CVE-2015-0569

2016-05-0900:00:00

ubuntu.com

7.8 High

CVSS3

Attack Vector

LOCAL

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

REQUIRED

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

HIGH

Availability Impact

HIGH

CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H

9.3 High

CVSS2

Access Vector

NETWORK

Access Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

COMPLETE

Integrity Impact

COMPLETE

Availability Impact

COMPLETE

AV:N/AC:M/Au:N/C:C/I:C/A:C

0.004 Low

EPSS

Percentile

73.3%

JSON

Heap-based buffer overflow in the private wireless extensions IOCTL
implementation in wlan_hdd_wext.c in the WLAN (aka Wi-Fi) driver for the
Linux kernel 3.x and 4.x, as used in Qualcomm Innovation Center (QuIC)
Android contributions for MSM devices and other products, allows attackers
to gain privileges via a crafted application that establishes a packet
filter.

Bugs

<https://launchpad.net/bugs/1580361>

Notes

Author	Note
jdstrand	android kernels (flo, goldfish, grouper, maguro, mako and manta) are not supported on the Ubuntu Touch 14.10 and earlier preview kernels linux-lts-saucy no longer receives official support linux-lts-quantal no longer receives official support