SB2015070735 - Ubuntu update for linux-lts-vivid
Published: July 7, 2015 Updated: October 31, 2026
Breakdown by Severity
- Low
- Medium
- High
- Critical
Description
This security bulletin contains information about 5 vulnerabilities.
1) Race condition (CVE-ID: CVE-2015-1420)
CWE-ID: CWE-362 - Concurrent Execution using Shared Resource with Improper Synchronization ('Race Condition')
CVSSv4: 5.1 [CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:A/VC:L/VI:N/VA:N/SC:N/SI:N/SA:N]
The vulnerability allows a remote non-authenticated attacker to gain access to sensitive information.
Race condition in the handle_to_path function in fs/fhandle.c in the Linux kernel through 3.19.1 allows local users to bypass intended size restrictions and trigger read operations on additional memory locations by changing the handle_bytes value of a file handle during the execution of this function.
2) Integer overflow (CVE-ID: CVE-2015-4001)
CWE-ID: CWE-190 - Integer overflow
CVSSv4: 8.8 [CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:L/VI:L/VA:H/SC:N/SI:N/SA:N]
The vulnerability allows a remote non-authenticated attacker to read and manipulate data.
The vulnerability exists due to integer overflow error within the oz_hcd_pd_reset() and oz_hcd_get_desc_cnf() functions in drivers/staging/ozwpan/ozhcd.c. A remote non-authenticated attacker can read and manipulate data.
3) Memory corruption (CVE-ID: CVE-2015-4002)
CWE-ID: CWE-119 - Memory corruption
CVSSv4: 8.8 [CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:L/VI:L/VA:H/SC:N/SI:N/SA:N]
The vulnerability allows a remote non-authenticated attacker to read and manipulate data.
The vulnerability exists due to memory corruption error within the oz_usb_rx() function in drivers/staging/ozwpan/ozusbsvc1.c. A remote non-authenticated attacker can read and manipulate data.
4) Division by zero (CVE-ID: CVE-2015-4003)
CWE-ID: CWE-369 - Divide By Zero
CVSSv4: 8.7 [CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N]
The vulnerability allows a remote non-authenticated attacker to perform a denial of service (DoS) attack.
The vulnerability exists due to a division by zero error within the oz_usb_handle_ep_data() function in drivers/staging/ozwpan/ozusbsvc1.c. A remote non-authenticated attacker can perform a denial of service (DoS) attack.
5) Input validation error (CVE-ID: CVE-2015-5706)
CWE-ID: CWE-20 - Improper input validation
CVSSv4: 5.1 [CVSS:4.0/AV:L/AC:L/AT:N/PR:N/UI:N/VC:L/VI:L/VA:L/SC:N/SI:N/SA:N]
The vulnerability allows local users to perform a denial of service (DoS) attack.
The vulnerability exists due to insufficient validation of user-supplied input. A remote attacker can cause a denial of service or possibly have unspecified other impact via O_TMPFILE filesystem operations that leverage a duplicate cleanup operation.
Remediation
Install update from vendor's website.