Lucene search

K
debiancveDebian Security Bug TrackerDEBIANCVE:CVE-2015-4004
HistoryJun 07, 2015 - 11:59 p.m.

CVE-2015-4004

2015-06-0723:59:00
Debian Security Bug Tracker
security-tracker.debian.org
14

8.5 High

CVSS2

Access Vector

NETWORK

Access Complexity

LOW

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

NONE

Availability Impact

COMPLETE

AV:N/AC:L/Au:N/C:P/I:N/A:C

0.028 Low

EPSS

Percentile

90.6%

The OZWPAN driver in the Linux kernel through 4.0.5 relies on an untrusted length field during packet parsing, which allows remote attackers to obtain sensitive information from kernel memory or cause a denial of service (out-of-bounds read and system crash) via a crafted packet.

8.5 High

CVSS2

Access Vector

NETWORK

Access Complexity

LOW

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

NONE

Availability Impact

COMPLETE

AV:N/AC:L/Au:N/C:P/I:N/A:C

0.028 Low

EPSS

Percentile

90.6%