CVE-2016-10229 Linux Kernel ipv4/udp.c Remote Code Execution Vulnerability

Summary

Multiple Fortinet products may be affected by the following Linux Kernel vulnerability:


CVE-2016-10229 Linux Kernel ipv4/udp.c Remote Code Execution Vulnerability


udp.c in the Linux kernel before 4.5 allows remote attackers to execute arbitrary code via UDP traffic that triggers an unsafe second checksum calculation during execution of a recv system call with the MSG_PEEK flag


However, note there is no recorded successful attack on Fortinet products.

Affected Products

FortiAP (including S/W2 series) - 5.6.0, 5.4.3 and below FortiAP (including S/W2 series) - 5.6.0, 5.4.3 and below FortiAP (including S/W2 series) - 5.6.0, 5.4.3 and below FortiAP (including S/W2 series) - 5.6.0, 5.4.3 and below FortiAP (including S/W2 series) - 5.6.0, 5.4.3 and below FortiAP (including S/W2 series) - 5.6.0, 5.4.3 and below FortiAP (including S/W2 series) - 5.6.0, 5.4.3 and below FortiAP (including S/W2 series) - 5.6.0, 5.4.3 and below FortiAP (including S/W2 series) - 5.6.0, 5.4.3 and below FortiAP (including S/W2 series) - 5.6.0, 5.4.3 and below FortiAP (including S/W2 series) - 5.6.0, 5.4.3 and below FortiAP (including S/W2 series) - 5.6.0, 5.4.3 and below FortiAP (including S/W2 series) - 5.6.0, 5.4.3 and below FortiAP (including S/W2 series) - 5.6.0, 5.4.3 and below FortiAP (including S/W2 series) - 5.6.0, 5.4.3 and below FortiAP (including S/W2 series) - 5.6.0, 5.4.3 and below FortiAP (including S/W2 series) - 5.6.0, 5.4.3 and below FortiAP (including S/W2 series) - 5.6.0, 5.4.3 and below FortiAnalyzer - 5.4.2 and below FortiAnalyzer - 5.4.2 and below FortiAnalyzer - 5.4.2 and below FortiAnalyzer - 5.4.2 and below FortiAnalyzer - 5.4.2 and below FortiAnalyzer - 5.4.2 and below FortiAnalyzer - 5.4.2 and below FortiAnalyzer - 5.4.2 and below FortiAnalyzer - 5.4.2 and below FortiAnalyzer - 5.4.2 and below FortiAnalyzer - 5.4.2 and below FortiAnalyzer - 5.4.2 and below FortiAnalyzer - 5.4.2 and below FortiAnalyzer - 5.4.2 and below FortiAnalyzer - 5.4.2 and below FortiAnalyzer - 5.4.2 and below FortiAnalyzer - 5.4.2 and below FortiAnalyzer - 5.4.2 and below FortiOS - 5.6.0 and below FortiOS - 5.6.0 and below FortiOS - 5.6.0 and below FortiOS - 5.6.0 and below FortiOS - 5.6.0 and below FortiOS - 5.6.0 and below FortiOS - 5.6.0 and below FortiOS - 5.6.0 and below FortiOS - 5.6.0 and below FortiOS - 5.6.0 and below FortiOS - 5.6.0 and below FortiOS - 5.6.0 and below FortiOS - 5.6.0 and below FortiOS - 5.6.0 and below FortiOS - 5.6.0 and below FortiOS - 5.6.0 and below FortiOS - 5.6.0 and below FortiOS - 5.6.0 and below FortiSwitch - 3.6.2 and below FortiSwitch - 3.6.2 and below FortiSwitch - 3.6.2 and below FortiSwitch - 3.6.2 and below FortiSwitch - 3.6.2 and below FortiSwitch - 3.6.2 and below FortiSwitch - 3.6.2 and below FortiSwitch - 3.6.2 and below FortiSwitch - 3.6.2 and below FortiSwitch - 3.6.2 and below FortiSwitch - 3.6.2 and below FortiSwitch - 3.6.2 and below FortiSwitch - 3.6.2 and below FortiSwitch - 3.6.2 and below FortiSwitch - 3.6.2 and below FortiSwitch - 3.6.2 and below FortiSwitch - 3.6.2 and below FortiSwitch - 3.6.2 and below

