Vulnerability-Lookup

CVE-2015-7799 (GCVE-0-2015-7799)

Vulnerability from cvelistv5 – Published: 2015-10-19 10:00 – Updated: 2024-08-06 07:59

Summary

The slhc_init function in drivers/net/slip/slhc.c in the Linux kernel through 4.2.3 does not ensure that certain slot numbers are valid, which allows local users to cause a denial of service (NULL pointer dereference and system crash) via a crafted PPPIOCSMAXCID ioctl call.

Severity ?

No CVSS data available.

CWE

Assigner

mitre

References

URL

Tags

	http://lists.opensuse.org/opensuse-security-annou…	vendor-advisoryx_refsource_SUSE
	http://www.ubuntu.com/usn/USN-2841-2	vendor-advisoryx_refsource_UBUNTU
	http://www.securityfocus.com/bid/77033	vdb-entryx_refsource_BID
	http://lists.opensuse.org/opensuse-security-annou…	vendor-advisoryx_refsource_SUSE
	http://www.securitytracker.com/id/1033809	vdb-entryx_refsource_SECTRACK
	https://code.google.com/p/android/issues/detail?i…	x_refsource_MISC
	http://www.ubuntu.com/usn/USN-2886-1	vendor-advisoryx_refsource_UBUNTU
	http://www.ubuntu.com/usn/USN-2843-1	vendor-advisoryx_refsource_UBUNTU
	http://lists.opensuse.org/opensuse-security-annou…	vendor-advisoryx_refsource_SUSE
	http://www.ubuntu.com/usn/USN-2844-1	vendor-advisoryx_refsource_UBUNTU
	http://lists.opensuse.org/opensuse-updates/2015-1…	vendor-advisoryx_refsource_SUSE
	http://www.ubuntu.com/usn/USN-2842-2	vendor-advisoryx_refsource_UBUNTU
	http://www.ubuntu.com/usn/USN-2843-2	vendor-advisoryx_refsource_UBUNTU
	http://lists.opensuse.org/opensuse-security-annou…	vendor-advisoryx_refsource_SUSE
	http://www.ubuntu.com/usn/USN-2842-1	vendor-advisoryx_refsource_UBUNTU
	http://www.openwall.com/lists/oss-security/2015/10/10/3	mailing-listx_refsource_MLIST
	http://lists.opensuse.org/opensuse-security-annou…	vendor-advisoryx_refsource_SUSE
	https://bugzilla.redhat.com/show_bug.cgi?id=1271134	x_refsource_CONFIRM
	http://www.ubuntu.com/usn/USN-2841-1	vendor-advisoryx_refsource_UBUNTU
	http://www.debian.org/security/2015/dsa-3426	vendor-advisoryx_refsource_DEBIAN
	http://www.ubuntu.com/usn/USN-2843-3	vendor-advisoryx_refsource_UBUNTU
	http://lists.opensuse.org/opensuse-security-annou…	vendor-advisoryx_refsource_SUSE

