CVE-2015-7515

Опубликовано: 27 апр. 2016

Источник: nvd

CVSS3: 4.6

CVSS2: 4.9

EPSS Низкий

Описание

The aiptek_probe function in drivers/input/tablet/aiptek.c in the Linux kernel before 4.4 allows physically proximate attackers to cause a denial of service (NULL pointer dereference and system crash) via a crafted USB device that lacks endpoints.

Ссылки

http://git.kernel.org/cgit/linux/kernel/git/torvalds/linux.git/commit/?id=8e20cf2bce122ce9262d6034ee5d5b76fbb92f96
Vendor Advisory
http://lists.opensuse.org/opensuse-security-announce/2016-03/msg00094.html
Third Party Advisory
http://lists.opensuse.org/opensuse-security-announce/2016-04/msg00045.html
Third Party Advisory
http://lists.opensuse.org/opensuse-security-announce/2016-08/msg00038.html
Third Party Advisory
http://www.debian.org/security/2016/dsa-3607
Third Party Advisory
http://www.securityfocus.com/bid/84288
Third Party Advisory
VDB Entry
http://www.ubuntu.com/usn/USN-2967-1
Third Party Advisory
http://www.ubuntu.com/usn/USN-2967-2
Third Party Advisory
http://www.ubuntu.com/usn/USN-2968-1
Third Party Advisory
http://www.ubuntu.com/usn/USN-2968-2
Third Party Advisory
http://www.ubuntu.com/usn/USN-2969-1
Third Party Advisory
http://www.ubuntu.com/usn/USN-2970-1
Third Party Advisory
http://www.ubuntu.com/usn/USN-2971-1
Third Party Advisory
http://www.ubuntu.com/usn/USN-2971-2
Third Party Advisory
http://www.ubuntu.com/usn/USN-2971-3
Third Party Advisory
https://bugzilla.redhat.com/show_bug.cgi?id=1285326
Issue Tracking
https://github.com/torvalds/linux/commit/8e20cf2bce122ce9262d6034ee5d5b76fbb92f96
Vendor Advisory
https://security-tracker.debian.org/tracker/CVE-2015-7515
Third Party Advisory
https://www.exploit-db.com/exploits/39544/
Third Party Advisory
VDB Entry
http://git.kernel.org/cgit/linux/kernel/git/torvalds/linux.git/commit/?id=8e20cf2bce122ce9262d6034ee5d5b76fbb92f96
Vendor Advisory

Уязвимые конфигурации

Конфигурация 1

Одно из

cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*

Версия до 4.4 (исключая)

cpe:2.3:o:linux:linux_kernel:4.4:rc1:*:*:*:*:*:*

cpe:2.3:o:linux:linux_kernel:4.4:rc2:*:*:*:*:*:*

cpe:2.3:o:linux:linux_kernel:4.4:rc3:*:*:*:*:*:*

cpe:2.3:o:linux:linux_kernel:4.4:rc4:*:*:*:*:*:*

cpe:2.3:o:linux:linux_kernel:4.4:rc5:*:*:*:*:*:*

cpe:2.3:o:linux:linux_kernel:4.4:rc6:*:*:*:*:*:*

cpe:2.3:o:linux:linux_kernel:4.4:rc7:*:*:*:*:*:*

cpe:2.3:o:linux:linux_kernel:4.4:rc8:*:*:*:*:*:*

EPSS

Процентиль: 76%

0.01011

Низкий

4.6 Medium

CVSS3

4.9 Medium

CVSS2

Дефекты

CWE-476

Связанные уязвимости

CVE-2015-7515

CVSS3: 4.6

ubuntu

больше 9 лет назад

CVE-2015-7515

redhat

больше 9 лет назад

CVE-2015-7515

CVSS3: 4.6

debian

больше 9 лет назад

The aiptek_probe function in drivers/input/tablet/aiptek.c in the Linu ...

GHSA-2cqh-7j4m-cjvm

CVSS3: 4.6

github

больше 3 лет назад

SUSE-SU-2016:1102-1

suse-cvrf

больше 9 лет назад

Security update for the Linux Kernel

EPSS

Процентиль: 76%

0.01011

Низкий

4.6 Medium

CVSS3

4.9 Medium

CVSS2

Дефекты

CWE-476