---
cve: "CVE-2016-10200"
severity: "LOW"
cvss: 3.1
epss: "30%"
vendor: "n/a"
kev: false
exploited: false
published: "2017-03-07 21:59:00"
tags: [cve, security, low]
source: tsecurity.de CVE-Dossier
exported: "2026-09-07T09:55:27+02:00"
---

# CVE-2016-10200

> 3.1 LOW · 🧪 PoC

## Beschreibung

Race condition in the L2TPv3 IP Encapsulation feature in the Linux kernel before 4.8.14 allows local users to gain privileges or cause a denial of service (use-after-free) by making multiple bind system calls without properly ascertaining whether a socket has the SOCK_ZAPPED status, related to net/l2tp/l2tp_ip.c and net/l2tp/l2tp_ip6.c.

## Referenzen

- <https://github.com/torvalds/linux/commit/32c231164b762dddefa13af5a0101032c70b50ef>
- <http://www.securitytracker.com/id/1037965>
- <https://access.redhat.com/errata/RHSA-2017:2437>
- <http://www.securitytracker.com/id/1037968>
- <https://access.redhat.com/errata/RHSA-2017:2444>
- <http://git.kernel.org/cgit/linux/kernel/git/torvalds/linux.git/commit/?id=32c231164b762dddefa13af5a0101032c70b50ef>
- <http://source.android.com/security/bulletin/2017-03-01.html>
- <http://www.kernel.org/pub/linux/kernel/v4.x/ChangeLog-4.8.14>
- <http://www.securityfocus.com/bid/101783>
- <https://access.redhat.com/errata/RHSA-2017:2077>
- <https://access.redhat.com/errata/RHSA-2017:1842>

---
_Exportiert aus dem [tsecurity.de CVE-Dossier](https://tsecurity.de/cve?cve=CVE-2016-10200) · Datenquellen: EUVD (ENISA), NVD, OSV, CISA KEV, FIRST EPSS, Exploit-DB, BSI BITS_