Solutions

The following products were patched on a precaution basis: The following products were patched on a precaution basis: The following products were patched on a precaution basis: The following products were patched on a precaution basis: The following products were patched on a precaution basis: The following products were patched on a precaution basis: The following products were patched on a precaution basis: The following products were patched on a precaution basis: The following products were patched on a precaution basis: The following products were patched on a precaution basis: The following products were patched on a precaution basis: The following products were patched on a precaution basis: The following products were patched on a precaution basis: The following products were patched on a precaution basis: The following products were patched on a precaution basis: The following products were patched on a precaution basis: The following products were patched on a precaution basis: The following products were patched on a precaution basis: FortiAP (including S/W2 series) - upgrade to 5.4.4 or 5.6.1 and above FortiAP (including S/W2 series) - upgrade to 5.4.4 or 5.6.1 and above FortiAP (including S/W2 series) - upgrade to 5.4.4 or 5.6.1 and above FortiAP (including S/W2 series) - upgrade to 5.4.4 or 5.6.1 and above FortiAP (including S/W2 series) - upgrade to 5.4.4 or 5.6.1 and above FortiAP (including S/W2 series) - upgrade to 5.4.4 or 5.6.1 and above FortiAP (including S/W2 series) - upgrade to 5.4.4 or 5.6.1 and above FortiAP (including S/W2 series) - upgrade to 5.4.4 or 5.6.1 and above FortiAP (including S/W2 series) - upgrade to 5.4.4 or 5.6.1 and above FortiAP (including S/W2 series) - upgrade to 5.4.4 or 5.6.1 and above FortiAP (including S/W2 series) - upgrade to 5.4.4 or 5.6.1 and above FortiAP (including S/W2 series) - upgrade to 5.4.4 or 5.6.1 and above FortiAP (including S/W2 series) - upgrade to 5.4.4 or 5.6.1 and above FortiAP (including S/W2 series) - upgrade to 5.4.4 or 5.6.1 and above FortiAP (including S/W2 series) - upgrade to 5.4.4 or 5.6.1 and above FortiAP (including S/W2 series) - upgrade to 5.4.4 or 5.6.1 and above FortiAP (including S/W2 series) - upgrade to 5.4.4 or 5.6.1 and above FortiAP (including S/W2 series) - upgrade to 5.4.4 or 5.6.1 and above FortiAnalyzer - upgrade to 5.4.3 or above FortiAnalyzer - upgrade to 5.4.3 or above FortiAnalyzer - upgrade to 5.4.3 or above FortiAnalyzer - upgrade to 5.4.3 or above FortiAnalyzer - upgrade to 5.4.3 or above FortiAnalyzer - upgrade to 5.4.3 or above FortiAnalyzer - upgrade to 5.4.3 or above FortiAnalyzer - upgrade to 5.4.3 or above FortiAnalyzer - upgrade to 5.4.3 or above FortiAnalyzer - upgrade to 5.4.3 or above FortiAnalyzer - upgrade to 5.4.3 or above FortiAnalyzer - upgrade to 5.4.3 or above FortiAnalyzer - upgrade to 5.4.3 or above FortiAnalyzer - upgrade to 5.4.3 or above FortiAnalyzer - upgrade to 5.4.3 or above FortiAnalyzer - upgrade to 5.4.3 or above FortiAnalyzer - upgrade to 5.4.3 or above FortiAnalyzer - upgrade to 5.4.3 or above FortiOS - upgrade to 5.6.1 or above FortiOS - upgrade to 5.6.1 or above FortiOS - upgrade to 5.6.1 or above FortiOS - upgrade to 5.6.1 or above FortiOS - upgrade to 5.6.1 or above FortiOS - upgrade to 5.6.1 or above FortiOS - upgrade to 5.6.1 or above FortiOS - upgrade to 5.6.1 or above FortiOS - upgrade to 5.6.1 or above FortiOS - upgrade to 5.6.1 or above FortiOS - upgrade to 5.6.1 or above FortiOS - upgrade to 5.6.1 or above FortiOS - upgrade to 5.6.1 or above FortiOS - upgrade to 5.6.1 or above FortiOS - upgrade to 5.6.1 or above FortiOS - upgrade to 5.6.1 or above FortiOS - upgrade to 5.6.1 or above FortiOS - upgrade to 5.6.1 or above FortiSwitch - upgrade to 3.6.3 or above FortiSwitch - upgrade to 3.6.3 or above FortiSwitch - upgrade to 3.6.3 or above FortiSwitch - upgrade to 3.6.3 or above FortiSwitch - upgrade to 3.6.3 or above FortiSwitch - upgrade to 3.6.3 or above FortiSwitch - upgrade to 3.6.3 or above FortiSwitch - upgrade to 3.6.3 or above FortiSwitch - upgrade to 3.6.3 or above FortiSwitch - upgrade to 3.6.3 or above FortiSwitch - upgrade to 3.6.3 or above FortiSwitch - upgrade to 3.6.3 or above FortiSwitch - upgrade to 3.6.3 or above FortiSwitch - upgrade to 3.6.3 or above FortiSwitch - upgrade to 3.6.3 or above FortiSwitch - upgrade to 3.6.3 or above FortiSwitch - upgrade to 3.6.3 or above FortiSwitch - upgrade to 3.6.3 or above