10

CVE-2015-8812

drivers/infiniband/hw/cxgb3/iwch_cm.c in the Linux kernel before 4.5 does not properly identify error conditions, which allows remote attackers to execute arbitrary code or cause a denial of service (use-after-free) via crafted packets.
Daten sind bereitgestellt durch National Vulnerability Database (NVD)
LinuxLinux Kernel Version < 3.2.78
LinuxLinux Kernel Version >= 3.3 < 3.10.99
LinuxLinux Kernel Version >= 3.11 < 3.12.56
LinuxLinux Kernel Version >= 3.13 < 3.14.63
LinuxLinux Kernel Version >= 3.15 < 3.16.35
LinuxLinux Kernel Version >= 3.17 < 3.18.31
LinuxLinux Kernel Version >= 3.19 < 4.1.22
LinuxLinux Kernel Version >= 4.2.0 < 4.4.4
CanonicalUbuntu Linux Version12.04 SwEdition-
CanonicalUbuntu Linux Version14.04 SwEditionesm
CanonicalUbuntu Linux Version15.10
VulnDex Vulnerability Enrichment
Diese Information steht angemeldeten Benutzern zur Verfügung. Login Login
Zu dieser CVE wurde keine Warnung gefunden.
EPSS Metriken
Typ Quelle Score Percentile
EPSS FIRST.org 3.61% 0.879
CVSS Metriken
Quelle Base Score Exploit Score Impact Score Vector String
nvd@nist.gov 9.8 3.9 5.9
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
nvd@nist.gov 10 10 10
AV:N/AC:L/Au:N/C:C/I:C/A:C
Es wurden noch keine Informationen zu CWE veröffentlicht.
http://www.openwall.com/lists/oss-security/2016/02/11/1
Third Party Advisory
Mailing List
Release Notes
http://www.securityfocus.com/bid/83218
Third Party Advisory
VDB Entry
https://bugzilla.redhat.com/show_bug.cgi?id=1303532
Third Party Advisory
Issue Tracking