CVE-2016-2070

—

CVSS 3.1

7.5 high

EPSS

3%p88

Published

May 2, 2016 (May 2, 2016)

Modified

Jun 17, 2026

Description

The tcp_cwnd_reduction function in net/ipv4/tcp_input.c in the Linux kernel before 4.3.5 allows remote attackers to cause a denial of service (divide-by-zero error and system crash) via crafted TCP traffic.

Vendors: linux
Products: linux kernel
Weakness: CWE-189
Vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H

NVD CVE.org GitHub PoCs EPSS (3.3%)

In the news0 stories

No ingested article mentions this CVE yet.