Show details on NVD website

JSON

To clipboard

{
  "containers": {
    "adp": [
      {
        "providerMetadata": {
          "dateUpdated": "2024-08-06T07:59:00.391Z",
          "orgId": "af854a3a-2127-422b-91ae-364da2661108",
          "shortName": "CVE"
        },
        "references": [
          {
            "name": "SUSE-SU-2015:2292",
            "tags": [
              "vendor-advisory",
              "x_refsource_SUSE",
              "x_transferred"
            ],
            "url": "http://lists.opensuse.org/opensuse-security-announce/2015-12/msg00018.html"
          },
          {
            "name": "USN-2841-2",
            "tags": [
              "vendor-advisory",
              "x_refsource_UBUNTU",
              "x_transferred"
            ],
            "url": "http://www.ubuntu.com/usn/USN-2841-2"
          },
          {
            "name": "77033",
            "tags": [
              "vdb-entry",
              "x_refsource_BID",
              "x_transferred"
            ],
            "url": "http://www.securityfocus.com/bid/77033"
          },
          {
            "name": "SUSE-SU-2015:2350",
            "tags": [
              "vendor-advisory",
              "x_refsource_SUSE",
              "x_transferred"
            ],
            "url": "http://lists.opensuse.org/opensuse-security-announce/2015-12/msg00031.html"
          },
          {
            "name": "1033809",
            "tags": [
              "vdb-entry",
              "x_refsource_SECTRACK",
              "x_transferred"
            ],
            "url": "http://www.securitytracker.com/id/1033809"
          },
          {
            "tags": [
              "x_refsource_MISC",
              "x_transferred"
            ],
            "url": "https://code.google.com/p/android/issues/detail?id=187973"
          },
          {
            "name": "USN-2886-1",
            "tags": [
              "vendor-advisory",
              "x_refsource_UBUNTU",
              "x_transferred"
            ],
            "url": "http://www.ubuntu.com/usn/USN-2886-1"
          },
          {
            "name": "USN-2843-1",
            "tags": [
              "vendor-advisory",
              "x_refsource_UBUNTU",
              "x_transferred"
            ],
            "url": "http://www.ubuntu.com/usn/USN-2843-1"
          },
          {
            "name": "SUSE-SU-2015:2194",
            "tags": [
              "vendor-advisory",
              "x_refsource_SUSE",
              "x_transferred"
            ],
            "url": "http://lists.opensuse.org/opensuse-security-announce/2015-12/msg00005.html"
          },
          {
            "name": "USN-2844-1",
            "tags": [
              "vendor-advisory",
              "x_refsource_UBUNTU",
              "x_transferred"
            ],
            "url": "http://www.ubuntu.com/usn/USN-2844-1"
          },
          {
            "name": "openSUSE-SU-2015:2232",
            "tags": [
              "vendor-advisory",
              "x_refsource_SUSE",
              "x_transferred"
            ],
            "url": "http://lists.opensuse.org/opensuse-updates/2015-12/msg00039.html"
          },
          {
            "name": "USN-2842-2",
            "tags": [
              "vendor-advisory",
              "x_refsource_UBUNTU",
              "x_transferred"
            ],
            "url": "http://www.ubuntu.com/usn/USN-2842-2"
          },
          {
            "name": "USN-2843-2",
            "tags": [
              "vendor-advisory",
              "x_refsource_UBUNTU",
              "x_transferred"
            ],
            "url": "http://www.ubuntu.com/usn/USN-2843-2"
          },
          {
            "name": "SUSE-SU-2015:2339",
            "tags": [
              "vendor-advisory",
              "x_refsource_SUSE",
              "x_transferred"
            ],
            "url": "http://lists.opensuse.org/opensuse-security-announce/2015-12/msg00026.html"
          },
          {
            "name": "USN-2842-1",
            "tags": [
              "vendor-advisory",
              "x_refsource_UBUNTU",
              "x_transferred"
            ],
            "url": "http://www.ubuntu.com/usn/USN-2842-1"
          },
          {
            "name": "[oss-security] 20151010 Re: CVE request - Android OS - Using the PPP character device driver caused the system to restart - Linux kernel",
            "tags": [
              "mailing-list",
              "x_refsource_MLIST",
              "x_transferred"
            ],
            "url": "http://www.openwall.com/lists/oss-security/2015/10/10/3"
          },
          {
            "name": "SUSE-SU-2016:2074",
            "tags": [
              "vendor-advisory",
              "x_refsource_SUSE",
              "x_transferred"
            ],
            "url": "http://lists.opensuse.org/opensuse-security-announce/2016-08/msg00038.html"
          },
          {
            "tags": [
              "x_refsource_CONFIRM",
              "x_transferred"
            ],
            "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1271134"
          },
          {
            "name": "USN-2841-1",
            "tags": [
              "vendor-advisory",
              "x_refsource_UBUNTU",
              "x_transferred"
            ],
            "url": "http://www.ubuntu.com/usn/USN-2841-1"
          },
          {
            "name": "DSA-3426",
            "tags": [
              "vendor-advisory",
              "x_refsource_DEBIAN",
              "x_transferred"
            ],
            "url": "http://www.debian.org/security/2015/dsa-3426"
          },
          {
            "name": "USN-2843-3",
            "tags": [
              "vendor-advisory",
              "x_refsource_UBUNTU",
              "x_transferred"
            ],
            "url": "http://www.ubuntu.com/usn/USN-2843-3"
          },
          {
            "name": "openSUSE-SU-2016:1008",
            "tags": [
              "vendor-advisory",
              "x_refsource_SUSE",
              "x_transferred"
            ],
            "url": "http://lists.opensuse.org/opensuse-security-announce/2016-04/msg00015.html"
          }
        ],
        "title": "CVE Program Container"
      }
    ],
    "cna": {
      "affected": [
        {
          "product": "n/a",
          "vendor": "n/a",
          "versions": [
            {
              "status": "affected",
              "version": "n/a"
            }
          ]
        }
      ],
      "datePublic": "2015-10-09T00:00:00.000Z",
      "descriptions": [
        {
          "lang": "en",
          "value": "The slhc_init function in drivers/net/slip/slhc.c in the Linux kernel through 4.2.3 does not ensure that certain slot numbers are valid, which allows local users to cause a denial of service (NULL pointer dereference and system crash) via a crafted PPPIOCSMAXCID ioctl call."
        }
      ],
      "problemTypes": [
        {
          "descriptions": [
            {
              "description": "n/a",
              "lang": "en",
              "type": "text"
            }
          ]
        }
      ],
      "providerMetadata": {
        "dateUpdated": "2017-03-23T19:57:01.000Z",
        "orgId": "8254265b-2729-46b6-b9e3-3dfca2d5bfca",
        "shortName": "mitre"
      },
      "references": [
        {
          "name": "SUSE-SU-2015:2292",
          "tags": [
            "vendor-advisory",
            "x_refsource_SUSE"
          ],
          "url": "http://lists.opensuse.org/opensuse-security-announce/2015-12/msg00018.html"
        },
        {
          "name": "USN-2841-2",
          "tags": [
            "vendor-advisory",
            "x_refsource_UBUNTU"
          ],
          "url": "http://www.ubuntu.com/usn/USN-2841-2"
        },
        {
          "name": "77033",
          "tags": [
            "vdb-entry",
            "x_refsource_BID"
          ],
          "url": "http://www.securityfocus.com/bid/77033"
        },
        {
          "name": "SUSE-SU-2015:2350",
          "tags": [
            "vendor-advisory",
            "x_refsource_SUSE"
          ],
          "url": "http://lists.opensuse.org/opensuse-security-announce/2015-12/msg00031.html"
        },
        {
          "name": "1033809",
          "tags": [
            "vdb-entry",
            "x_refsource_SECTRACK"
          ],
          "url": "http://www.securitytracker.com/id/1033809"
        },
        {
          "tags": [
            "x_refsource_MISC"
          ],
          "url": "https://code.google.com/p/android/issues/detail?id=187973"
        },
        {
          "name": "USN-2886-1",
          "tags": [
            "vendor-advisory",
            "x_refsource_UBUNTU"
          ],
          "url": "http://www.ubuntu.com/usn/USN-2886-1"
        },
        {
          "name": "USN-2843-1",
          "tags": [
            "vendor-advisory",
            "x_refsource_UBUNTU"
          ],
          "url": "http://www.ubuntu.com/usn/USN-2843-1"
        },
        {
          "name": "SUSE-SU-2015:2194",
          "tags": [
            "vendor-advisory",
            "x_refsource_SUSE"
          ],
          "url": "http://lists.opensuse.org/opensuse-security-announce/2015-12/msg00005.html"
        },
        {
          "name": "USN-2844-1",
          "tags": [
            "vendor-advisory",
            "x_refsource_UBUNTU"
          ],
          "url": "http://www.ubuntu.com/usn/USN-2844-1"
        },
        {
          "name": "openSUSE-SU-2015:2232",
          "tags": [
            "vendor-advisory",
            "x_refsource_SUSE"
          ],
          "url": "http://lists.opensuse.org/opensuse-updates/2015-12/msg00039.html"
        },
        {
          "name": "USN-2842-2",
          "tags": [
            "vendor-advisory",
            "x_refsource_UBUNTU"
          ],
          "url": "http://www.ubuntu.com/usn/USN-2842-2"
        },
        {
          "name": "USN-2843-2",
          "tags": [
            "vendor-advisory",
            "x_refsource_UBUNTU"
          ],
          "url": "http://www.ubuntu.com/usn/USN-2843-2"
        },
        {
          "name": "SUSE-SU-2015:2339",
          "tags": [
            "vendor-advisory",
            "x_refsource_SUSE"
          ],
          "url": "http://lists.opensuse.org/opensuse-security-announce/2015-12/msg00026.html"
        },
        {
          "name": "USN-2842-1",
          "tags": [
            "vendor-advisory",
            "x_refsource_UBUNTU"
          ],
          "url": "http://www.ubuntu.com/usn/USN-2842-1"
        },
        {
          "name": "[oss-security] 20151010 Re: CVE request - Android OS - Using the PPP character device driver caused the system to restart - Linux kernel",
          "tags": [
            "mailing-list",
            "x_refsource_MLIST"
          ],
          "url": "http://www.openwall.com/lists/oss-security/2015/10/10/3"
        },
        {
          "name": "SUSE-SU-2016:2074",
          "tags": [
            "vendor-advisory",
            "x_refsource_SUSE"
          ],
          "url": "http://lists.opensuse.org/opensuse-security-announce/2016-08/msg00038.html"
        },
        {
          "tags": [
            "x_refsource_CONFIRM"
          ],
          "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1271134"
        },
        {
          "name": "USN-2841-1",
          "tags": [
            "vendor-advisory",
            "x_refsource_UBUNTU"
          ],
          "url": "http://www.ubuntu.com/usn/USN-2841-1"
        },
        {
          "name": "DSA-3426",
          "tags": [
            "vendor-advisory",
            "x_refsource_DEBIAN"
          ],
          "url": "http://www.debian.org/security/2015/dsa-3426"
        },
        {
          "name": "USN-2843-3",
          "tags": [
            "vendor-advisory",
            "x_refsource_UBUNTU"
          ],
          "url": "http://www.ubuntu.com/usn/USN-2843-3"
        },
        {
          "name": "openSUSE-SU-2016:1008",
          "tags": [
            "vendor-advisory",
            "x_refsource_SUSE"
          ],
          "url": "http://lists.opensuse.org/opensuse-security-announce/2016-04/msg00015.html"
        }
      ],
      "x_legacyV4Record": {
        "CVE_data_meta": {
          "ASSIGNER": "cve@mitre.org",
          "ID": "CVE-2015-7799",
          "STATE": "PUBLIC"
        },
        "affects": {
          "vendor": {
            "vendor_data": [
              {
                "product": {
                  "product_data": [
                    {
                      "product_name": "n/a",
                      "version": {
                        "version_data": [
                          {
                            "version_value": "n/a"
                          }
                        ]
                      }
                    }
                  ]
                },
                "vendor_name": "n/a"
              }
            ]
          }
        },
        "data_format": "MITRE",
        "data_type": "CVE",
        "data_version": "4.0",
        "description": {
          "description_data": [
            {
              "lang": "eng",
              "value": "The slhc_init function in drivers/net/slip/slhc.c in the Linux kernel through 4.2.3 does not ensure that certain slot numbers are valid, which allows local users to cause a denial of service (NULL pointer dereference and system crash) via a crafted PPPIOCSMAXCID ioctl call."
            }
          ]
        },
        "problemtype": {
          "problemtype_data": [
            {
              "description": [
                {
                  "lang": "eng",
                  "value": "n/a"
                }
              ]
            }
          ]
        },
        "references": {
          "reference_data": [
            {
              "name": "SUSE-SU-2015:2292",
              "refsource": "SUSE",
              "url": "http://lists.opensuse.org/opensuse-security-announce/2015-12/msg00018.html"
            },
            {
              "name": "USN-2841-2",
              "refsource": "UBUNTU",
              "url": "http://www.ubuntu.com/usn/USN-2841-2"
            },
            {
              "name": "77033",
              "refsource": "BID",
              "url": "http://www.securityfocus.com/bid/77033"
            },
            {
              "name": "SUSE-SU-2015:2350",
              "refsource": "SUSE",
              "url": "http://lists.opensuse.org/opensuse-security-announce/2015-12/msg00031.html"
            },
            {
              "name": "1033809",
              "refsource": "SECTRACK",
              "url": "http://www.securitytracker.com/id/1033809"
            },
            {
              "name": "https://code.google.com/p/android/issues/detail?id=187973",
              "refsource": "MISC",
              "url": "https://code.google.com/p/android/issues/detail?id=187973"
            },
            {
              "name": "USN-2886-1",
              "refsource": "UBUNTU",
              "url": "http://www.ubuntu.com/usn/USN-2886-1"
            },
            {
              "name": "USN-2843-1",
              "refsource": "UBUNTU",
              "url": "http://www.ubuntu.com/usn/USN-2843-1"
            },
            {
              "name": "SUSE-SU-2015:2194",
              "refsource": "SUSE",
              "url": "http://lists.opensuse.org/opensuse-security-announce/2015-12/msg00005.html"
            },
            {
              "name": "USN-2844-1",
              "refsource": "UBUNTU",
              "url": "http://www.ubuntu.com/usn/USN-2844-1"
            },
            {
              "name": "openSUSE-SU-2015:2232",
              "refsource": "SUSE",
              "url": "http://lists.opensuse.org/opensuse-updates/2015-12/msg00039.html"
            },
            {
              "name": "USN-2842-2",
              "refsource": "UBUNTU",
              "url": "http://www.ubuntu.com/usn/USN-2842-2"
            },
            {
              "name": "USN-2843-2",
              "refsource": "UBUNTU",
              "url": "http://www.ubuntu.com/usn/USN-2843-2"
            },
            {
              "name": "SUSE-SU-2015:2339",
              "refsource": "SUSE",
              "url": "http://lists.opensuse.org/opensuse-security-announce/2015-12/msg00026.html"
            },
            {
              "name": "USN-2842-1",
              "refsource": "UBUNTU",
              "url": "http://www.ubuntu.com/usn/USN-2842-1"
            },
            {
              "name": "[oss-security] 20151010 Re: CVE request - Android OS - Using the PPP character device driver caused the system to restart - Linux kernel",
              "refsource": "MLIST",
              "url": "http://www.openwall.com/lists/oss-security/2015/10/10/3"
            },
            {
              "name": "SUSE-SU-2016:2074",
              "refsource": "SUSE",
              "url": "http://lists.opensuse.org/opensuse-security-announce/2016-08/msg00038.html"
            },
            {
              "name": "https://bugzilla.redhat.com/show_bug.cgi?id=1271134",
              "refsource": "CONFIRM",
              "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1271134"
            },
            {
              "name": "USN-2841-1",
              "refsource": "UBUNTU",
              "url": "http://www.ubuntu.com/usn/USN-2841-1"
            },
            {
              "name": "DSA-3426",
              "refsource": "DEBIAN",
              "url": "http://www.debian.org/security/2015/dsa-3426"
            },
            {
              "name": "USN-2843-3",
              "refsource": "UBUNTU",
              "url": "http://www.ubuntu.com/usn/USN-2843-3"
            },
            {
              "name": "openSUSE-SU-2016:1008",
              "refsource": "SUSE",
              "url": "http://lists.opensuse.org/opensuse-security-announce/2016-04/msg00015.html"
            }
          ]
        }
      }
    }
  },
  "cveMetadata": {
    "assignerOrgId": "8254265b-2729-46b6-b9e3-3dfca2d5bfca",
    "assignerShortName": "mitre",
    "cveId": "CVE-2015-7799",
    "datePublished": "2015-10-19T10:00:00.000Z",
    "dateReserved": "2015-10-09T00:00:00.000Z",
    "dateUpdated": "2024-08-06T07:59:00.391Z",
    "state": "PUBLISHED"
  },
  "dataType": "CVE_RECORD",
  "dataVersion": "5.1"
}

