CVE ID:	CVE-2015-8543
Description:	The networking implementation in the Linux kernel through 4.3.3, as used in Android and other products, does not validate protocol identifiers for certain protocol families, which allows local users to cause a denial of service (NULL function pointer dereference and system crash) or possibly gain privileges by leveraging CLONE_NEWUSER support to execute a crafted SOCK_RAW application.
Test IDs:	1.3.6.1.4.1.25623.1.0.703426   1.3.6.1.4.1.25623.1.0.703434   1.3.6.1.4.1.25623.1.0.807312   1.3.6.1.4.1.25623.1.1.2.2016.1024
Cross References:	Common Vulnerability Exposure (CVE) ID: CVE-2015-8543 BugTraq ID: 79698 http://www.securityfocus.com/bid/79698 Debian Security Information: DSA-3426 (Google Search) http://www.debian.org/security/2015/dsa-3426 Debian Security Information: DSA-3434 (Google Search) http://www.debian.org/security/2016/dsa-3434 http://www.openwall.com/lists/oss-security/2015/12/09/5 RedHat Security Advisories: RHSA-2016:0855 http://rhn.redhat.com/errata/RHSA-2016-0855.html RedHat Security Advisories: RHSA-2016:2574 http://rhn.redhat.com/errata/RHSA-2016-2574.html RedHat Security Advisories: RHSA-2016:2584 http://rhn.redhat.com/errata/RHSA-2016-2584.html http://www.securitytracker.com/id/1034892 SuSE Security Announcement: SUSE-SU-2016:0911 (Google Search) http://lists.opensuse.org/opensuse-security-announce/2016-03/msg00094.html SuSE Security Announcement: SUSE-SU-2016:1102 (Google Search) http://lists.opensuse.org/opensuse-security-announce/2016-04/msg00045.html SuSE Security Announcement: SUSE-SU-2016:2074 (Google Search) http://lists.opensuse.org/opensuse-security-announce/2016-08/msg00038.html http://www.ubuntu.com/usn/USN-2886-1 http://www.ubuntu.com/usn/USN-2888-1 http://www.ubuntu.com/usn/USN-2890-1 http://www.ubuntu.com/usn/USN-2890-2 http://www.ubuntu.com/usn/USN-2890-3