CVE ID:	CVE-2015-3636
Description:	The ping_unhash function in net/ipv4/ping.c in the Linux kernel before 4.0.3 does not initialize a certain list data structure during an unhash operation, which allows local users to gain privileges or cause a denial of service (use-after-free and system crash) by leveraging the ability to make a SOCK_DGRAM socket system call for the IPPROTO_ICMP or IPPROTO_ICMPV6 protocol, and then making a connect system call after a disconnect.
Test IDs:	1.3.6.1.4.1.25623.1.0.703290   1.3.6.1.4.1.25623.1.0.869659   1.3.6.1.4.1.25623.1.0.105360
Cross References:	Common Vulnerability Exposure (CVE) ID: CVE-2015-3636 BugTraq ID: 74450 http://www.securityfocus.com/bid/74450 Debian Security Information: DSA-3290 (Google Search) http://www.debian.org/security/2015/dsa-3290 http://lists.fedoraproject.org/pipermail/package-announce/2015-May/157897.html http://lists.fedoraproject.org/pipermail/package-announce/2015-May/157788.html http://lists.fedoraproject.org/pipermail/package-announce/2015-May/158804.html http://www.openwall.com/lists/oss-security/2015/05/02/5 RedHat Security Advisories: RHSA-2015:1221 http://rhn.redhat.com/errata/RHSA-2015-1221.html RedHat Security Advisories: RHSA-2015:1534 http://rhn.redhat.com/errata/RHSA-2015-1534.html RedHat Security Advisories: RHSA-2015:1564 http://rhn.redhat.com/errata/RHSA-2015-1564.html RedHat Security Advisories: RHSA-2015:1583 http://rhn.redhat.com/errata/RHSA-2015-1583.html RedHat Security Advisories: RHSA-2015:1643 http://rhn.redhat.com/errata/RHSA-2015-1643.html http://www.securitytracker.com/id/1033186 SuSE Security Announcement: SUSE-SU-2015:1224 (Google Search) http://lists.opensuse.org/opensuse-security-announce/2015-07/msg00023.html SuSE Security Announcement: SUSE-SU-2015:1478 (Google Search) http://lists.opensuse.org/opensuse-security-announce/2015-09/msg00004.html SuSE Security Announcement: SUSE-SU-2015:1487 (Google Search) http://lists.opensuse.org/opensuse-security-announce/2015-09/msg00007.html SuSE Security Announcement: SUSE-SU-2015:1488 (Google Search) http://lists.opensuse.org/opensuse-security-announce/2015-09/msg00008.html SuSE Security Announcement: SUSE-SU-2015:1489 (Google Search) http://lists.opensuse.org/opensuse-security-announce/2015-09/msg00009.html SuSE Security Announcement: SUSE-SU-2015:1491 (Google Search) http://lists.opensuse.org/opensuse-security-announce/2015-09/msg00011.html SuSE Security Announcement: openSUSE-SU-2015:1382 (Google Search) http://lists.opensuse.org/opensuse-security-announce/2015-08/msg00011.html http://www.ubuntu.com/usn/USN-2631-1 http://www.ubuntu.com/usn/USN-2632-1 http://www.ubuntu.com/usn/USN-2633-1 http://www.ubuntu.com/usn/USN-2634-1