GSD-2015-7799

Vulnerability from gsd - Updated: 2023-12-13 01:20

Details

Aliases

CVE-2015-7799

Aliases

CVE-2015-7799

JSON

To clipboard

{
  "GSD": {
    "alias": "CVE-2015-7799",
    "description": "The slhc_init function in drivers/net/slip/slhc.c in the Linux kernel through 4.2.3 does not ensure that certain slot numbers are valid, which allows local users to cause a denial of service (NULL pointer dereference and system crash) via a crafted PPPIOCSMAXCID ioctl call.",
    "id": "GSD-2015-7799",
    "references": [
      "https://www.suse.com/security/cve/CVE-2015-7799.html",
      "https://www.debian.org/security/2015/dsa-3426",
      "https://ubuntu.com/security/CVE-2015-7799",
      "https://advisories.mageia.org/CVE-2015-7799.html"
    ]
  },
  "gsd": {
    "metadata": {
      "exploitCode": "unknown",
      "remediation": "unknown",
      "reportConfidence": "confirmed",
      "type": "vulnerability"
    },
    "osvSchema": {
      "aliases": [
        "CVE-2015-7799"
      ],
      "details": "The slhc_init function in drivers/net/slip/slhc.c in the Linux kernel through 4.2.3 does not ensure that certain slot numbers are valid, which allows local users to cause a denial of service (NULL pointer dereference and system crash) via a crafted PPPIOCSMAXCID ioctl call.",
      "id": "GSD-2015-7799",
      "modified": "2023-12-13T01:20:01.144115Z",
      "schema_version": "1.4.0"
    }
  },
  "namespaces": {
    "cve.org": {
      "CVE_data_meta": {
        "ASSIGNER": "cve@mitre.org",
        "ID": "CVE-2015-7799",
        "STATE": "PUBLIC"
      },
      "affects": {
        "vendor": {
          "vendor_data": [
            {
              "product": {
                "product_data": [
                  {
                    "product_name": "n/a",
                    "version": {
                      "version_data": [
                        {
                          "version_value": "n/a"
                        }
                      ]
                    }
                  }
                ]
              },
              "vendor_name": "n/a"
            }
          ]
        }
      },
      "data_format": "MITRE",
      "data_type": "CVE",
      "data_version": "4.0",
      "description": {
        "description_data": [
          {
            "lang": "eng",
            "value": "The slhc_init function in drivers/net/slip/slhc.c in the Linux kernel through 4.2.3 does not ensure that certain slot numbers are valid, which allows local users to cause a denial of service (NULL pointer dereference and system crash) via a crafted PPPIOCSMAXCID ioctl call."
          }
        ]
      },
      "problemtype": {
        "problemtype_data": [
          {
            "description": [
              {
                "lang": "eng",
                "value": "n/a"
              }
            ]
          }
        ]
      },
      "references": {
        "reference_data": [
          {
            "name": "SUSE-SU-2015:2292",
            "refsource": "SUSE",
            "url": "http://lists.opensuse.org/opensuse-security-announce/2015-12/msg00018.html"
          },
          {
            "name": "USN-2841-2",
            "refsource": "UBUNTU",
            "url": "http://www.ubuntu.com/usn/USN-2841-2"
          },
          {
            "name": "77033",
            "refsource": "BID",
            "url": "http://www.securityfocus.com/bid/77033"
          },
          {
            "name": "SUSE-SU-2015:2350",
            "refsource": "SUSE",
            "url": "http://lists.opensuse.org/opensuse-security-announce/2015-12/msg00031.html"
          },
          {
            "name": "1033809",
            "refsource": "SECTRACK",
            "url": "http://www.securitytracker.com/id/1033809"
          },
          {
            "name": "https://code.google.com/p/android/issues/detail?id=187973",
            "refsource": "MISC",
            "url": "https://code.google.com/p/android/issues/detail?id=187973"
          },
          {
            "name": "USN-2886-1",
            "refsource": "UBUNTU",
            "url": "http://www.ubuntu.com/usn/USN-2886-1"
          },
          {
            "name": "USN-2843-1",
            "refsource": "UBUNTU",
            "url": "http://www.ubuntu.com/usn/USN-2843-1"
          },
          {
            "name": "SUSE-SU-2015:2194",
            "refsource": "SUSE",
            "url": "http://lists.opensuse.org/opensuse-security-announce/2015-12/msg00005.html"
          },
          {
            "name": "USN-2844-1",
            "refsource": "UBUNTU",
            "url": "http://www.ubuntu.com/usn/USN-2844-1"
          },
          {
            "name": "openSUSE-SU-2015:2232",
            "refsource": "SUSE",
            "url": "http://lists.opensuse.org/opensuse-updates/2015-12/msg00039.html"
          },
          {
            "name": "USN-2842-2",
            "refsource": "UBUNTU",
            "url": "http://www.ubuntu.com/usn/USN-2842-2"
          },
          {
            "name": "USN-2843-2",
            "refsource": "UBUNTU",
            "url": "http://www.ubuntu.com/usn/USN-2843-2"
          },
          {
            "name": "SUSE-SU-2015:2339",
            "refsource": "SUSE",
            "url": "http://lists.opensuse.org/opensuse-security-announce/2015-12/msg00026.html"
          },
          {
            "name": "USN-2842-1",
            "refsource": "UBUNTU",
            "url": "http://www.ubuntu.com/usn/USN-2842-1"
          },
          {
            "name": "[oss-security] 20151010 Re: CVE request - Android OS - Using the PPP character device driver caused the system to restart - Linux kernel",
            "refsource": "MLIST",
            "url": "http://www.openwall.com/lists/oss-security/2015/10/10/3"
          },
          {
            "name": "SUSE-SU-2016:2074",
            "refsource": "SUSE",
            "url": "http://lists.opensuse.org/opensuse-security-announce/2016-08/msg00038.html"
          },
          {
            "name": "https://bugzilla.redhat.com/show_bug.cgi?id=1271134",
            "refsource": "CONFIRM",
            "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1271134"
          },
          {
            "name": "USN-2841-1",
            "refsource": "UBUNTU",
            "url": "http://www.ubuntu.com/usn/USN-2841-1"
          },
          {
            "name": "DSA-3426",
            "refsource": "DEBIAN",
            "url": "http://www.debian.org/security/2015/dsa-3426"
          },
          {
            "name": "USN-2843-3",
            "refsource": "UBUNTU",
            "url": "http://www.ubuntu.com/usn/USN-2843-3"
          },
          {
            "name": "openSUSE-SU-2016:1008",
            "refsource": "SUSE",
            "url": "http://lists.opensuse.org/opensuse-security-announce/2016-04/msg00015.html"
          }
        ]
      }
    },
    "nvd.nist.gov": {
      "configurations": {
        "CVE_data_version": "4.0",
        "nodes": [
          {
            "children": [],
            "cpe_match": [
              {
                "cpe23Uri": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
                "cpe_name": [],
                "versionEndIncluding": "4.2.2",
                "vulnerable": true
              }
            ],
            "operator": "OR"
          }
        ]
      },
      "cve": {
        "CVE_data_meta": {
          "ASSIGNER": "cve@mitre.org",
          "ID": "CVE-2015-7799"
        },
        "data_format": "MITRE",
        "data_type": "CVE",
        "data_version": "4.0",
        "description": {
          "description_data": [
            {
              "lang": "en",
              "value": "The slhc_init function in drivers/net/slip/slhc.c in the Linux kernel through 4.2.3 does not ensure that certain slot numbers are valid, which allows local users to cause a denial of service (NULL pointer dereference and system crash) via a crafted PPPIOCSMAXCID ioctl call."
            }
          ]
        },
        "problemtype": {
          "problemtype_data": [
            {
              "description": [
                {
                  "lang": "en",
                  "value": "NVD-CWE-Other"
                }
              ]
            }
          ]
        },
        "references": {
          "reference_data": [
            {
              "name": "[oss-security] 20151010 Re: CVE request - Android OS - Using the PPP character device driver caused the system to restart - Linux kernel",
              "refsource": "MLIST",
              "tags": [],
              "url": "http://www.openwall.com/lists/oss-security/2015/10/10/3"
            },
            {
              "name": "https://code.google.com/p/android/issues/detail?id=187973",
              "refsource": "MISC",
              "tags": [
                "Exploit"
              ],
              "url": "https://code.google.com/p/android/issues/detail?id=187973"
            },
            {
              "name": "https://bugzilla.redhat.com/show_bug.cgi?id=1271134",
              "refsource": "CONFIRM",
              "tags": [],
              "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1271134"
            },
            {
              "name": "SUSE-SU-2016:2074",
              "refsource": "SUSE",
              "tags": [],
              "url": "http://lists.opensuse.org/opensuse-security-announce/2016-08/msg00038.html"
            },
            {
              "name": "openSUSE-SU-2016:1008",
              "refsource": "SUSE",
              "tags": [],
              "url": "http://lists.opensuse.org/opensuse-security-announce/2016-04/msg00015.html"
            },
            {
              "name": "USN-2886-1",
              "refsource": "UBUNTU",
              "tags": [],
              "url": "http://www.ubuntu.com/usn/USN-2886-1"
            },
            {
              "name": "USN-2843-1",
              "refsource": "UBUNTU",
              "tags": [],
              "url": "http://www.ubuntu.com/usn/USN-2843-1"
            },
            {
              "name": "USN-2842-1",
              "refsource": "UBUNTU",
              "tags": [],
              "url": "http://www.ubuntu.com/usn/USN-2842-1"
            },
            {
              "name": "USN-2844-1",
              "refsource": "UBUNTU",
              "tags": [],
              "url": "http://www.ubuntu.com/usn/USN-2844-1"
            },
            {
              "name": "SUSE-SU-2015:2194",
              "refsource": "SUSE",
              "tags": [],
              "url": "http://lists.opensuse.org/opensuse-security-announce/2015-12/msg00005.html"
            },
            {
              "name": "SUSE-SU-2015:2339",
              "refsource": "SUSE",
              "tags": [],
              "url": "http://lists.opensuse.org/opensuse-security-announce/2015-12/msg00026.html"
            },
            {
              "name": "SUSE-SU-2015:2350",
              "refsource": "SUSE",
              "tags": [],
              "url": "http://lists.opensuse.org/opensuse-security-announce/2015-12/msg00031.html"
            },
            {
              "name": "USN-2841-1",
              "refsource": "UBUNTU",
              "tags": [],
              "url": "http://www.ubuntu.com/usn/USN-2841-1"
            },
            {
              "name": "USN-2842-2",
              "refsource": "UBUNTU",
              "tags": [],
              "url": "http://www.ubuntu.com/usn/USN-2842-2"
            },
            {
              "name": "USN-2843-3",
              "refsource": "UBUNTU",
              "tags": [],
              "url": "http://www.ubuntu.com/usn/USN-2843-3"
            },
            {
              "name": "USN-2841-2",
              "refsource": "UBUNTU",
              "tags": [],
              "url": "http://www.ubuntu.com/usn/USN-2841-2"
            },
            {
              "name": "USN-2843-2",
              "refsource": "UBUNTU",
              "tags": [],
              "url": "http://www.ubuntu.com/usn/USN-2843-2"
            },
            {
              "name": "DSA-3426",
              "refsource": "DEBIAN",
              "tags": [],
              "url": "http://www.debian.org/security/2015/dsa-3426"
            },
            {
              "name": "SUSE-SU-2015:2292",
              "refsource": "SUSE",
              "tags": [],
              "url": "http://lists.opensuse.org/opensuse-security-announce/2015-12/msg00018.html"
            },
            {
              "name": "openSUSE-SU-2015:2232",
              "refsource": "SUSE",
              "tags": [],
              "url": "http://lists.opensuse.org/opensuse-updates/2015-12/msg00039.html"
            },
            {
              "name": "1033809",
              "refsource": "SECTRACK",
              "tags": [],
              "url": "http://www.securitytracker.com/id/1033809"
            },
            {
              "name": "77033",
              "refsource": "BID",
              "tags": [],
              "url": "http://www.securityfocus.com/bid/77033"
            }
          ]
        }
      },
      "impact": {
        "baseMetricV2": {
          "cvssV2": {
            "accessComplexity": "LOW",
            "accessVector": "LOCAL",
            "authentication": "NONE",
            "availabilityImpact": "COMPLETE",
            "baseScore": 4.9,
            "confidentialityImpact": "NONE",
            "integrityImpact": "NONE",
            "vectorString": "AV:L/AC:L/Au:N/C:N/I:N/A:C",
            "version": "2.0"
          },
          "exploitabilityScore": 3.9,
          "impactScore": 6.9,
          "obtainAllPrivilege": false,
          "obtainOtherPrivilege": false,
          "obtainUserPrivilege": false,
          "severity": "MEDIUM",
          "userInteractionRequired": false
        }
      },
      "lastModifiedDate": "2017-03-24T01:59Z",
      "publishedDate": "2015-10-19T10:59Z"
    }
  }
}

GHSA-4R89-QCC9-4PM9

Vulnerability from github – Published: 2022-05-17 02:54 – Updated: 2022-05-17 02:54

