| Vulnerability Name: | CVE-2015-4001 (CCN-103751) | ||||||||||||||||||||||||
| Assigned: | 2015-05-27 | ||||||||||||||||||||||||
| Published: | 2015-05-27 | ||||||||||||||||||||||||
| Updated: | 2016-12-28 | ||||||||||||||||||||||||
| Summary: | Integer signedness error in the oz_hcd_get_desc_cnf function in drivers/staging/ozwpan/ozhcd.c in the OZWPAN driver in the Linux kernel through 4.0.5 allows remote attackers to cause a denial of service (system crash) or possibly execute arbitrary code via a crafted packet. | ||||||||||||||||||||||||
| CVSS v3 Severity: | 8.6 High (CCN CVSS v3.1 Vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:H)
| ||||||||||||||||||||||||
| CVSS v2 Severity: | 9.0 High (CVSS v2 Vector: AV:N/AC:L/Au:N/C:P/I:P/A:C) 6.6 Medium (Temporal CVSS v2 Vector: AV:N/AC:L/Au:N/C:P/I:P/A:C/E:U/RL:OF/RC:C)
6.6 Medium (CCN Temporal CVSS v2 Vector: AV:N/AC:L/Au:N/C:P/I:P/A:C/E:U/RL:OF/RC:C)
| ||||||||||||||||||||||||
| Vulnerability Type: | CWE-189 | ||||||||||||||||||||||||
| Vulnerability Consequences: | Gain Access | ||||||||||||||||||||||||
| References: | Source: MITRE Type: CNA CVE-2015-4001 Source: CCN Type: Linux Kernel GIT Repository ozwpan: Use unsigned ints to prevent heap overflow Source: CONFIRM Type: UNKNOWN http://git.kernel.org/cgit/linux/kernel/git/torvalds/linux.git/commit/?id=b1bb5b49373b61bf9d2c73a4d30058ba6f069e4c Source: SUSE Type: UNKNOWN openSUSE-SU-2015:1382 Source: MLIST Type: UNKNOWN [oss-security] 20150605 Re: CVE Request: Linux Kernel Ozwpan Driver - Remote packet-of-death vulnerabilities Source: CCN Type: oss-security Mailing List, Wed, 27 May 2015 16:45:15 +0200 CVE Request: Linux Kernel Ozwpan Driver - Remote packet-of-death vulnerabilities Source: CCN Type: oss-security Mailing List, Fri, 5 Jun 2015 17:29:22 -0400 (EDT) Re: CVE Request: Linux Kernel Ozwpan Driver - Remote packet-of-death vulnerabilities Source: BID Type: UNKNOWN 74672 Source: CCN Type: BID-74672 Linux Kernel 'ozwpan' Driver Multiple Heap Buffer Overflow Vulnerabilities Source: UBUNTU Type: UNKNOWN USN-2665-1 Source: UBUNTU Type: UNKNOWN USN-2667-1 Source: XF Type: UNKNOWN linux-kernel-cve20154001-code-exec(103751) Source: CONFIRM Type: Vendor Advisory https://github.com/torvalds/linux/commit/b1bb5b49373b61bf9d2c73a4d30058ba6f069e4c Source: CCN Type: WhiteSource Vulnerability Database CVE-2015-4001 | ||||||||||||||||||||||||
| Vulnerable Configuration: | Configuration 1: Configuration CCN 1:  Denotes that component is vulnerable | ||||||||||||||||||||||||
| Oval Definitions | |||||||||||||||||||||||||
| |||||||||||||||||||||||||
| BACK | |||||||||||||||||||||||||