CVEvulnerability
CVE-2015-4004
8.5 HIGH
Official page ↗
- Status
- Modified
- Published
- 2015-06-07
- Last modified
- 2026-06-17
- Assigner
- [email protected]
- CVSS 2.0 ([email protected])
- 8.5 HIGH — AV:N/AC:L/Au:N/C:P/I:N/A:C
- Weaknesses
- CWE-119
Description
The OZWPAN driver in the Linux kernel through 4.0.5 relies on an untrusted length field during packet parsing, which allows remote attackers to obtain sensitive information from kernel memory or cause a denial of service (out-of-bounds read and system crash) via a crafted packet.
Affected configurations
• canonical ubuntu linux 12.04
• canonical ubuntu linux 14.04
• canonical ubuntu linux 15.10
• linux linux kernel (>= 3.4 < 4.3)
Related
Weakness · CWE (1)
- CWE-119 Improper Restriction of Operations within the Bounds of a Memory Buffer weakness
References
- http://openwall.com/lists/oss-security/2015/06/05/7 Mailing List, Third Party Advisory
- http://www.securityfocus.com/bid/74669 Third Party Advisory, VDB Entry
- http://www.ubuntu.com/usn/USN-2989-1 Third Party Advisory
- http://www.ubuntu.com/usn/USN-2998-1 Third Party Advisory
- http://www.ubuntu.com/usn/USN-3000-1 Third Party Advisory
- http://www.ubuntu.com/usn/USN-3001-1 Third Party Advisory
- http://www.ubuntu.com/usn/USN-3002-1 Third Party Advisory
- http://www.ubuntu.com/usn/USN-3003-1 Third Party Advisory
- http://www.ubuntu.com/usn/USN-3004-1 Third Party Advisory
- https://lkml.org/lkml/2015/5/13/739 Exploit, Vendor Advisory
- http://openwall.com/lists/oss-security/2015/06/05/7 Mailing List, Third Party Advisory
- http://www.securityfocus.com/bid/74669 Third Party Advisory, VDB Entry
- http://www.ubuntu.com/usn/USN-2989-1 Third Party Advisory
- http://www.ubuntu.com/usn/USN-2998-1 Third Party Advisory
- http://www.ubuntu.com/usn/USN-3000-1 Third Party Advisory
- http://www.ubuntu.com/usn/USN-3001-1 Third Party Advisory
- http://www.ubuntu.com/usn/USN-3002-1 Third Party Advisory
- http://www.ubuntu.com/usn/USN-3003-1 Third Party Advisory
- http://www.ubuntu.com/usn/USN-3004-1 Third Party Advisory
- https://lkml.org/lkml/2015/5/13/739 Exploit, Vendor Advisory