CVE-2015-8812

CRITICAL

9.8

Descripcion

drivers/infiniband/hw/cxgb3/iwch_cm.c in the Linux kernel before 4.5 does not properly identify error conditions, which allows remote attackers to execute arbitrary code or cause a denial of service (use-after-free) via crafted packets.

Detalles CVE

Puntuacion CVSS v3.19.8

SeveridadCRITICAL

Vector CVSSCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

Vector de ataqueNETWORK

ComplejidadLOW

Privilegios requeridosNONE

Interaccion usuarioNONE

Publicado4/27/2016

Ultima modificacion4/12/2025

Fuentenvd

Avistamientos honeypot0

Productos afectados

canonical:ubuntu_linuxlinux:linux_kernelnovell:suse_linux_enterprise_real_time_extension

Referencias

http://git.kernel.org/cgit/linux/kernel/git/torvalds/linux.git/commit/?id=67f1aee6f45059fd6b0f5b0ecb2c97ad0451f6b3(cve@mitre.org)

http://lists.opensuse.org/opensuse-security-announce/2016-03/msg00094.html(cve@mitre.org)

http://lists.opensuse.org/opensuse-security-announce/2016-04/msg00015.html(cve@mitre.org)

http://lists.opensuse.org/opensuse-security-announce/2016-04/msg00019.html(cve@mitre.org)

http://lists.opensuse.org/opensuse-security-announce/2016-04/msg00025.html(cve@mitre.org)

http://lists.opensuse.org/opensuse-security-announce/2016-04/msg00026.html(cve@mitre.org)

http://lists.opensuse.org/opensuse-security-announce/2016-04/msg00027.html(cve@mitre.org)

http://lists.opensuse.org/opensuse-security-announce/2016-04/msg00028.html(cve@mitre.org)

http://lists.opensuse.org/opensuse-security-announce/2016-04/msg00029.html(cve@mitre.org)

http://lists.opensuse.org/opensuse-security-announce/2016-04/msg00030.html(cve@mitre.org)

http://lists.opensuse.org/opensuse-security-announce/2016-04/msg00031.html(cve@mitre.org)

http://lists.opensuse.org/opensuse-security-announce/2016-04/msg00032.html(cve@mitre.org)

http://lists.opensuse.org/opensuse-security-announce/2016-04/msg00033.html(cve@mitre.org)

http://lists.opensuse.org/opensuse-security-announce/2016-04/msg00034.html(cve@mitre.org)

http://lists.opensuse.org/opensuse-security-announce/2016-04/msg00036.html(cve@mitre.org)

http://lists.opensuse.org/opensuse-security-announce/2016-04/msg00037.html(cve@mitre.org)

http://lists.opensuse.org/opensuse-security-announce/2016-04/msg00045.html(cve@mitre.org)

http://lists.opensuse.org/opensuse-security-announce/2016-07/msg00005.html(cve@mitre.org)

http://lists.opensuse.org/opensuse-security-announce/2016-08/msg00038.html(cve@mitre.org)

http://rhn.redhat.com/errata/RHSA-2016-2574.html(cve@mitre.org)

http://rhn.redhat.com/errata/RHSA-2016-2584.html(cve@mitre.org)

http://www.debian.org/security/2016/dsa-3503(cve@mitre.org)

http://www.openwall.com/lists/oss-security/2016/02/11/1(cve@mitre.org)

http://www.securityfocus.com/bid/83218(cve@mitre.org)

http://www.ubuntu.com/usn/USN-2946-1(cve@mitre.org)

http://www.ubuntu.com/usn/USN-2946-2(cve@mitre.org)

http://www.ubuntu.com/usn/USN-2947-1(cve@mitre.org)

http://www.ubuntu.com/usn/USN-2947-2(cve@mitre.org)

http://www.ubuntu.com/usn/USN-2947-3(cve@mitre.org)

http://www.ubuntu.com/usn/USN-2948-1(cve@mitre.org)

http://www.ubuntu.com/usn/USN-2948-2(cve@mitre.org)

http://www.ubuntu.com/usn/USN-2949-1(cve@mitre.org)

http://www.ubuntu.com/usn/USN-2967-1(cve@mitre.org)

http://www.ubuntu.com/usn/USN-2967-2(cve@mitre.org)

https://bugzilla.redhat.com/show_bug.cgi?id=1303532(cve@mitre.org)

https://github.com/torvalds/linux/commit/67f1aee6f45059fd6b0f5b0ecb2c97ad0451f6b3(cve@mitre.org)

http://git.kernel.org/cgit/linux/kernel/git/torvalds/linux.git/commit/?id=67f1aee6f45059fd6b0f5b0ecb2c97ad0451f6b3(af854a3a-2127-422b-91ae-364da2661108)

