Remote Command Execution Vulnerability in linux-raspi2 Package
Summary
UBUNTU-CVE-2016-3707: The icmp_check_sysrq function in net/ipv4/icmp.c in the kernel.org projects/rt patches for the Linux kernel, as used in the kernel-rt package before 3.10.0-327.22.1 in Red Hat Enterprise Linux for Real Time 7 and other p... Affects linux-raspi2 versions 5.3.0-1007.8 – 5.4.0-1006.6. No fix is published. How to fix ↓
Check if this vulnerability affects your application
Upload a manifest or SBOM and we'll show whether you're affected, plus every other risky package in the same scan.
No signup required · Results in about 60 seconds
Habilume
Habit tracker with a companion that grows with you
Complete habits, earn Lume Points, and watch your Lume grow as you stay consistent.
Background
The linux-raspi2 package is a version of the Linux kernel tailored for Raspberry Pi devices, providing essential functionalities for hardware interaction and system management. This package is crucial for running various applications on Raspberry Pi, enabling users to leverage the device's capabilities. However, it is susceptible to a significant vulnerability that allows remote attackers to execute commands through crafted ICMP packets.
Vulnerability Detail
The vulnerability, identified as CVE-2016-3707, resides in the icmp_check_sysrq function within the Linux kernel's networking code. It allows remote attackers to execute SysRq commands by sending specially crafted ICMP Echo Request packets. This can lead to unauthorized command execution, potentially compromising the system's integrity and security. The vulnerability is particularly concerning as it can be exploited through brute-force methods to discover a cookie, or by accessing the local icmp_echo_sysrq file, making it a critical issue for systems using affected kernel versions.
How To Fix
No fixed version is published for this vulnerability.
To rectify this vulnerability, users should update the linux-raspi2 package to the latest patched version. The patched version is 5.4.0-1006.6 or later. Users can update the package by running the following command in the terminal:
sudo apt-get update && sudo apt-get install linux-raspi2
Tip — Not sure whether your app is affected? Vulert can check the versions your app actually runs. Scan free →
Workaround
As a temporary workaround, users can disable ICMP responses or restrict access to the affected system's network interfaces to mitigate the risk of exploitation until the package is updated.
Conclusion
The CVE-2016-3707 vulnerability in the linux-raspi2 package poses a significant risk by allowing remote command execution through crafted ICMP packets. It is crucial for users to update their systems to the latest patched version to safeguard against potential exploits. Temporary workarounds can help mitigate risks until updates are applied.
See every vulnerability recorded for linux-raspi2 →
FAQ
CVE-2016-3707 is a vulnerability in the Linux kernel that allows remote attackers to execute SysRq commands via crafted ICMP Echo Request packets.
You can check if your application is affected by using the Vulert playground at Vulert Scanner, which allows you to monitor for open-source vulnerabilities without requiring a signup.
Exploitation of this vulnerability could lead to unauthorized command execution, compromising the security and integrity of the affected system.
Yes, a patched version of the linux-raspi2 package is available. Users should update to version 5.4.0-1006.6 or later.
If immediate updating is not possible, consider disabling ICMP responses or restricting network access to mitigate the risk of exploitation.
Related vulnerabilities
Recent vulnerabilities recorded for linux-raspi2.
Habilume
Habit tracker with a companion that grows with you
Complete habits, earn Lume Points, and watch your Lume grow as you stay consistent.
Follow Vulert in Google
Get more Vulert vulnerability and dependency-security updates in Google Search and AI results.