CVE-2014-3183

2014-09-2810:55:00

Debian Security Bug Tracker

security-tracker.debian.org

6.9 Medium

CVSS2

Access Vector

LOCAL

Access Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

COMPLETE

Integrity Impact

COMPLETE

Availability Impact

COMPLETE

AV:L/AC:M/Au:N/C:C/I:C/A:C

0.001 Low

EPSS

Percentile

33.4%

JSON

Heap-based buffer overflow in the logi_dj_ll_raw_request function in drivers/hid/hid-logitech-dj.c in the Linux kernel before 3.16.2 allows physically proximate attackers to cause a denial of service (system crash) or possibly execute arbitrary code via a crafted device that specifies a large report size for an LED report.

OSVersionArchitecturePackageVersionFilename
Debian12alllinux< 3.16.2-2linux_3.16.2-2_all.deb
Debian11alllinux< 3.16.2-2linux_3.16.2-2_all.deb
Debian10alllinux< 3.16.2-2linux_3.16.2-2_all.deb
Debian999alllinux< 3.16.2-2linux_3.16.2-2_all.deb
Debian13alllinux< 3.16.2-2linux_3.16.2-2_all.deb

OS	Version	Architecture	Package	Version	Filename
Debian	12	all	linux	< 3.16.2-2	linux_3.16.2-2_all.deb
Debian	11	all	linux	< 3.16.2-2	linux_3.16.2-2_all.deb
Debian	10	all	linux	< 3.16.2-2	linux_3.16.2-2_all.deb
Debian	999	all	linux	< 3.16.2-2	linux_3.16.2-2_all.deb
Debian	13	all	linux	< 3.16.2-2	linux_3.16.2-2_all.deb