7.1.0

DATE	CVE	VULNERABILITY TITLE	RISK
2016-08-06	CVE-2016-5696	Information Exposure vulnerability in multiple products net/ipv4/tcp_input.c in the Linux kernel before 4.7 does not properly determine the rate of challenge ACK segments, which makes it easier for remote attackers to hijack TCP sessions via a blind in-window attack. network high complexity google oracle linux CWE-200	4.8
2016-05-05	CVE-2016-2059	Improper Privilege Management vulnerability in multiple products The msm_ipc_router_bind_control_port function in net/ipc_router/ipc_router_core.c in the IPC router kernel module for the Linux kernel 3.x, as used in Qualcomm Innovation Center (QuIC) Android contributions for MSM devices and other products, does not verify that a port is a client port, which allows attackers to gain privileges or cause a denial of service (race condition and list corruption) by making many BIND_CONTROL_PORT ioctl calls. local high complexity linux google CWE-269	7.0