CVE-2015-4004

2015-06-0700:00:00

ubuntu.com

8.5 High

CVSS2

Access Vector

NETWORK

Access Complexity

LOW

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

NONE

Availability Impact

COMPLETE

AV:N/AC:L/Au:N/C:P/I:N/A:C

0.028 Low

EPSS

Percentile

90.6%

JSON

The OZWPAN driver in the Linux kernel through 4.0.5 relies on an untrusted
length field during packet parsing, which allows remote attackers to obtain
sensitive information from kernel memory or cause a denial of service
(out-of-bounds read and system crash) via a crafted packet.

Bugs

<https://launchpad.net/bugs/1463740>

Notes

Author	Note
jdstrand	android kernels (flo, goldfish, grouper, maguro, mako and manta) are not supported on the Ubuntu Touch 14.10 and earlier preview kernels linux-lts-saucy no longer receives official support linux-lts-quantal no longer receives official support
apw	it seems that upstream gave up and ripped this driver out en-toto: commit a73e99cb67e7438e5ab0c524ae63a8a27616c839 Author: Jason A. Donenfeld <[email protected]> Date: Mon Aug 10 17:49:51 2015 +0200 staging: ozwpan: Remove from tree

OSVersionArchitecturePackageVersionFilename
ubuntu14.04noarchlinux< 3.13.0-87.133UNKNOWN
ubuntu15.10noarchlinux< 4.2.0-38.45UNKNOWN
ubuntu12.04noarchlinux-lts-trusty< 3.13.0-88.135~precise1UNKNOWN
ubuntu14.04noarchlinux-lts-utopic< 3.16.0-73.95~14.04.1UNKNOWN
ubuntu14.04noarchlinux-lts-vivid< 3.19.0-61.69~14.04.1UNKNOWN
ubuntu14.04noarchlinux-lts-wily< 4.2.0-38.45~14.04.1UNKNOWN
ubuntu15.10noarchlinux-raspi2< 4.2.0-1031.41UNKNOWN

OS	Version	Architecture	Package	Version	Filename
ubuntu	14.04	noarch	linux	< 3.13.0-87.133	UNKNOWN
ubuntu	15.10	noarch	linux	< 4.2.0-38.45	UNKNOWN
ubuntu	12.04	noarch	linux-lts-trusty	< 3.13.0-88.135~precise1	UNKNOWN
ubuntu	14.04	noarch	linux-lts-utopic	< 3.16.0-73.95~14.04.1	UNKNOWN
ubuntu	14.04	noarch	linux-lts-vivid	< 3.19.0-61.69~14.04.1	UNKNOWN
ubuntu	14.04	noarch	linux-lts-wily	< 4.2.0-38.45~14.04.1	UNKNOWN
ubuntu	15.10	noarch	linux-raspi2	< 4.2.0-1031.41	UNKNOWN