Details

Show details on source website

JSON

To clipboard

{
  "affected": [],
  "aliases": [
    "CVE-2015-7799"
  ],
  "database_specific": {
    "cwe_ids": [],
    "github_reviewed": false,
    "github_reviewed_at": null,
    "nvd_published_at": "2015-10-19T10:59:00Z",
    "severity": "MODERATE"
  },
  "details": "The slhc_init function in drivers/net/slip/slhc.c in the Linux kernel through 4.2.3 does not ensure that certain slot numbers are valid, which allows local users to cause a denial of service (NULL pointer dereference and system crash) via a crafted PPPIOCSMAXCID ioctl call.",
  "id": "GHSA-4r89-qcc9-4pm9",
  "modified": "2022-05-17T02:54:03Z",
  "published": "2022-05-17T02:54:03Z",
  "references": [
    {
      "type": "ADVISORY",
      "url": "https://nvd.nist.gov/vuln/detail/CVE-2015-7799"
    },
    {
      "type": "WEB",
      "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1271134"
    },
    {
      "type": "WEB",
      "url": "https://code.google.com/p/android/issues/detail?id=187973"
    },
    {
      "type": "WEB",
      "url": "http://lists.opensuse.org/opensuse-security-announce/2015-12/msg00005.html"
    },
    {
      "type": "WEB",
      "url": "http://lists.opensuse.org/opensuse-security-announce/2015-12/msg00018.html"
    },
    {
      "type": "WEB",
      "url": "http://lists.opensuse.org/opensuse-security-announce/2015-12/msg00026.html"
    },
    {
      "type": "WEB",
      "url": "http://lists.opensuse.org/opensuse-security-announce/2015-12/msg00031.html"
    },
    {
      "type": "WEB",
      "url": "http://lists.opensuse.org/opensuse-security-announce/2016-04/msg00015.html"
    },
    {
      "type": "WEB",
      "url": "http://lists.opensuse.org/opensuse-security-announce/2016-08/msg00038.html"
    },
    {
      "type": "WEB",
      "url": "http://lists.opensuse.org/opensuse-updates/2015-12/msg00039.html"
    },
    {
      "type": "WEB",
      "url": "http://www.debian.org/security/2015/dsa-3426"
    },
    {
      "type": "WEB",
      "url": "http://www.openwall.com/lists/oss-security/2015/10/10/3"
    },
    {
      "type": "WEB",
      "url": "http://www.securityfocus.com/bid/77033"
    },
    {
      "type": "WEB",
      "url": "http://www.securitytracker.com/id/1033809"
    },
    {
      "type": "WEB",
      "url": "http://www.ubuntu.com/usn/USN-2841-1"
    },
    {
      "type": "WEB",
      "url": "http://www.ubuntu.com/usn/USN-2841-2"
    },
    {
      "type": "WEB",
      "url": "http://www.ubuntu.com/usn/USN-2842-1"
    },
    {
      "type": "WEB",
      "url": "http://www.ubuntu.com/usn/USN-2842-2"
    },
    {
      "type": "WEB",
      "url": "http://www.ubuntu.com/usn/USN-2843-1"
    },
    {
      "type": "WEB",
      "url": "http://www.ubuntu.com/usn/USN-2843-2"
    },
    {
      "type": "WEB",
      "url": "http://www.ubuntu.com/usn/USN-2843-3"
    },
    {
      "type": "WEB",
      "url": "http://www.ubuntu.com/usn/USN-2844-1"
    },
    {
      "type": "WEB",
      "url": "http://www.ubuntu.com/usn/USN-2886-1"
    }
  ],
  "schema_version": "1.4.0",
  "severity": []
}

CERTFR-2015-AVI-549

Vulnerability from certfr_avis - Published: 2015-12-17 - Updated: 2015-12-17

De multiples vulnérabilités ont été corrigées dans le noyau Linux d'Ubuntu. Elles permettent à un attaquant de provoquer un déni de service et une atteinte à la confidentialité des données.

Solution

Se référer au bulletin de sécurité de l'éditeur pour l'obtention des correctifs (cf. section Documentation).

None

Impacted products

Vendor	Product	Description
Ubuntu	Ubuntu	Ubuntu 15.10
Ubuntu	Ubuntu	Ubuntu 12.04 LTS
Ubuntu	Ubuntu	Ubuntu 14.04 LTS
Ubuntu	Ubuntu	Ubuntu 15.04

References

Title

Publication Time

Tags

Bulletin de sécurité Ubuntu USN-2842-1 du 17 décembre 2015	None	vendor-advisory
Bulletin de sécurité Ubuntu USN-2841-1 du 17 décembre 2015	None	vendor-advisory
Bulletin de sécurité Ubuntu USN-2843-1 du 17 décembre 2015	None	vendor-advisory
Bulletin de sécurité Ubuntu USN-2840-1 du 17 décembre 2015	None	vendor-advisory

Show details on source website

JSON

To clipboard

{
  "$ref": "https://www.cert.ssi.gouv.fr/openapi.json",
  "affected_systems": [
    {
      "description": "Ubuntu 15.10",
      "product": {
        "name": "Ubuntu",
        "vendor": {
          "name": "Ubuntu",
          "scada": false
        }
      }
    },
    {
      "description": "Ubuntu 12.04 LTS",
      "product": {
        "name": "Ubuntu",
        "vendor": {
          "name": "Ubuntu",
          "scada": false
        }
      }
    },
    {
      "description": "Ubuntu 14.04 LTS",
      "product": {
        "name": "Ubuntu",
        "vendor": {
          "name": "Ubuntu",
          "scada": false
        }
      }
    },
    {
      "description": "Ubuntu 15.04",
      "product": {
        "name": "Ubuntu",
        "vendor": {
          "name": "Ubuntu",
          "scada": false
        }
      }
    }
  ],
  "affected_systems_content": null,
  "content": "## Solution\n\nSe r\u00e9f\u00e9rer au bulletin de s\u00e9curit\u00e9 de l\u0027\u00e9diteur pour l\u0027obtention des\ncorrectifs (cf. section Documentation).\n",
  "cves": [
    {
      "name": "CVE-2015-7885",
      "url": "https://www.cve.org/CVERecord?id=CVE-2015-7885"
    },
    {
      "name": "CVE-2015-8104",
      "url": "https://www.cve.org/CVERecord?id=CVE-2015-8104"
    },
    {
      "name": "CVE-2015-7884",
      "url": "https://www.cve.org/CVERecord?id=CVE-2015-7884"
    },
    {
      "name": "CVE-2015-7799",
      "url": "https://www.cve.org/CVERecord?id=CVE-2015-7799"
    },
    {
      "name": "CVE-2015-7872",
      "url": "https://www.cve.org/CVERecord?id=CVE-2015-7872"
    }
  ],
  "initial_release_date": "2015-12-17T00:00:00",
  "last_revision_date": "2015-12-17T00:00:00",
  "links": [],
  "reference": "CERTFR-2015-AVI-549",
  "revisions": [
    {
      "description": "version initiale.",
      "revision_date": "2015-12-17T00:00:00.000000"
    }
  ],
  "risks": [
    {
      "description": "D\u00e9ni de service"
    },
    {
      "description": "Atteinte \u00e0 la confidentialit\u00e9 des donn\u00e9es"
    }
  ],
  "summary": "De multiples vuln\u00e9rabilit\u00e9s ont \u00e9t\u00e9 corrig\u00e9es dans le noyau Linux\nd\u0027\u003cspan class=\"textit\"\u003eUbuntu\u003c/span\u003e. Elles permettent \u00e0 un attaquant de\nprovoquer un d\u00e9ni de service et une atteinte \u00e0 la confidentialit\u00e9 des\ndonn\u00e9es.\n",
  "title": "Multiples vuln\u00e9rabilit\u00e9s dans le noyau Linux d\u0027Ubuntu",
  "vendor_advisories": [
    {
      "published_at": null,
      "title": "Bulletin de s\u00e9curit\u00e9 Ubuntu USN-2842-1 du 17 d\u00e9cembre 2015",
      "url": "http://www.ubuntu.com/usn/usn-2842-1/"
    },
    {
      "published_at": null,
      "title": "Bulletin de s\u00e9curit\u00e9 Ubuntu USN-2841-1 du 17 d\u00e9cembre 2015",
      "url": "http://www.ubuntu.com/usn/usn-2841-1/"
    },
    {
      "published_at": null,
      "title": "Bulletin de s\u00e9curit\u00e9 Ubuntu USN-2843-1 du 17 d\u00e9cembre 2015",
      "url": "http://www.ubuntu.com/usn/usn-2843-1/"
    },
    {
      "published_at": null,
      "title": "Bulletin de s\u00e9curit\u00e9 Ubuntu USN-2840-1 du 17 d\u00e9cembre 2015",
      "url": "http://www.ubuntu.com/usn/usn-2840-1/"
    }
  ]
}

CERTFR-2016-AVI-073

Vulnerability from certfr_avis - Published: 2016-02-26 - Updated: 2016-02-26

De multiples vulnérabilités ont été corrigées dans le noyau Linux de Suse. Certaines d'entre elles permettent à un attaquant de provoquer une exécution de code arbitraire à distance, un déni de service à distance et un déni de service.

Solution

Se référer au bulletin de sécurité de l'éditeur pour l'obtention des correctifs (cf. section Documentation).

None

Impacted products

Vendor	Product	Description
SUSE	SUSE Linux Enterprise Live Patching	SUSE Linux Enterprise Live Patching 12
SUSE	SUSE Linux Enterprise Server	SUSE Linux Enterprise Server 12-SP1
SUSE	SUSE Linux Enterprise Desktop	SUSE Linux Enterprise Desktop 12-SP1
SUSE	N/A	SUSE Linux Enterprise Module for Public Cloud 12
SUSE	N/A	SUSE Linux Enterprise Workstation Extension 12-SP1
SUSE	N/A	SUSE Linux Enterprise Software Development Kit 12-SP1

References

Title

Publication Time

Tags

Bulletin de sécurité Suse suse-su-20160585-1 du 25 février 2016	None	vendor-advisory
Bulletin de sécurité suse-su-20160585-1 Suse du 25 février 2016	-	other

