rhn.redhat.com/errata/RHSA-2015-1564.html	Third Party Advisory
20	http://rhn.redhat.com/errata/RHSA-2015-1564.html	Third Party Advisory
21	http://www.debian.org/security/2015/dsa-3237	Third Party Advisory
22	http://www.debian.org/security/2015/dsa-3237	Third Party Advisory
23	http://www.kernel.org/pub/linux/kernel/v3.x/ChangeLog-3.19.6	Exploit Vendor Advisory
24	http://www.kernel.org/pub/linux/kernel/v3.x/ChangeLog-3.19.6	Exploit Vendor Advisory
25	http://www.openwall.com/lists/oss-security/2015/04/04/2	Exploit
26	http://www.openwall.com/lists/oss-security/2015/04/04/2	Exploit
27	http://www.oracle.com/technetwork/topics/security/bulletinoct2015-2511968.html	Third Party Advisory
28	http://www.oracle.com/technetwork/topics/security/bulletinoct2015-2511968.html	Third Party Advisory
29	http://www.oracle.com/technetwork/topics/security/linuxbulletinjan2016-2867209.html	Third Party Advisory
30	http://www.oracle.com/technetwork/topics/security/linuxbulletinjan2016-2867209.html	Third Party Advisory
31	http://www.securityfocus.com/bid/74315
32	http://www.securityfocus.com/bid/74315
33	http://www.securitytracker.com/id/1032417
34	http://www.securitytracker.com/id/1032417
35	https://bugzilla.redhat.com/show_bug.cgi?id=1203712	Issue Tracking
36	https://bugzilla.redhat.com/show_bug.cgi?id=1203712	Issue Tracking
37	https://github.com/torvalds/linux/commit/6fd99094de2b83d1d4c8457f2c83483b2828e75a
38	https://github.com/torvalds/linux/commit/6fd99094de2b83d1d4c8457f2c83483b2828e75a

Common Vulnerabilities List

No	CWE	Name	URL
1	CWE-17	コード	https://cwe.mitre.org/data/definitions/17.html

JVN Vulnerability Information

Linux Kernel の IPv6 スタックの Neighbor Discovery プロトコルの実装の net/ipv6/ndisc.c におけるホップ制限の設定を再設定される脆弱性

Title	Linux Kernel の IPv6 スタックの Neighbor Discovery プロトコルの実装の net/ipv6/ndisc.c におけるホップ制限の設定を再設定される脆弱性
Summary	Linux Kernel の IPv6 スタックの Neighbor Discovery (ND) プロトコルの実装の net/ipv6/ndisc.c 内の ndisc_router_discovery 関数には、ホップ制限の設定を再設定される脆弱性が存在します。補足情報 : CWE による脆弱性タイプは、CWE-17: Code (コード) と識別されています。 http://cwe.mitre.org/data/definitions/17.html
Possible impacts	第三者により、Router Advertisement (RA) メッセージの過度に小さな hop_limit 値を介して、ホップ制限の設定を再設定される可能性があります。
Solution	ベンダより正式な対策が公開されています。ベンダ情報を参照して適切な対策を実施してください。
Publication Date	April 29, 2015, midnight
Registration Date	May 29, 2015, 4:20 p.m.
Last Update	Oct. 30, 2015, 4:47 p.m.

Affected System

Linux

Linux Kernel 3.19.6 未満

CVE (情報セキュリティ共通脆弱性識別子)

No	Name	URL
Common Vulnerabilities and Exposures (CVE)
1	CVE-2015-2922	http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-2922
National Vulnerability Database (NVD)
2	CVE-2015-2922	http://web.nvd.nist.gov/view/vuln/detail?vulnId=CVE-2015-2922

CWE (共通脆弱性タイプ一覧)

No	Name	URL
JVNDB
1	CWE-Other	https://www.ipa.go.jp/security/vuln/CWE.html#CWEOther

ベンダー情報

No	Name	URL
ChangeLog
1	ChangeLog-3.19.6	https://www.kernel.org/pub/linux/kernel/v3.x/ChangeLog-3.19.6
GitHub
2	ipv6: Don't reduce hop limit for an interface	https://github.com/torvalds/linux/commit/6fd99094de2b83d1d4c8457f2c83483b2828e75a
Linux Kernel
3	Linux Kernel Archives	http://www.kernel.org
Linux kernel source tree
4	ipv6: Don't reduce hop limit for an interface	http://git.kernel.org/cgit/linux/kernel/git/torvalds/linux.git/commit/?id=6fd99094de2b83d1d4c8457f2c83483b2828e75a
Oracle Technology Network
5	Oracle Solaris Third Party Bulletin - October 2015	http://www.oracle.com/technetwork/topics/security/bulletinoct2015-2511968.html
Red Hat Bugzilla
6	Bug 1203712	https://bugzilla.redhat.com/show_bug.cgi?id=1203712
Red Hat Security Advisory
7	RHSA-2015:1564	https://rhn.redhat.com/errata/RHSA-2015-1564.html

Change Log

No	Changed Details	Date of change
0	[2015年05月29日] 掲載 [2015年09月03日] ベンダ情報：レッドハット (RHSA-2015:1564) を追加 [2015年10月30日] ベンダ情報：オラクル (Oracle Solaris Third Party Bulletin - October 2015) を追加	Feb. 17, 2018, 10:37 a.m.