CVE-2015-5707
MEDIUM 4.6
At a glance
- Source
- NVD
- EPSS
- EPSS 0.51 % · percentile 44 ()
- State
- PUBLISHED
- Published
- Updated
- Assigner
- mitre
- NVD status
- Modified
Description
Integer overflow in the sg_start_req function in drivers/scsi/sg.c in the Linux kernel 2.6.x through 4.x before 4.1 allows local users to cause a denial of service or possibly have unspecified other impact via a large iov_count value in a write request.
Weaknesses (CWE)
- CWE-190 — Integer Overflow or Wraparound
References
- http://www.ubuntu.com/usn/USN-2738-1
- http://lists.opensuse.org/opensuse-security-announce/2015-11/msg00030.html
- http://www.ubuntu.com/usn/USN-2733-1
- http://git.kernel.org/cgit/linux/kernel/git/torvalds/linux.git/commit/?id=fdc81f45e9f57858da6351836507fbcf1b7583ee
- http://lists.opensuse.org/opensuse-security-announce/2015-11/msg00029.html
- http://www.ubuntu.com/usn/USN-2750-1
- http://www.ubuntu.com/usn/USN-2737-1
- https://source.android.com/security/bulletin/2017-07-01
- http://lists.opensuse.org/opensuse-security-announce/2015-09/msg00021.html
- http://www.debian.org/security/2015/dsa-3329
- http://www.securitytracker.com/id/1033521
- https://bugzilla.redhat.com/show_bug.cgi?id=1250030
- https://github.com/torvalds/linux/commit/fdc81f45e9f57858da6351836507fbcf1b7583ee
- http://git.kernel.org/cgit/linux/kernel/git/torvalds/linux.git/commit/?id=451a2886b6bf90e2fb378f7c46c655450fb96e81
- http://www.ubuntu.com/usn/USN-2760-1
- http://lists.opensuse.org/opensuse-security-announce/2015-11/msg00032.html
- http://lists.opensuse.org/opensuse-security-announce/2015-09/msg00004.html
- http://www.ubuntu.com/usn/USN-2759-1
- https://github.com/torvalds/linux/commit/451a2886b6bf90e2fb378f7c46c655450fb96e81
- http://lists.opensuse.org/opensuse-security-announce/2015-11/msg00026.html
- http://lists.opensuse.org/opensuse-security-announce/2015-11/msg00027.html
- http://www.ubuntu.com/usn/USN-2734-1
- http://www.openwall.com/lists/oss-security/2015/08/01/6
- http://lists.opensuse.org/opensuse-security-announce/2015-11/msg00028.html
- http://lists.opensuse.org/opensuse-security-announce/2015-09/msg00018.html
- http://lists.opensuse.org/opensuse-security-announce/2015-11/msg00031.html
- http://www.securityfocus.com/bid/76145
Scores
| Version | Score | Vector | Scored by |
|---|---|---|---|
| CVSS 2.0 | MEDIUM 4.6 | AV:L/AC:L/Au:N/C:P/I:P/A:P | NVD · nvd@nist.gov (Primary) |
European references
- ENISA EUVD · EUVD-2015-5654
- GCVE · GCVE-0-2015-5707
CERT-FR advisories
- CERTFR-2017-AVI-203 — Multiples vulnérabilités dans Google Android (Nexus) · cert.ssi.gouv.fr
- CERTFR-2016-AVI-103 — Multiples vulnérabilités dans le noyau Linux de Suse · cert.ssi.gouv.fr
- CERTFR-2016-AVI-073 — Multiples vulnérabilités dans le noyau Linux de Suse · cert.ssi.gouv.fr
- CERTFR-2015-AVI-417 — Multiples vulnérabilités dans le noyau Linux d'Ubuntu · cert.ssi.gouv.fr
- CERTFR-2015-AVI-372 — Vulnérabilité dans le noyau Linux Ubuntu · cert.ssi.gouv.fr
- CERTFR-2015-AVI-369 — Multiples vulnérabilités dans noyau Linux · cert.ssi.gouv.fr
- CERTFR-2015-AVI-331 — Multiples vulnérabilités dans le noyau Linux Debian · cert.ssi.gouv.fr
Affected configurations (NVD CPE)
cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*≥ 2.6.0 < 4.1.0cpe:2.3:o:canonical:ubuntu_linux:12.04:*:*:*:lts:*:*:*cpe:2.3:o:canonical:ubuntu_linux:14.04:*:*:*:lts:*:*:*cpe:2.3:o:canonical:ubuntu_linux:15.04:*:*:*:*:*:*:*cpe:2.3:o:debian:debian_linux:7.0:*:*:*:*:*:*:*cpe:2.3:o:debian:debian_linux:8.0:*:*:*:*:*:*:*cpe:2.3:o:suse:suse_linux_enterprise_desktop:11:sp3:*:*:*:*:*:*cpe:2.3:o:suse:suse_linux_enterprise_server:11:sp2:*:*:ltss:*:*:*cpe:2.3:o:suse:suse_linux_enterprise_server:11:sp3:*:*:*:*:*:*cpe:2.3:o:suse:suse_linux_enterprise_server:11:sp3:*:*:*:vmware:*:*
Affected products
| Product | Versions |
|---|---|
| affected n/a |
Sources
| Source | Licence |
|---|---|
| CVE List (CVEProject cvelistV5) | CVE Program Terms of Use |
| EPSS (FIRST.org) | FIRST — attribution requested |
| ENISA EUVD | ENISA — reproduction authorised, source acknowledged |
| CERT-FR (ANSSI) | Licence Ouverte / Etalab 2.0 |
| NVD (NIST) via fkie-cad/nvd-json-data-feeds | Public domain — this product uses data from the NVD API but is not endorsed or certified by the NVD |