Design/Logic Flaw

2015-06-0723:59:00

PRIOn knowledge base

www.prio-n.com

8.2 High

AI Score

Confidence

High

9 High

CVSS2

Access Vector

NETWORK

Access Complexity

LOW

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

COMPLETE

AV:N/AC:L/Au:N/C:P/I:P/A:C

0.016 Low

EPSS

Percentile

86.9%

JSON

drivers/staging/ozwpan/ozusbsvc1.c in the OZWPAN driver in the Linux kernel through 4.0.5 does not ensure that certain length values are sufficiently large, which allows remote attackers to cause a denial of service (system crash or large loop) or possibly execute arbitrary code via a crafted packet, related to the (1) oz_usb_rx and (2) oz_usb_handle_ep_data functions.

CPENameOperatorVersion
ubuntu_linuxeq15.10
ubuntu_linuxeq14.04
linux_kernelge3.15
linux_kernellt3.16.35
linux_kernellt3.4.109
linux_kernelge3.5
linux_kernellt3.10.81
linux_kernelge3.11
linux_kernellt3.12.45
linux_kernelge3.13

Name	Operator	Version
ubuntu_linux	eq	15.10
ubuntu_linux	eq	14.04
linux_kernel	ge	3.15
linux_kernel	lt	3.16.35
linux_kernel	lt	3.4.109
linux_kernel	ge	3.5
linux_kernel	lt	3.10.81
linux_kernel	ge	3.11
linux_kernel	lt	3.12.45
linux_kernel	ge	3.13