CVE-2015-8816

EPSS 0.54%
Veröffentlicht 27.04.2016 17:59:03
Zuletzt bearbeitet 06.05.2026 22:30:45
Erkennungen
Login

The hub_activate function in drivers/usb/core/hub.c in the Linux kernel before 4.3.5 does not properly maintain a hub-interface data structure, which allows physically proximate attackers to cause a denial of service (invalid memory access and system crash) or possibly have unspecified other impact by unplugging a USB hub device.

Betroffene Produkte Warnungen 0 Metriken 3 CWE 0 Referenzen 30

NVD 23 VulnDex Vulnerability Enrichment 7

Daten sind bereitgestellt durch National Vulnerability Database (NVD)

Novell ≫ Suse Linux Enterprise Software Development Kit Version 11.0 Update sp4

Novell ≫ Suse Linux Enterprise Software Development Kit Version 12.0

Novell ≫ Suse Linux Enterprise Debuginfo Version 11 Update sp4

Novell ≫ Suse Linux Enterprise Desktop Version 12.0

Novell ≫ Suse Linux Enterprise Live Patching Version 12.0

Novell ≫ Suse Linux Enterprise Module For Public Cloud Version 12

Novell ≫ Suse Linux Enterprise Real Time Extension Version 11 Update sp4

Novell ≫ Suse Linux Enterprise Real Time Extension Version 12 Update sp1

Novell ≫ Suse Linux Enterprise Server Version 11 Update extra

Novell ≫ Suse Linux Enterprise Server Version 11 Update sp4

Novell ≫ Suse Linux Enterprise Server Version 12.0

Novell ≫ Suse Linux Enterprise Workstation Extension Version 12.0

Linux ≫ Linux Kernel Version >= 2.6.28 < 3.2.76

Linux ≫ Linux Kernel Version >= 3.3 < 3.4.113

Linux ≫ Linux Kernel Version >= 3.5 < 3.10.103

Linux ≫ Linux Kernel Version >= 3.11 < 3.12.58

Linux ≫ Linux Kernel Version >= 3.13 < 3.14.76

Linux ≫ Linux Kernel Version >= 3.15 < 3.16.35

Linux ≫ Linux Kernel Version >= 3.17 < 3.18.27

Linux ≫ Linux Kernel Version >= 3.19 < 4.1.17

Linux ≫ Linux Kernel Version >= 4.2 < 4.3.5

Suse ≫ Linux Enterprise Live Patching Version 12 Update -

Suse ≫ Linux Enterprise Server Version 12 SwEdition ltss

VulnDex Vulnerability Enrichment

Diese Information steht angemeldeten Benutzern zur Verfügung.

Zu dieser CVE wurde keine Warnung gefunden.

EPSS Metriken
Typ	Quelle	Score	Percentile
EPSS	FIRST.org	0.54%	0.413

CVSS Metriken
Quelle	Base Score	Exploit Score	Impact Score	Vector String
NIST	6.8	0.9	5.9	CVSS:3.1/AV:P/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
NIST	7.2	3.9	10	AV:L/AC:L/Au:N/C:C/I:C/A:C

Es wurden noch keine Informationen zu CWE veröffentlicht.

http://lists.opensuse.org/opensuse-security-announce/2016-08/msg00038.html

Third Party Advisory

http://www.oracle.com/technetwork/topics/security/linuxbulletinjul2016-3090544.html

Third Party Advisory

http://source.android.com/security/bulletin/2016-07-01.html

Third Party Advisory

http://lists.opensuse.org/opensuse-security-announce/2016-08/msg00003.html

Third Party Advisory

http://lists.opensuse.org/opensuse-security-announce/2016-08/msg00008.html

Third Party Advisory

http://lists.opensuse.org/opensuse-security-announce/2016-08/msg00009.html

Third Party Advisory

http://lists.opensuse.org/opensuse-security-announce/2016-08/msg00015.html

Third Party Advisory

http://lists.opensuse.org/opensuse-security-announce/2016-08/msg00016.html

Third Party Advisory

http://lists.opensuse.org/opensuse-security-announce/2016-08/msg00018.html

Third Party Advisory

http://lists.opensuse.org/opensuse-security-announce/2016-08/msg00019.html

Third Party Advisory

http://lists.opensuse.org/opensuse-security-announce/2016-08/msg00020.html

Third Party Advisory

http://lists.opensuse.org/opensuse-security-announce/2016-08/msg00021.html

Third Party Advisory

http://lists.opensuse.org/opensuse-security-announce/2016-08/msg00022.html

Third Party Advisory

http://lists.opensuse.org/opensuse-security-announce/2016-08/msg00026.html

Third Party Advisory

http://www.oracle.com/technetwork/topics/security/ovmbulletinoct2016-3090547.html

Third Party Advisory

http://www.debian.org/security/2016/dsa-3503

Third Party Advisory

http://lists.opensuse.org/opensuse-security-announce/2016-06/msg00052.html

Third Party Advisory

http://lists.opensuse.org/opensuse-security-announce/2016-06/msg00059.html

Third Party Advisory

http://lists.opensuse.org/opensuse-security-announce/2016-07/msg00005.html

Third Party Advisory

http://lists.opensuse.org/opensuse-security-announce/2016-04/msg00019.html

Third Party Advisory

http://git.kernel.org/cgit/linux/kernel/git/torvalds/linux.git/commit/?id=e50293ef9775c5f1cf3fcc093037dd6a8c5684ea

Vendor Advisory

http://lists.opensuse.org/opensuse-security-announce/2016-06/msg00054.html

Third Party Advisory

http://www.kernel.org/pub/linux/kernel/v4.x/ChangeLog-4.3.5

Vendor Advisory

http://www.openwall.com/lists/oss-security/2016/02/23/5

Mailing List

http://www.securityfocus.com/bid/83363

Third Party Advisory

VDB Entry

https://bugzilla.redhat.com/show_bug.cgi?id=1311589

Issue Tracking

https://github.com/torvalds/linux/commit/e50293ef9775c5f1cf3fcc093037dd6a8c5684ea

Patch

Vendor Advisory

https://nvd.nist.gov/vuln/detail/CVE-2015-8816

CVE Source (NVD)

https://cveawg.mitre.org/api/cve/CVE-2015-8816

CVE Source (JSON)

https://euvd.enisa.europa.eu/vulnerability/CVE-2015-8816

EUVD

Team-orientierte Vulnerability Management Plattform

Features der Plattform

CVE-2015-8816