Show details on source website

JSON

To clipboard

{
  "$ref": "https://www.cert.ssi.gouv.fr/openapi.json",
  "affected_systems": [
    {
      "description": "SUSE Linux Enterprise Live Patching 12",
      "product": {
        "name": "SUSE Linux Enterprise Live Patching",
        "vendor": {
          "name": "SUSE",
          "scada": false
        }
      }
    },
    {
      "description": "SUSE Linux Enterprise Server 12-SP1",
      "product": {
        "name": "SUSE Linux Enterprise Server",
        "vendor": {
          "name": "SUSE",
          "scada": false
        }
      }
    },
    {
      "description": "SUSE Linux Enterprise Desktop 12-SP1",
      "product": {
        "name": "SUSE Linux Enterprise Desktop",
        "vendor": {
          "name": "SUSE",
          "scada": false
        }
      }
    },
    {
      "description": "SUSE Linux Enterprise Module for Public Cloud 12",
      "product": {
        "name": "N/A",
        "vendor": {
          "name": "SUSE",
          "scada": false
        }
      }
    },
    {
      "description": "SUSE Linux Enterprise Workstation Extension 12-SP1",
      "product": {
        "name": "N/A",
        "vendor": {
          "name": "SUSE",
          "scada": false
        }
      }
    },
    {
      "description": "SUSE Linux Enterprise Software Development Kit 12-SP1",
      "product": {
        "name": "N/A",
        "vendor": {
          "name": "SUSE",
          "scada": false
        }
      }
    }
  ],
  "affected_systems_content": null,
  "content": "## Solution\n\nSe r\u00e9f\u00e9rer au bulletin de s\u00e9curit\u00e9 de l\u0027\u00e9diteur pour l\u0027obtention des\ncorrectifs (cf. section Documentation).\n",
  "cves": [
    {
      "name": "CVE-2015-8767",
      "url": "https://www.cve.org/CVERecord?id=CVE-2015-8767"
    },
    {
      "name": "CVE-2016-0723",
      "url": "https://www.cve.org/CVERecord?id=CVE-2016-0723"
    },
    {
      "name": "CVE-2015-8569",
      "url": "https://www.cve.org/CVERecord?id=CVE-2015-8569"
    },
    {
      "name": "CVE-2015-8660",
      "url": "https://www.cve.org/CVERecord?id=CVE-2015-8660"
    },
    {
      "name": "CVE-2015-8785",
      "url": "https://www.cve.org/CVERecord?id=CVE-2015-8785"
    },
    {
      "name": "CVE-2015-5707",
      "url": "https://www.cve.org/CVERecord?id=CVE-2015-5707"
    },
    {
      "name": "CVE-2015-8575",
      "url": "https://www.cve.org/CVERecord?id=CVE-2015-8575"
    },
    {
      "name": "CVE-2015-8550",
      "url": "https://www.cve.org/CVERecord?id=CVE-2015-8550"
    },
    {
      "name": "CVE-2015-8551",
      "url": "https://www.cve.org/CVERecord?id=CVE-2015-8551"
    },
    {
      "name": "CVE-2015-8539",
      "url": "https://www.cve.org/CVERecord?id=CVE-2015-8539"
    },
    {
      "name": "CVE-2015-7550",
      "url": "https://www.cve.org/CVERecord?id=CVE-2015-7550"
    },
    {
      "name": "CVE-2013-7446",
      "url": "https://www.cve.org/CVERecord?id=CVE-2013-7446"
    },
    {
      "name": "CVE-2015-7799",
      "url": "https://www.cve.org/CVERecord?id=CVE-2015-7799"
    },
    {
      "name": "CVE-2015-0272",
      "url": "https://www.cve.org/CVERecord?id=CVE-2015-0272"
    },
    {
      "name": "CVE-2015-8543",
      "url": "https://www.cve.org/CVERecord?id=CVE-2015-8543"
    },
    {
      "name": "CVE-2016-2069",
      "url": "https://www.cve.org/CVERecord?id=CVE-2016-2069"
    },
    {
      "name": "CVE-2015-8215",
      "url": "https://www.cve.org/CVERecord?id=CVE-2015-8215"
    }
  ],
  "initial_release_date": "2016-02-26T00:00:00",
  "last_revision_date": "2016-02-26T00:00:00",
  "links": [
    {
      "title": "Bulletin de s\u00e9curit\u00e9 suse-su-20160585-1 Suse du 25 f\u00e9vrier    2016",
      "url": "https://www.suse.com/support/update/announcement/2016/suse-su-20160585-1.html"
    }
  ],
  "reference": "CERTFR-2016-AVI-073",
  "revisions": [
    {
      "description": "version initiale.",
      "revision_date": "2016-02-26T00:00:00.000000"
    }
  ],
  "risks": [
    {
      "description": "D\u00e9ni de service \u00e0 distance"
    },
    {
      "description": "Ex\u00e9cution de code arbitraire \u00e0 distance"
    },
    {
      "description": "D\u00e9ni de service"
    },
    {
      "description": "Contournement de la politique de s\u00e9curit\u00e9"
    },
    {
      "description": "Atteinte \u00e0 la confidentialit\u00e9 des donn\u00e9es"
    },
    {
      "description": "\u00c9l\u00e9vation de privil\u00e8ges"
    }
  ],
  "summary": "De multiples vuln\u00e9rabilit\u00e9s ont \u00e9t\u00e9 corrig\u00e9es dans \u003cspan\nclass=\"textit\"\u003ele noyau Linux de Suse\u003c/span\u003e. Certaines d\u0027entre elles\npermettent \u00e0 un attaquant de provoquer une ex\u00e9cution de code arbitraire\n\u00e0 distance, un d\u00e9ni de service \u00e0 distance et un d\u00e9ni de service.\n",
  "title": "Multiples vuln\u00e9rabilit\u00e9s dans le noyau Linux de Suse",
  "vendor_advisories": [
    {
      "published_at": null,
      "title": "Bulletin de s\u00e9curit\u00e9 Suse suse-su-20160585-1 du 25 f\u00e9vrier 2016",
      "url": null
    }
  ]
}

CERTFR-2015-AVI-563

Vulnerability from certfr_avis - Published: 2015-12-23 - Updated: 2015-12-23

De multiples vulnérabilités ont été corrigées dans le noyau Linux de SUSE. Elles permettent à un attaquant de provoquer un déni de service à distance et une élévation de privilèges.

Solution

Se référer au bulletin de sécurité de l'éditeur pour l'obtention des correctifs (cf. section Documentation).

None

Impacted products

Vendor	Product	Description
SUSE	N/A	SUSE Linux Enterprise Debuginfo 11-SP4
SUSE	SUSE Linux Enterprise Server	SUSE Linux Enterprise Server 11-SP4
SUSE	SUSE Linux Enterprise Desktop	SUSE Linux Enterprise Desktop 11-SP4
SUSE	N/A	SUSE Linux Enterprise Software Development Kit 11-SP4
SUSE	SUSE Linux Enterprise Server	SUSE Linux Enterprise Server 11-EXTRA

References

Title

Publication Time

Tags

Bulletin de sécurité SUSE du 22 décembre 2015

None

vendor-advisory

Show details on source website

JSON

To clipboard

{
  "$ref": "https://www.cert.ssi.gouv.fr/openapi.json",
  "affected_systems": [
    {
      "description": "SUSE Linux Enterprise Debuginfo 11-SP4",
      "product": {
        "name": "N/A",
        "vendor": {
          "name": "SUSE",
          "scada": false
        }
      }
    },
    {
      "description": "SUSE Linux Enterprise Server 11-SP4",
      "product": {
        "name": "SUSE Linux Enterprise Server",
        "vendor": {
          "name": "SUSE",
          "scada": false
        }
      }
    },
    {
      "description": "SUSE Linux Enterprise Desktop 11-SP4",
      "product": {
        "name": "SUSE Linux Enterprise Desktop",
        "vendor": {
          "name": "SUSE",
          "scada": false
        }
      }
    },
    {
      "description": "SUSE Linux Enterprise Software Development Kit 11-SP4",
      "product": {
        "name": "N/A",
        "vendor": {
          "name": "SUSE",
          "scada": false
        }
      }
    },
    {
      "description": "SUSE Linux Enterprise Server 11-EXTRA",
      "product": {
        "name": "SUSE Linux Enterprise Server",
        "vendor": {
          "name": "SUSE",
          "scada": false
        }
      }
    }
  ],
  "affected_systems_content": null,
  "content": "## Solution\n\nSe r\u00e9f\u00e9rer au bulletin de s\u00e9curit\u00e9 de l\u0027\u00e9diteur pour l\u0027obtention des\ncorrectifs (cf. section Documentation).\n",
  "cves": [
    {
      "name": "CVE-2015-7990",
      "url": "https://www.cve.org/CVERecord?id=CVE-2015-7990"
    },
    {
      "name": "CVE-2015-8104",
      "url": "https://www.cve.org/CVERecord?id=CVE-2015-8104"
    },
    {
      "name": "CVE-2015-7509",
      "url": "https://www.cve.org/CVERecord?id=CVE-2015-7509"
    },
    {
      "name": "CVE-2015-7799",
      "url": "https://www.cve.org/CVERecord?id=CVE-2015-7799"
    },
    {
      "name": "CVE-2015-0272",
      "url": "https://www.cve.org/CVERecord?id=CVE-2015-0272"
    },
    {
      "name": "CVE-2015-5157",
      "url": "https://www.cve.org/CVERecord?id=CVE-2015-5157"
    },
    {
      "name": "CVE-2015-6937",
      "url": "https://www.cve.org/CVERecord?id=CVE-2015-6937"
    },
    {
      "name": "CVE-2015-7872",
      "url": "https://www.cve.org/CVERecord?id=CVE-2015-7872"
    },
    {
      "name": "CVE-2015-5307",
      "url": "https://www.cve.org/CVERecord?id=CVE-2015-5307"
    },
    {
      "name": "CVE-2015-8215",
      "url": "https://www.cve.org/CVERecord?id=CVE-2015-8215"
    }
  ],
  "initial_release_date": "2015-12-23T00:00:00",
  "last_revision_date": "2015-12-23T00:00:00",
  "links": [],
  "reference": "CERTFR-2015-AVI-563",
  "revisions": [
    {
      "description": "version initiale.",
      "revision_date": "2015-12-23T00:00:00.000000"
    }
  ],
  "risks": [
    {
      "description": "D\u00e9ni de service \u00e0 distance"
    },
    {
      "description": "\u00c9l\u00e9vation de privil\u00e8ges"
    }
  ],
  "summary": "De multiples vuln\u00e9rabilit\u00e9s ont \u00e9t\u00e9 corrig\u00e9es dans le \u003cspan\nclass=\"textit\"\u003enoyau Linux de SUSE\u003c/span\u003e. Elles permettent \u00e0 un\nattaquant de provoquer un d\u00e9ni de service \u00e0 distance et une \u00e9l\u00e9vation de\nprivil\u00e8ges.\n",
  "title": "Multiples vuln\u00e9rabilit\u00e9s dans le noyau Linux de SUSE",
  "vendor_advisories": [
    {
      "published_at": null,
      "title": "Bulletin de s\u00e9curit\u00e9 SUSE du 22 d\u00e9cembre 2015",
      "url": "https://www.suse.com/support/update/announcement/2015/suse-su-20152339-1.html"
    }
  ]
}

CERTFR-2016-AVI-044

Vulnerability from certfr_avis - Published: 2016-02-02 - Updated: 2016-02-02

De multiples vulnérabilités ont été corrigées dans le noyau Linux d'Ubuntu. Certaines d'entre elles permettent à un attaquant de provoquer une exécution de code arbitraire à distance, un déni de service à distance et un déni de service.

Solution

Se référer au bulletin de sécurité de l'éditeur pour l'obtention des correctifs (cf. section Documentation).

