Not a U.S. government website. NDD is an independent vulnerability database by Volerion and is not affiliated with or endorsed by NIST or NVD.

CVE-2016-10200 Details

Description

Race condition in the L2TPv3 IP Encapsulation feature in the Linux kernel before 4.8.14 allows local users to gain privileges or cause a denial of service (use-after-free) by making multiple bind system calls without properly ascertaining whether a socket has the SOCK_ZAPPED status, related to net/l2tp/l2tp_ip.c and net/l2tp/l2tp_ip6.c.

Metrics

CVSS 3.x Severity and Vector Strings:

NIST: [email protected]CVSS-B:7 HIGHVector:CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H

References to Advisories, Solutions, and Tools

By selecting these links, you will be leaving this site. These are references gathered from the official CVE record and are not endorsed by Volerion.

URL	Source(s)	Tag(s)
http://git.kernel.org/cgit/linux/kernel/git/torvalds/linux.git/commit/?id=32c231164b762dddefa13af5a0101032c70b50ef	CVE	Issue TrackingPatchThird Party Advisory
https://access.redhat.com/errata/RHSA-2017:1842	CVE	Third Party Advisory
https://access.redhat.com/errata/RHSA-2017:2077	CVE	Third Party Advisory
https://access.redhat.com/errata/RHSA-2017:2437	CVE	Third Party Advisory
https://access.redhat.com/errata/RHSA-2017:2444	CVE	Third Party Advisory
https://github.com/torvalds/linux/commit/32c231164b762dddefa13af5a0101032c70b50ef	CVE	Issue TrackingPatchThird Party Advisory
http://source.android.com/security/bulletin/2017-03-01.html	CVE	Third Party Advisory
http://www.kernel.org/pub/linux/kernel/v4.x/ChangeLog-4.8.14	CVE	Release NotesVendor Advisory
http://www.securityfocus.com/bid/101783	CVE	Third Party AdvisoryVDB Entry
http://www.securitytracker.com/id/1037965	CVE	Third Party AdvisoryVDB Entry
http://www.securitytracker.com/id/1037968	CVE	Third Party AdvisoryVDB Entry
http://git.kernel.org/cgit/linux/kernel/git/torvalds/linux.git/commit/?id=32c231164b762dddefa13af5a0101032c70b50ef	[email protected]	Issue TrackingPatchThird Party Advisory
https://access.redhat.com/errata/RHSA-2017:1842	[email protected]	Third Party Advisory
https://access.redhat.com/errata/RHSA-2017:2077	[email protected]	Third Party Advisory
https://access.redhat.com/errata/RHSA-2017:2437	[email protected]	Third Party Advisory
https://access.redhat.com/errata/RHSA-2017:2444	[email protected]	Third Party Advisory
https://github.com/torvalds/linux/commit/32c231164b762dddefa13af5a0101032c70b50ef	[email protected]	Issue TrackingPatchThird Party Advisory
http://source.android.com/security/bulletin/2017-03-01.html	[email protected]	Third Party Advisory
http://www.kernel.org/pub/linux/kernel/v4.x/ChangeLog-4.8.14	[email protected]	Release NotesVendor Advisory
http://www.securityfocus.com/bid/101783	[email protected]	Third Party AdvisoryVDB Entry
http://www.securitytracker.com/id/1037965	[email protected]	Third Party AdvisoryVDB Entry
http://www.securitytracker.com/id/1037968	[email protected]	Third Party AdvisoryVDB Entry

see all 22 references

Weakness Enumeration

CWE-ID	CWE Name	Source
CWE-264	Permissions, Privileges, and Access Controls	[email protected]
CWE-362	Concurrent Execution using Shared Resource with Improper Synchronization ('Race Condition')	[email protected]
CWE-416	Use After Free	[email protected]

Affected Products

Product	Versions
linux linux kernel	>= 3.0.34, < 3.2 >= 3.2.20, < 3.2.88 >= 3.4.2, < 3.12.69 >= 3.13, < 3.16.40 >= 3.17, < 3.18.52
CPE cpe:2.3:o:linux:linux_kernel:::::::: Remediation No remediation found in references.
google android	<= 7.1.1
CPE cpe:2.3:o:google:android:::::::: Remediation No remediation found in references.

Change History

11 change records found show changes

Date	Action	Recorded By
Jun 17, 2026	CVE Modified	[email protected]
May 13, 2026	CVE Status Change	[email protected]
Nov 21, 2024	CVE Modified	CVE
May 14, 2024	CVE Modified	[email protected]
Jun 7, 2023	Modified Analysis	[email protected]
Jan 5, 2018	CVE Modified	[email protected]
Nov 12, 2017	CVE Modified	[email protected]
Jul 17, 2017	CVE Modified	[email protected]
May 11, 2017	CVE Modified	[email protected]
Mar 9, 2017	Initial Analysis	[email protected]
Mar 8, 2017	CVE Modified	[email protected]