critical
CVE-2015-8787
kernel: Missing NULL pointer check in nf_nat_redirect_ipv4
In the Trivy database since at least 24 Oct 2026, 07:11 UTCWhen it arrived before that build is not recorded.
Severity by source
NVD9.8CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
Red Hat5.4AV:N/AC:H/Au:N/C:N/I:N/A:C
Trivy's own label is CRITICAL. Rated critical by NVD. Rated lower by Oracle (high), Red Hat (medium), Amazon (medium), Ubuntu (medium).
Description
The nf_nat_redirect_ipv4 function in net/netfilter/nf_nat_redirect.c in the Linux kernel before 4.4 allows remote attackers to cause a denial of service (NULL pointer dereference and system crash) or possibly have unspecified other impact by sending certain IPv4 packets to an incompletely configured interface, a related issue to CVE-2003-1604.
Affected packages and fixed versions
| Source | Package | Fixed in |
|---|---|---|
| amazon linux 1 | kernel, kernel-debuginfo, kernel-debuginfo-common-i686 and 9 more | 4.1.10-17.31.amzn1 |
| debian 11 | linux | 4.3.5-1 |
| debian 12 | linux | 4.3.5-1 |
| debian 13 | linux | 4.3.5-1 |
| debian 14 | linux | 4.3.5-1 |
| echo | linux | 4.3.5-1 |
| Oracle Linux 6 | dtrace-modules-4.1.12-61.1.6.el6uek, kernel-uek, kernel-uek-debug and 4 more | 0.5.3-2.el6 and 1 more |
| Oracle Linux 7 | dtrace-modules-4.1.12-61.1.6.el7uek, kernel-uek, kernel-uek-debug and 4 more | 0.5.3-2.el7 and 1 more |
| root.io debian 11 | rootio-linux | 4.3.5-1 |
| root.io debian 12 | rootio-linux | 4.3.5-1 |
| root.io debian 13 | rootio-linux | 4.3.5-1 |
| ubuntu 14.04 | linux-lts-vivid, linux-lts-wily | 3.19.0-49.55~14.04.1 and 1 more |
Show all 39 entries from 14 sources
| Source | Package | Fixed in |
|---|---|---|
| amazon linux 1 | kernel | 4.1.10-17.31.amzn1 |
| amazon linux 1 | kernel-debuginfo | 4.1.10-17.31.amzn1 |
| amazon linux 1 | kernel-debuginfo-common-i686 | 4.1.10-17.31.amzn1 |
| amazon linux 1 | kernel-debuginfo-common-x86_64 | 4.1.10-17.31.amzn1 |
| amazon linux 1 | kernel-devel | 4.1.10-17.31.amzn1 |
| amazon linux 1 | kernel-doc | 4.1.10-17.31.amzn1 |
| amazon linux 1 | kernel-headers | 4.1.10-17.31.amzn1 |
| amazon linux 1 | kernel-tools | 4.1.10-17.31.amzn1 |
| amazon linux 1 | kernel-tools-debuginfo | 4.1.10-17.31.amzn1 |
| amazon linux 1 | kernel-tools-devel | 4.1.10-17.31.amzn1 |
| amazon linux 1 | perf | 4.1.10-17.31.amzn1 |
| amazon linux 1 | perf-debuginfo | 4.1.10-17.31.amzn1 |
| debian 11 | linux | 4.3.5-1 |
| debian 12 | linux | 4.3.5-1 |
| debian 13 | linux | 4.3.5-1 |
| debian 14 | linux | 4.3.5-1 |
| echo | linux | 4.3.5-1 |
| Oracle Linux 6 | dtrace-modules-4.1.12-61.1.6.el6uek | 0.5.3-2.el6 |
| Oracle Linux 6 | kernel-uek | 4.1.12-61.1.6.el6uek |
| Oracle Linux 6 | kernel-uek-debug | 4.1.12-61.1.6.el6uek |
| Oracle Linux 6 | kernel-uek-debug-devel | 4.1.12-61.1.6.el6uek |
| Oracle Linux 6 | kernel-uek-devel | 4.1.12-61.1.6.el6uek |
| Oracle Linux 6 | kernel-uek-doc | 4.1.12-61.1.6.el6uek |
| Oracle Linux 6 | kernel-uek-firmware | 4.1.12-61.1.6.el6uek |
| Oracle Linux 7 | dtrace-modules-4.1.12-61.1.6.el7uek | 0.5.3-2.el7 |
| Oracle Linux 7 | kernel-uek | 4.1.12-61.1.6.el7uek |
| Oracle Linux 7 | kernel-uek-debug | 4.1.12-61.1.6.el7uek |
| Oracle Linux 7 | kernel-uek-debug-devel | 4.1.12-61.1.6.el7uek |
| Oracle Linux 7 | kernel-uek-devel | 4.1.12-61.1.6.el7uek |
| Oracle Linux 7 | kernel-uek-doc | 4.1.12-61.1.6.el7uek |
| Oracle Linux 7 | kernel-uek-firmware | 4.1.12-61.1.6.el7uek |
| root.io debian 11 | rootio-linux | 4.3.5-1 |
| root.io debian 12 | rootio-linux | 4.3.5-1 |
| root.io debian 13 | rootio-linux | 4.3.5-1 |
| ubuntu 14.04 | linux-lts-vivid | 3.19.0-49.55~14.04.1 |
| ubuntu 14.04 | linux-lts-wily | 4.2.0-27.32~14.04.1 |
| ubuntu 15.04 | linux | 3.19.0-49.55 |
| ubuntu 15.10 | linux | 4.2.0-27.32 |
| ubuntu 15.10 | linux-raspi2 | 4.2.0-1022.29 |
References
- http://git.kernel.org/cgit/linux/kernel/git/torvalds/linux.git/commit/?id=94f9cd81436c85d8c3a318ba92e236ede73752fc
- http://lists.fedoraproject.org/pipermail/package-announce/2016-February/176464.html
- http://lists.fedoraproject.org/pipermail/package-announce/2016-February/176484.html
- http://lists.opensuse.org/opensuse-security-announce/2016-04/msg00015.html
- http://www.openwall.com/lists/oss-security/2016/01/27/6
- http://www.oracle.com/technetwork/topics/security/linuxbulletinjul2016-3090544.html
- http://www.oracle.com/technetwork/topics/security/ovmbulletinoct2016-3090547.html
- http://www.ubuntu.com/usn/USN-2889-1
All 25 references
- http://www.ubuntu.com/usn/USN-2889-2
- http://www.ubuntu.com/usn/USN-2890-1
- http://www.ubuntu.com/usn/USN-2890-2
- http://www.ubuntu.com/usn/USN-2890-3
- https://access.redhat.com/security/cve/CVE-2015-8787
- https://bugzilla.redhat.com/show_bug.cgi?id=1300731
- https://github.com/torvalds/linux/commit/94f9cd81436c85d8c3a318ba92e236ede73752fc
- https://linux.oracle.com/cve/CVE-2015-8787.html
- https://linux.oracle.com/errata/ELSA-2016-3596.html
- https://lkml.org/lkml/2015/12/2/618
- https://nvd.nist.gov/vuln/detail/CVE-2015-8787
- https://ubuntu.com/security/notices/USN-2889-1
- https://ubuntu.com/security/notices/USN-2889-2
- https://ubuntu.com/security/notices/USN-2890-1
- https://ubuntu.com/security/notices/USN-2890-2
- https://ubuntu.com/security/notices/USN-2890-3
- https://www.cve.org/CVERecord?id=CVE-2015-8787