None

Impacted products

Vendor	Product	Description
Ubuntu	Ubuntu	OpenJDK 6 pour Ubuntu 12.04 LTS
Ubuntu	Ubuntu	Ubuntu 15.10 pour Raspberry Pi 2
Ubuntu	Ubuntu	Ubuntu 15.10
Ubuntu	Ubuntu	Ubuntu 12.04 LTS
Ubuntu	Ubuntu	Ubuntu 14.04 LTS
Ubuntu	Ubuntu	Ubuntu 15.04
Ubuntu	Ubuntu	OpenJDK 7 pour Ubuntu 14.04 LTS, Ubuntu 15.04 et Ubuntu 15.10

References

Title

Publication Time

Tags

Bulletin de sécurité Ubuntu USN-2885-1 du 01 février 2016	None	vendor-advisory
Bulletin de sécurité Ubuntu USN-2890-1 du 01 février 2016	None	vendor-advisory
Bulletin de sécurité Ubuntu USN-2887-2 du 01 février 2016	None	vendor-advisory
Bulletin de sécurité Ubuntu USN-2889-2 du 01 février 2016	None	vendor-advisory
Bulletin de sécurité Ubuntu USN-2884-1 du 01 février 2016	None	vendor-advisory
Bulletin de sécurité Ubuntu USN-2886-1 du 01 février 2016	None	vendor-advisory
Bulletin de sécurité Ubuntu USN-2888-1 du 01 février 2016	None	vendor-advisory
Bulletin de sécurité Ubuntu USN-2890-2 du 01 février 2016	None	vendor-advisory
Bulletin de sécurité Ubuntu USN-2890-3 du 01 février 2016	None	vendor-advisory
Bulletin de sécurité Ubuntu USN-2887-1 du 01 février 2016	None	vendor-advisory
Bulletin de sécurité Ubuntu USN-2889-1 du 01 février 2016	None	vendor-advisory
Bulletin de sécurité Ubuntu USN-2886-2 du 01 février 2016	None	vendor-advisory

Show details on source website

JSON

To clipboard

{
  "$ref": "https://www.cert.ssi.gouv.fr/openapi.json",
  "affected_systems": [
    {
      "description": "OpenJDK 6 pour Ubuntu 12.04 LTS",
      "product": {
        "name": "Ubuntu",
        "vendor": {
          "name": "Ubuntu",
          "scada": false
        }
      }
    },
    {
      "description": "Ubuntu 15.10 pour Raspberry Pi 2",
      "product": {
        "name": "Ubuntu",
        "vendor": {
          "name": "Ubuntu",
          "scada": false
        }
      }
    },
    {
      "description": "Ubuntu 15.10",
      "product": {
        "name": "Ubuntu",
        "vendor": {
          "name": "Ubuntu",
          "scada": false
        }
      }
    },
    {
      "description": "Ubuntu 12.04 LTS",
      "product": {
        "name": "Ubuntu",
        "vendor": {
          "name": "Ubuntu",
          "scada": false
        }
      }
    },
    {
      "description": "Ubuntu 14.04 LTS",
      "product": {
        "name": "Ubuntu",
        "vendor": {
          "name": "Ubuntu",
          "scada": false
        }
      }
    },
    {
      "description": "Ubuntu 15.04",
      "product": {
        "name": "Ubuntu",
        "vendor": {
          "name": "Ubuntu",
          "scada": false
        }
      }
    },
    {
      "description": "OpenJDK 7 pour Ubuntu 14.04 LTS, Ubuntu 15.04 et Ubuntu 15.10",
      "product": {
        "name": "Ubuntu",
        "vendor": {
          "name": "Ubuntu",
          "scada": false
        }
      }
    }
  ],
  "affected_systems_content": null,
  "content": "## Solution\n\nSe r\u00e9f\u00e9rer au bulletin de s\u00e9curit\u00e9 de l\u0027\u00e9diteur pour l\u0027obtention des\ncorrectifs (cf. section Documentation).\n",
  "cves": [
    {
      "name": "CVE-2016-0494",
      "url": "https://www.cve.org/CVERecord?id=CVE-2016-0494"
    },
    {
      "name": "CVE-2016-0448",
      "url": "https://www.cve.org/CVERecord?id=CVE-2016-0448"
    },
    {
      "name": "CVE-2015-8569",
      "url": "https://www.cve.org/CVERecord?id=CVE-2015-8569"
    },
    {
      "name": "CVE-2015-8785",
      "url": "https://www.cve.org/CVERecord?id=CVE-2015-8785"
    },
    {
      "name": "CVE-2016-0483",
      "url": "https://www.cve.org/CVERecord?id=CVE-2016-0483"
    },
    {
      "name": "CVE-2015-8575",
      "url": "https://www.cve.org/CVERecord?id=CVE-2015-8575"
    },
    {
      "name": "CVE-2015-8550",
      "url": "https://www.cve.org/CVERecord?id=CVE-2015-8550"
    },
    {
      "name": "CVE-2015-7990",
      "url": "https://www.cve.org/CVERecord?id=CVE-2015-7990"
    },
    {
      "name": "CVE-2015-7513",
      "url": "https://www.cve.org/CVERecord?id=CVE-2015-7513"
    },
    {
      "name": "CVE-2015-7550",
      "url": "https://www.cve.org/CVERecord?id=CVE-2015-7550"
    },
    {
      "name": "CVE-2013-7446",
      "url": "https://www.cve.org/CVERecord?id=CVE-2013-7446"
    },
    {
      "name": "CVE-2015-7799",
      "url": "https://www.cve.org/CVERecord?id=CVE-2015-7799"
    },
    {
      "name": "CVE-2016-0402",
      "url": "https://www.cve.org/CVERecord?id=CVE-2016-0402"
    },
    {
      "name": "CVE-2015-8543",
      "url": "https://www.cve.org/CVERecord?id=CVE-2015-8543"
    },
    {
      "name": "CVE-2015-7575",
      "url": "https://www.cve.org/CVERecord?id=CVE-2015-7575"
    },
    {
      "name": "CVE-2015-8374",
      "url": "https://www.cve.org/CVERecord?id=CVE-2015-8374"
    },
    {
      "name": "CVE-2015-8787",
      "url": "https://www.cve.org/CVERecord?id=CVE-2015-8787"
    },
    {
      "name": "CVE-2016-0466",
      "url": "https://www.cve.org/CVERecord?id=CVE-2016-0466"
    }
  ],
  "initial_release_date": "2016-02-02T00:00:00",
  "last_revision_date": "2016-02-02T00:00:00",
  "links": [],
  "reference": "CERTFR-2016-AVI-044",
  "revisions": [
    {
      "description": "version initiale.",
      "revision_date": "2016-02-02T00:00:00.000000"
    }
  ],
  "risks": [
    {
      "description": "D\u00e9ni de service \u00e0 distance"
    },
    {
      "description": "Ex\u00e9cution de code arbitraire \u00e0 distance"
    },
    {
      "description": "D\u00e9ni de service"
    },
    {
      "description": "Atteinte \u00e0 la confidentialit\u00e9 des donn\u00e9es"
    },
    {
      "description": "\u00c9l\u00e9vation de privil\u00e8ges"
    }
  ],
  "summary": "De multiples vuln\u00e9rabilit\u00e9s ont \u00e9t\u00e9 corrig\u00e9es dans \u003cspan\nclass=\"textit\"\u003ele noyau Linux d\u0027Ubuntu\u003c/span\u003e. Certaines d\u0027entre elles\npermettent \u00e0 un attaquant de provoquer une ex\u00e9cution de code arbitraire\n\u00e0 distance, un d\u00e9ni de service \u00e0 distance et un d\u00e9ni de service.\n",
  "title": "Multiples vuln\u00e9rabilit\u00e9s dans le noyau Linux d\u0027Ubuntu",
  "vendor_advisories": [
    {
      "published_at": null,
      "title": "Bulletin de s\u00e9curit\u00e9 Ubuntu USN-2885-1 du 01 f\u00e9vrier 2016",
      "url": "http://www.ubuntu.com/usn/usn-2885-1/"
    },
    {
      "published_at": null,
      "title": "Bulletin de s\u00e9curit\u00e9 Ubuntu USN-2890-1 du 01 f\u00e9vrier 2016",
      "url": "http://www.ubuntu.com/usn/usn-2890-1/"
    },
    {
      "published_at": null,
      "title": "Bulletin de s\u00e9curit\u00e9 Ubuntu USN-2887-2 du 01 f\u00e9vrier 2016",
      "url": "http://www.ubuntu.com/usn/usn-2887-2/"
    },
    {
      "published_at": null,
      "title": "Bulletin de s\u00e9curit\u00e9 Ubuntu USN-2889-2 du 01 f\u00e9vrier 2016",
      "url": "http://www.ubuntu.com/usn/usn-2889-2/"
    },
    {
      "published_at": null,
      "title": "Bulletin de s\u00e9curit\u00e9 Ubuntu USN-2884-1 du 01 f\u00e9vrier 2016",
      "url": "http://www.ubuntu.com/usn/usn-2884-1/"
    },
    {
      "published_at": null,
      "title": "Bulletin de s\u00e9curit\u00e9 Ubuntu USN-2886-1 du 01 f\u00e9vrier 2016",
      "url": "http://www.ubuntu.com/usn/usn-2886-1/"
    },
    {
      "published_at": null,
      "title": "Bulletin de s\u00e9curit\u00e9 Ubuntu USN-2888-1 du 01 f\u00e9vrier 2016",
      "url": "http://www.ubuntu.com/usn/usn-2888-1/"
    },
    {
      "published_at": null,
      "title": "Bulletin de s\u00e9curit\u00e9 Ubuntu USN-2890-2 du 01 f\u00e9vrier 2016",
      "url": "http://www.ubuntu.com/usn/usn-2890-2/"
    },
    {
      "published_at": null,
      "title": "Bulletin de s\u00e9curit\u00e9 Ubuntu USN-2890-3 du 01 f\u00e9vrier 2016",
      "url": "http://www.ubuntu.com/usn/usn-2890-3/"
    },
    {
      "published_at": null,
      "title": "Bulletin de s\u00e9curit\u00e9 Ubuntu USN-2887-1 du 01 f\u00e9vrier 2016",
      "url": "http://www.ubuntu.com/usn/usn-2887-1/"
    },
    {
      "published_at": null,
      "title": "Bulletin de s\u00e9curit\u00e9 Ubuntu USN-2889-1 du 01 f\u00e9vrier 2016",
      "url": "http://www.ubuntu.com/usn/usn-2889-1/"
    },
    {
      "published_at": null,
      "title": "Bulletin de s\u00e9curit\u00e9 Ubuntu USN-2886-2 du 01 f\u00e9vrier 2016",
      "url": "http://www.ubuntu.com/usn/usn-2886-2/"
    }
  ]
}

CERTFR-2015-AVI-554

Vulnerability from certfr_avis - Published: 2015-12-21 - Updated: 2015-12-21

De multiples vulnérabilités ont été corrigées dans le noyau Linux de Debian. Elles permettent à un attaquant de provoquer un déni de service à distance, une atteinte à la confidentialité des données et une élévation de privilèges.

Solution

Se référer au bulletin de sécurité de l'éditeur pour l'obtention des correctifs (cf. section Documentation).