http://lists.opensuse.org/opensuse-security-announce/2016-03/msg00094.html(af854a3a-2127-422b-91ae-364da2661108)

http://lists.opensuse.org/opensuse-security-announce/2016-04/msg00015.html(af854a3a-2127-422b-91ae-364da2661108)

http://lists.opensuse.org/opensuse-security-announce/2016-04/msg00019.html(af854a3a-2127-422b-91ae-364da2661108)

http://lists.opensuse.org/opensuse-security-announce/2016-04/msg00025.html(af854a3a-2127-422b-91ae-364da2661108)

http://lists.opensuse.org/opensuse-security-announce/2016-04/msg00026.html(af854a3a-2127-422b-91ae-364da2661108)

http://lists.opensuse.org/opensuse-security-announce/2016-04/msg00027.html(af854a3a-2127-422b-91ae-364da2661108)

http://lists.opensuse.org/opensuse-security-announce/2016-04/msg00028.html(af854a3a-2127-422b-91ae-364da2661108)

http://lists.opensuse.org/opensuse-security-announce/2016-04/msg00029.html(af854a3a-2127-422b-91ae-364da2661108)

http://lists.opensuse.org/opensuse-security-announce/2016-04/msg00030.html(af854a3a-2127-422b-91ae-364da2661108)

http://lists.opensuse.org/opensuse-security-announce/2016-04/msg00031.html(af854a3a-2127-422b-91ae-364da2661108)

http://lists.opensuse.org/opensuse-security-announce/2016-04/msg00032.html(af854a3a-2127-422b-91ae-364da2661108)

http://lists.opensuse.org/opensuse-security-announce/2016-04/msg00033.html(af854a3a-2127-422b-91ae-364da2661108)

http://lists.opensuse.org/opensuse-security-announce/2016-04/msg00034.html(af854a3a-2127-422b-91ae-364da2661108)

http://lists.opensuse.org/opensuse-security-announce/2016-04/msg00036.html(af854a3a-2127-422b-91ae-364da2661108)

http://lists.opensuse.org/opensuse-security-announce/2016-04/msg00037.html(af854a3a-2127-422b-91ae-364da2661108)

http://lists.opensuse.org/opensuse-security-announce/2016-04/msg00045.html(af854a3a-2127-422b-91ae-364da2661108)

http://lists.opensuse.org/opensuse-security-announce/2016-07/msg00005.html(af854a3a-2127-422b-91ae-364da2661108)

http://lists.opensuse.org/opensuse-security-announce/2016-08/msg00038.html(af854a3a-2127-422b-91ae-364da2661108)

http://rhn.redhat.com/errata/RHSA-2016-2574.html(af854a3a-2127-422b-91ae-364da2661108)

http://rhn.redhat.com/errata/RHSA-2016-2584.html(af854a3a-2127-422b-91ae-364da2661108)

http://www.debian.org/security/2016/dsa-3503(af854a3a-2127-422b-91ae-364da2661108)

http://www.openwall.com/lists/oss-security/2016/02/11/1(af854a3a-2127-422b-91ae-364da2661108)

http://www.securityfocus.com/bid/83218(af854a3a-2127-422b-91ae-364da2661108)

http://www.ubuntu.com/usn/USN-2946-1(af854a3a-2127-422b-91ae-364da2661108)

http://www.ubuntu.com/usn/USN-2946-2(af854a3a-2127-422b-91ae-364da2661108)

http://www.ubuntu.com/usn/USN-2947-1(af854a3a-2127-422b-91ae-364da2661108)

http://www.ubuntu.com/usn/USN-2947-2(af854a3a-2127-422b-91ae-364da2661108)

http://www.ubuntu.com/usn/USN-2947-3(af854a3a-2127-422b-91ae-364da2661108)

http://www.ubuntu.com/usn/USN-2948-1(af854a3a-2127-422b-91ae-364da2661108)

http://www.ubuntu.com/usn/USN-2948-2(af854a3a-2127-422b-91ae-364da2661108)

http://www.ubuntu.com/usn/USN-2949-1(af854a3a-2127-422b-91ae-364da2661108)

http://www.ubuntu.com/usn/USN-2967-1(af854a3a-2127-422b-91ae-364da2661108)

http://www.ubuntu.com/usn/USN-2967-2(af854a3a-2127-422b-91ae-364da2661108)

https://bugzilla.redhat.com/show_bug.cgi?id=1303532(af854a3a-2127-422b-91ae-364da2661108)

https://github.com/torvalds/linux/commit/67f1aee6f45059fd6b0f5b0ecb2c97ad0451f6b3(af854a3a-2127-422b-91ae-364da2661108)

Correlaciones IOC

Sin correlaciones registradas

This product uses data from the NVD API but is not endorsed or certified by the NVD.