Lucene search

K
cve[email protected]CVE-2015-4004
HistoryJun 07, 2015 - 11:59 p.m.

CVE-2015-4004

2015-06-0723:59:00
CWE-119
web.nvd.nist.gov
57
cve-2015-4004
ozwpan
linux kernel
packet parsing
denial of service
out-of-bounds read
system crash
nvd

8.6 High

AI Score

Confidence

High

8.5 High

CVSS2

Access Vector

NETWORK

Access Complexity

LOW

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

NONE

Availability Impact

COMPLETE

AV:N/AC:L/Au:N/C:P/I:N/A:C

0.028 Low

EPSS

Percentile

90.6%

The OZWPAN driver in the Linux kernel through 4.0.5 relies on an untrusted length field during packet parsing, which allows remote attackers to obtain sensitive information from kernel memory or cause a denial of service (out-of-bounds read and system crash) via a crafted packet.

8.6 High

AI Score

Confidence

High

8.5 High

CVSS2

Access Vector

NETWORK

Access Complexity

LOW

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

NONE

Availability Impact

COMPLETE

AV:N/AC:L/Au:N/C:P/I:N/A:C

0.028 Low

EPSS

Percentile

90.6%