None

Impacted products

	Vendor	Product	Description
	Debian	N/A	Debian Wheezy versions antérieures à 3.2.73-2+deb7u1
	Debian	N/A	Debian Jessie versions antérieures à 3.16.7-ckt20-1+deb8u1

References

Title

Publication Time

Tags

Bulletin de sécurité Debian DSA-3426-1 du 17 décembre 2015

None

vendor-advisory

Show details on source website

JSON

To clipboard

{
  "$ref": "https://www.cert.ssi.gouv.fr/openapi.json",
  "affected_systems": [
    {
      "description": "Debian Wheezy versions ant\u00e9rieures \u00e0 3.2.73-2+deb7u1",
      "product": {
        "name": "N/A",
        "vendor": {
          "name": "Debian",
          "scada": false
        }
      }
    },
    {
      "description": "Debian Jessie versions ant\u00e9rieures \u00e0 3.16.7-ckt20-1+deb8u1",
      "product": {
        "name": "N/A",
        "vendor": {
          "name": "Debian",
          "scada": false
        }
      }
    }
  ],
  "affected_systems_content": null,
  "content": "## Solution\n\nSe r\u00e9f\u00e9rer au bulletin de s\u00e9curit\u00e9 de l\u0027\u00e9diteur pour l\u0027obtention des\ncorrectifs (cf. section Documentation).\n",
  "cves": [
    {
      "name": "CVE-2015-7833",
      "url": "https://www.cve.org/CVERecord?id=CVE-2015-7833"
    },
    {
      "name": "CVE-2013-7446",
      "url": "https://www.cve.org/CVERecord?id=CVE-2013-7446"
    },
    {
      "name": "CVE-2015-8104",
      "url": "https://www.cve.org/CVERecord?id=CVE-2015-8104"
    },
    {
      "name": "CVE-2015-7799",
      "url": "https://www.cve.org/CVERecord?id=CVE-2015-7799"
    },
    {
      "name": "CVE-2015-8543",
      "url": "https://www.cve.org/CVERecord?id=CVE-2015-8543"
    },
    {
      "name": "CVE-2015-8374",
      "url": "https://www.cve.org/CVERecord?id=CVE-2015-8374"
    }
  ],
  "initial_release_date": "2015-12-21T00:00:00",
  "last_revision_date": "2015-12-21T00:00:00",
  "links": [],
  "reference": "CERTFR-2015-AVI-554",
  "revisions": [
    {
      "description": "version initiale.",
      "revision_date": "2015-12-21T00:00:00.000000"
    }
  ],
  "risks": [
    {
      "description": "D\u00e9ni de service \u00e0 distance"
    },
    {
      "description": "Atteinte \u00e0 la confidentialit\u00e9 des donn\u00e9es"
    },
    {
      "description": "\u00c9l\u00e9vation de privil\u00e8ges"
    }
  ],
  "summary": "De multiples vuln\u00e9rabilit\u00e9s ont \u00e9t\u00e9 corrig\u00e9es dans le noyau Linux de\n\u003cspan class=\"textit\"\u003eDebian\u003c/span\u003e. Elles permettent \u00e0 un attaquant de\nprovoquer un d\u00e9ni de service \u00e0 distance, une atteinte \u00e0 la\nconfidentialit\u00e9 des donn\u00e9es et une \u00e9l\u00e9vation de privil\u00e8ges.\n",
  "title": "Multiples vuln\u00e9rabilit\u00e9s dans le noyau Linux de Debian",
  "vendor_advisories": [
    {
      "published_at": null,
      "title": "Bulletin de s\u00e9curit\u00e9 Debian DSA-3426-1 du 17 d\u00e9cembre 2015",
      "url": "https://www.debian.org/security/2015/dsa-3426"
    }
  ]
}

CNVD-2015-06890

Vulnerability from cnvd - Published: 2015-10-27

Title

Linux kernel拒绝服务漏洞（CNVD-2015-06890）

Description

Linux kernel是美国Linux基金会发布的操作系统Linux所使用的内核。 Linux kernel 4.2.2及之前版本的drivers/net/slip/slhc.c文件中的‘slhc_init’函数存在安全漏洞。本地攻击者可借助特制的PPPIOCSMAXCID ioctl调用利用该漏洞造成拒绝服务（空指针逆向引用和系统崩溃）。

Severity

中

Patch Name

Linux kernel拒绝服务漏洞（CNVD-2015-06890）的补丁

Patch Description

Formal description

目前厂商已经发布了升级补丁以修复此安全问题，详情请关注厂商主页： https://www.kernel.org/

Reference

https://bugzilla.redhat.com/show_bug.cgi?id=1271134 http://www.openwall.com/lists/oss-security/2015/10/10/3

Impacted products

Name
Linux Kernel <=4.2.2

Show details on source website

JSON

To clipboard

{
  "cves": {
    "cve": {
      "cveNumber": "CVE-2015-7799"
    }
  },
  "description": "Linux kernel\u662f\u7f8e\u56fdLinux\u57fa\u91d1\u4f1a\u53d1\u5e03\u7684\u64cd\u4f5c\u7cfb\u7edfLinux\u6240\u4f7f\u7528\u7684\u5185\u6838\u3002\r\n\r\nLinux kernel 4.2.2\u53ca\u4e4b\u524d\u7248\u672c\u7684drivers/net/slip/slhc.c\u6587\u4ef6\u4e2d\u7684\u2018slhc_init\u2019\u51fd\u6570\u5b58\u5728\u5b89\u5168\u6f0f\u6d1e\u3002\u672c\u5730\u653b\u51fb\u8005\u53ef\u501f\u52a9\u7279\u5236\u7684PPPIOCSMAXCID ioctl\u8c03\u7528\u5229\u7528\u8be5\u6f0f\u6d1e\u9020\u6210\u62d2\u7edd\u670d\u52a1\uff08\u7a7a\u6307\u9488\u9006\u5411\u5f15\u7528\u548c\u7cfb\u7edf\u5d29\u6e83\uff09\u3002",
  "discovererName": "Martin Prpic",
  "formalWay": "\u76ee\u524d\u5382\u5546\u5df2\u7ecf\u53d1\u5e03\u4e86\u5347\u7ea7\u8865\u4e01\u4ee5\u4fee\u590d\u6b64\u5b89\u5168\u95ee\u9898\uff0c\u8be6\u60c5\u8bf7\u5173\u6ce8\u5382\u5546\u4e3b\u9875\uff1a\r\nhttps://www.kernel.org/",
  "isEvent": "\u901a\u7528\u8f6f\u786c\u4ef6\u6f0f\u6d1e",
  "number": "CNVD-2015-06890",
  "openTime": "2015-10-27",
  "patchDescription": "Linux kernel\u662f\u7f8e\u56fdLinux\u57fa\u91d1\u4f1a\u53d1\u5e03\u7684\u64cd\u4f5c\u7cfb\u7edfLinux\u6240\u4f7f\u7528\u7684\u5185\u6838\u3002\r\nLinux kernel 4.2.2\u53ca\u4e4b\u524d\u7248\u672c\u7684drivers/net/slip/slhc.c\u6587\u4ef6\u4e2d\u7684\u2018slhc_init\u2019\u51fd\u6570\u5b58\u5728\u5b89\u5168\u6f0f\u6d1e\u3002\u672c\u5730\u653b\u51fb\u8005\u53ef\u501f\u52a9\u7279\u5236\u7684PPPIOCSMAXCID ioctl\u8c03\u7528\u5229\u7528\u8be5\u6f0f\u6d1e\u9020\u6210\u62d2\u7edd\u670d\u52a1\uff08\u7a7a\u6307\u9488\u9006\u5411\u5f15\u7528\u548c\u7cfb\u7edf\u5d29\u6e83\uff09\u3002\u76ee\u524d\uff0c\u4f9b\u5e94\u5546\u53d1\u5e03\u4e86\u5b89\u5168\u516c\u544a\u53ca\u76f8\u5173\u8865\u4e01\u4fe1\u606f\uff0c\u4fee\u590d\u4e86\u6b64\u6f0f\u6d1e\u3002",
  "patchName": "Linux kernel\u62d2\u7edd\u670d\u52a1\u6f0f\u6d1e\uff08CNVD-2015-06890\uff09\u7684\u8865\u4e01",
  "products": {
    "product": "Linux Kernel \u003c=4.2.2"
  },
  "referenceLink": "https://bugzilla.redhat.com/show_bug.cgi?id=1271134\r\nhttp://www.openwall.com/lists/oss-security/2015/10/10/3",
  "serverity": "\u4e2d",
  "submitTime": "2015-10-22",
  "title": "Linux kernel\u62d2\u7edd\u670d\u52a1\u6f0f\u6d1e\uff08CNVD-2015-06890\uff09"
}

FKIE_CVE-2015-7799

Vulnerability from fkie_nvd - Published: 2015-10-19 10:59 - Updated: 2025-04-12 10:46

Severity ?

Summary

References

URL	Tags
cve@mitre.org	http://lists.opensuse.org/opensuse-security-announce/2015-12/msg00005.html
cve@mitre.org	http://lists.opensuse.org/opensuse-security-announce/2015-12/msg00018.html
cve@mitre.org	http://lists.opensuse.org/opensuse-security-announce/2015-12/msg00026.html
cve@mitre.org	http://lists.opensuse.org/opensuse-security-announce/2015-12/msg00031.html
cve@mitre.org	http://lists.opensuse.org/opensuse-security-announce/2016-04/msg00015.html
cve@mitre.org	http://lists.opensuse.org/opensuse-security-announce/2016-08/msg00038.html
cve@mitre.org	http://lists.opensuse.org/opensuse-updates/2015-12/msg00039.html
cve@mitre.org	http://www.debian.org/security/2015/dsa-3426
cve@mitre.org	http://www.openwall.com/lists/oss-security/2015/10/10/3
cve@mitre.org	http://www.securityfocus.com/bid/77033
cve@mitre.org	http://www.securitytracker.com/id/1033809
cve@mitre.org	http://www.ubuntu.com/usn/USN-2841-1
cve@mitre.org	http://www.ubuntu.com/usn/USN-2841-2
cve@mitre.org	http://www.ubuntu.com/usn/USN-2842-1
cve@mitre.org	http://www.ubuntu.com/usn/USN-2842-2
cve@mitre.org	http://www.ubuntu.com/usn/USN-2843-1
cve@mitre.org	http://www.ubuntu.com/usn/USN-2843-2
cve@mitre.org	http://www.ubuntu.com/usn/USN-2843-3
cve@mitre.org	http://www.ubuntu.com/usn/USN-2844-1
cve@mitre.org	http://www.ubuntu.com/usn/USN-2886-1
cve@mitre.org	https://bugzilla.redhat.com/show_bug.cgi?id=1271134
cve@mitre.org	https://code.google.com/p/android/issues/detail?id=187973	Exploit
af854a3a-2127-422b-91ae-364da2661108	http://lists.opensuse.org/opensuse-security-announce/2015-12/msg00005.html
af854a3a-2127-422b-91ae-364da2661108	http://lists.opensuse.org/opensuse-security-announce/2015-12/msg00018.html
af854a3a-2127-422b-91ae-364da2661108	http://lists.opensuse.org/opensuse-security-announce/2015-12/msg00026.html
af854a3a-2127-422b-91ae-364da2661108	http://lists.opensuse.org/opensuse-security-announce/2015-12/msg00031.html
af854a3a-2127-422b-91ae-364da2661108	http://lists.opensuse.org/opensuse-security-announce/2016-04/msg00015.html
af854a3a-2127-422b-91ae-364da2661108	http://lists.opensuse.org/opensuse-security-announce/2016-08/msg00038.html
af854a3a-2127-422b-91ae-364da2661108	http://lists.opensuse.org/opensuse-updates/2015-12/msg00039.html
af854a3a-2127-422b-91ae-364da2661108	http://www.debian.org/security/2015/dsa-3426
af854a3a-2127-422b-91ae-364da2661108	http://www.openwall.com/lists/oss-security/2015/10/10/3
af854a3a-2127-422b-91ae-364da2661108	http://www.securityfocus.com/bid/77033
af854a3a-2127-422b-91ae-364da2661108	http://www.securitytracker.com/id/1033809
af854a3a-2127-422b-91ae-364da2661108	http://www.ubuntu.com/usn/USN-2841-1
af854a3a-2127-422b-91ae-364da2661108	http://www.ubuntu.com/usn/USN-2841-2
af854a3a-2127-422b-91ae-364da2661108	http://www.ubuntu.com/usn/USN-2842-1
af854a3a-2127-422b-91ae-364da2661108	http://www.ubuntu.com/usn/USN-2842-2
af854a3a-2127-422b-91ae-364da2661108	http://www.ubuntu.com/usn/USN-2843-1
af854a3a-2127-422b-91ae-364da2661108	http://www.ubuntu.com/usn/USN-2843-2
af854a3a-2127-422b-91ae-364da2661108	http://www.ubuntu.com/usn/USN-2843-3
af854a3a-2127-422b-91ae-364da2661108	http://www.ubuntu.com/usn/USN-2844-1
af854a3a-2127-422b-91ae-364da2661108	http://www.ubuntu.com/usn/USN-2886-1
af854a3a-2127-422b-91ae-364da2661108	https://bugzilla.redhat.com/show_bug.cgi?id=1271134
af854a3a-2127-422b-91ae-364da2661108	https://code.google.com/p/android/issues/detail?id=187973	Exploit

