drivers/staging/ozwpan/ozusbsvc1.c in the OZWPAN driver in the Linux kernel through 4.0.5 does not ensure that certain length values are sufficiently large, which allows remote attackers to cause a denial of service (system crash or large loop) or possibly execute arbitrary code via a crafted packet, related to the (1) oz_usb_rx and (2) oz_usb_handle_ep_data functions.
References
Link | Resource |
---|---|
http://git.kernel.org/cgit/linux/kernel/git/torvalds/linux.git/commit/?id=9a59029bc218b48eff8b5d4dde5662fd79d3e1a8 | Vendor Advisory |
http://git.kernel.org/cgit/linux/kernel/git/torvalds/linux.git/commit/?id=d114b9fe78c8d6fc6e70808c2092aa307c36dc8e | Vendor Advisory |
http://lists.opensuse.org/opensuse-security-announce/2015-08/msg00011.html | Mailing List Third Party Advisory |
http://openwall.com/lists/oss-security/2015/06/05/7 | Mailing List |
http://www.securityfocus.com/bid/74668 | Third Party Advisory VDB Entry |
http://www.ubuntu.com/usn/USN-2665-1 | Third Party Advisory |
http://www.ubuntu.com/usn/USN-2667-1 | Third Party Advisory |
https://github.com/torvalds/linux/commit/9a59029bc218b48eff8b5d4dde5662fd79d3e1a8 | Vendor Advisory |
https://github.com/torvalds/linux/commit/d114b9fe78c8d6fc6e70808c2092aa307c36dc8e | Vendor Advisory |
Configurations
Configuration 1 (hide)
|
Configuration 2 (hide)
|
Configuration 3 (hide)
|
History
No history.
Information
Published : 2015-06-07 23:59
Updated : 2024-02-28 15:21
NVD link : CVE-2015-4002
Mitre link : CVE-2015-4002
CVE.ORG link : CVE-2015-4002
JSON object : View
Products Affected
linux
- linux_kernel
opensuse
- opensuse
canonical
- ubuntu_linux
CWE
CWE-119
Improper Restriction of Operations within the Bounds of a Memory Buffer