SB2015060804 - Memory corruption in Linux kernel

CSH
CYBERSECURITY HELP
Sign In REGISTER

Main Vulnerability Database SB2015060804

SB2015060804 - Memory corruption in Linux kernel

Published: June 8, 2015

Security Bulletin ID SB2015060804
Severity
Low
Patch available
YES
Number of vulnerabilities 1
Exploitation vector Remote access
Highest impact Denial of service

Breakdown by Severity

Low 100%
  • Low
  • Medium
  • High
  • Critical

Description

This security bulletin contains information about 1 security vulnerability.


1) Memory corruption (CVE-ID: CVE-2015-4004)

The vulnerability allows a remote non-authenticated attacker to access sensitive information or perform a denial of service (DoS) attack.

The OZWPAN driver in the Linux kernel through 4.0.5 relies on an untrusted length field during packet parsing, which allows remote attackers to obtain sensitive information from kernel memory or cause a denial of service (out-of-bounds read and system crash) via a crafted packet.


Remediation

Install update from vendor's website.

References