Impacted products

	Vendor	Product	Version
	linux	linux_kernel	*

JSON

To clipboard

{
  "configurations": [
    {
      "nodes": [
        {
          "cpeMatch": [
            {
              "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
              "matchCriteriaId": "137B78AE-9E92-484D-92CA-14AEC289227F",
              "versionEndIncluding": "4.2.2",
              "vulnerable": true
            }
          ],
          "negate": false,
          "operator": "OR"
        }
      ]
    }
  ],
  "cveTags": [],
  "descriptions": [
    {
      "lang": "en",
      "value": "The slhc_init function in drivers/net/slip/slhc.c in the Linux kernel through 4.2.3 does not ensure that certain slot numbers are valid, which allows local users to cause a denial of service (NULL pointer dereference and system crash) via a crafted PPPIOCSMAXCID ioctl call."
    },
    {
      "lang": "es",
      "value": "La funci\u00f3n slhc_init en drivers/net/slip/slhc.c en el kernel de Linux hasta la versi\u00f3n 4.2.3 no asegura que ciertos n\u00fameros de ranura sean v\u00e1lidos, lo que permite a usuarios locales provocar una denegaci\u00f3n de servicio (referencia a puntero NULL y ca\u00edda del sistema) a trav\u00e9s de una llamada PPPIOCSMAXCID ioctl manipulada."
    }
  ],
  "evaluatorComment": "\u003ca href=\"http://cwe.mitre.org/data/definitions/476.html\"\u003eCWE-476: NULL Pointer Dereference\u003c/a\u003e",
  "id": "CVE-2015-7799",
  "lastModified": "2025-04-12T10:46:40.837",
  "metrics": {
    "cvssMetricV2": [
      {
        "acInsufInfo": false,
        "baseSeverity": "MEDIUM",
        "cvssData": {
          "accessComplexity": "LOW",
          "accessVector": "LOCAL",
          "authentication": "NONE",
          "availabilityImpact": "COMPLETE",
          "baseScore": 4.9,
          "confidentialityImpact": "NONE",
          "integrityImpact": "NONE",
          "vectorString": "AV:L/AC:L/Au:N/C:N/I:N/A:C",
          "version": "2.0"
        },
        "exploitabilityScore": 3.9,
        "impactScore": 6.9,
        "obtainAllPrivilege": false,
        "obtainOtherPrivilege": false,
        "obtainUserPrivilege": false,
        "source": "nvd@nist.gov",
        "type": "Primary",
        "userInteractionRequired": false
      }
    ]
  },
  "published": "2015-10-19T10:59:09.367",
  "references": [
    {
      "source": "cve@mitre.org",
      "url": "http://lists.opensuse.org/opensuse-security-announce/2015-12/msg00005.html"
    },
    {
      "source": "cve@mitre.org",
      "url": "http://lists.opensuse.org/opensuse-security-announce/2015-12/msg00018.html"
    },
    {
      "source": "cve@mitre.org",
      "url": "http://lists.opensuse.org/opensuse-security-announce/2015-12/msg00026.html"
    },
    {
      "source": "cve@mitre.org",
      "url": "http://lists.opensuse.org/opensuse-security-announce/2015-12/msg00031.html"
    },
    {
      "source": "cve@mitre.org",
      "url": "http://lists.opensuse.org/opensuse-security-announce/2016-04/msg00015.html"
    },
    {
      "source": "cve@mitre.org",
      "url": "http://lists.opensuse.org/opensuse-security-announce/2016-08/msg00038.html"
    },
    {
      "source": "cve@mitre.org",
      "url": "http://lists.opensuse.org/opensuse-updates/2015-12/msg00039.html"
    },
    {
      "source": "cve@mitre.org",
      "url": "http://www.debian.org/security/2015/dsa-3426"
    },
    {
      "source": "cve@mitre.org",
      "url": "http://www.openwall.com/lists/oss-security/2015/10/10/3"
    },
    {
      "source": "cve@mitre.org",
      "url": "http://www.securityfocus.com/bid/77033"
    },
    {
      "source": "cve@mitre.org",
      "url": "http://www.securitytracker.com/id/1033809"
    },
    {
      "source": "cve@mitre.org",
      "url": "http://www.ubuntu.com/usn/USN-2841-1"
    },
    {
      "source": "cve@mitre.org",
      "url": "http://www.ubuntu.com/usn/USN-2841-2"
    },
    {
      "source": "cve@mitre.org",
      "url": "http://www.ubuntu.com/usn/USN-2842-1"
    },
    {
      "source": "cve@mitre.org",
      "url": "http://www.ubuntu.com/usn/USN-2842-2"
    },
    {
      "source": "cve@mitre.org",
      "url": "http://www.ubuntu.com/usn/USN-2843-1"
    },
    {
      "source": "cve@mitre.org",
      "url": "http://www.ubuntu.com/usn/USN-2843-2"
    },
    {
      "source": "cve@mitre.org",
      "url": "http://www.ubuntu.com/usn/USN-2843-3"
    },
    {
      "source": "cve@mitre.org",
      "url": "http://www.ubuntu.com/usn/USN-2844-1"
    },
    {
      "source": "cve@mitre.org",
      "url": "http://www.ubuntu.com/usn/USN-2886-1"
    },
    {
      "source": "cve@mitre.org",
      "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1271134"
    },
    {
      "source": "cve@mitre.org",
      "tags": [
        "Exploit"
      ],
      "url": "https://code.google.com/p/android/issues/detail?id=187973"
    },
    {
      "source": "af854a3a-2127-422b-91ae-364da2661108",
      "url": "http://lists.opensuse.org/opensuse-security-announce/2015-12/msg00005.html"
    },
    {
      "source": "af854a3a-2127-422b-91ae-364da2661108",
      "url": "http://lists.opensuse.org/opensuse-security-announce/2015-12/msg00018.html"
    },
    {
      "source": "af854a3a-2127-422b-91ae-364da2661108",
      "url": "http://lists.opensuse.org/opensuse-security-announce/2015-12/msg00026.html"
    },
    {
      "source": "af854a3a-2127-422b-91ae-364da2661108",
      "url": "http://lists.opensuse.org/opensuse-security-announce/2015-12/msg00031.html"
    },
    {
      "source": "af854a3a-2127-422b-91ae-364da2661108",
      "url": "http://lists.opensuse.org/opensuse-security-announce/2016-04/msg00015.html"
    },
    {
      "source": "af854a3a-2127-422b-91ae-364da2661108",
      "url": "http://lists.opensuse.org/opensuse-security-announce/2016-08/msg00038.html"
    },
    {
      "source": "af854a3a-2127-422b-91ae-364da2661108",
      "url": "http://lists.opensuse.org/opensuse-updates/2015-12/msg00039.html"
    },
    {
      "source": "af854a3a-2127-422b-91ae-364da2661108",
      "url": "http://www.debian.org/security/2015/dsa-3426"
    },
    {
      "source": "af854a3a-2127-422b-91ae-364da2661108",
      "url": "http://www.openwall.com/lists/oss-security/2015/10/10/3"
    },
    {
      "source": "af854a3a-2127-422b-91ae-364da2661108",
      "url": "http://www.securityfocus.com/bid/77033"
    },
    {
      "source": "af854a3a-2127-422b-91ae-364da2661108",
      "url": "http://www.securitytracker.com/id/1033809"
    },
    {
      "source": "af854a3a-2127-422b-91ae-364da2661108",
      "url": "http://www.ubuntu.com/usn/USN-2841-1"
    },
    {
      "source": "af854a3a-2127-422b-91ae-364da2661108",
      "url": "http://www.ubuntu.com/usn/USN-2841-2"
    },
    {
      "source": "af854a3a-2127-422b-91ae-364da2661108",
      "url": "http://www.ubuntu.com/usn/USN-2842-1"
    },
    {
      "source": "af854a3a-2127-422b-91ae-364da2661108",
      "url": "http://www.ubuntu.com/usn/USN-2842-2"
    },
    {
      "source": "af854a3a-2127-422b-91ae-364da2661108",
      "url": "http://www.ubuntu.com/usn/USN-2843-1"
    },
    {
      "source": "af854a3a-2127-422b-91ae-364da2661108",
      "url": "http://www.ubuntu.com/usn/USN-2843-2"
    },
    {
      "source": "af854a3a-2127-422b-91ae-364da2661108",
      "url": "http://www.ubuntu.com/usn/USN-2843-3"
    },
    {
      "source": "af854a3a-2127-422b-91ae-364da2661108",
      "url": "http://www.ubuntu.com/usn/USN-2844-1"
    },
    {
      "source": "af854a3a-2127-422b-91ae-364da2661108",
      "url": "http://www.ubuntu.com/usn/USN-2886-1"
    },
    {
      "source": "af854a3a-2127-422b-91ae-364da2661108",
      "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1271134"
    },
    {
      "source": "af854a3a-2127-422b-91ae-364da2661108",
      "tags": [
        "Exploit"
      ],
      "url": "https://code.google.com/p/android/issues/detail?id=187973"
    }
  ],
  "sourceIdentifier": "cve@mitre.org",
  "vulnStatus": "Deferred",
  "weaknesses": [
    {
      "description": [
        {
          "lang": "en",
          "value": "NVD-CWE-Other"
        }
      ],
      "source": "nvd@nist.gov",
      "type": "Primary"
    }
  ]
}

Tags

Taxonomy of the tags.

All sightings related to this event Export sightings related to this event

Sightings

Author	Source	Type	Date

Nomenclature

Seen: The vulnerability was mentioned, discussed, or observed by the user.
Confirmed: The vulnerability has been validated from an analyst's perspective.
Published Proof of Concept: A public proof of concept is available for this vulnerability.
Exploited: The vulnerability was observed as exploited by the user who reported the sighting.
Patched: The vulnerability was observed as successfully patched by the user who reported the sighting.
Not exploited: The vulnerability was not observed as exploited by the user who reported the sighting.
Not confirmed: The user expressed doubt about the validity of the vulnerability.
Not patched: The vulnerability was not observed as successfully patched by the user who reported the sighting.

Detection rules are retrieved from Rulezet.

Action not permitted

CVE-2015-7799 (GCVE-0-2015-7799)

Solution

Solution

Solution

Solution

Solution

Tags

Sightings

Nomenclature