Lucene search

K
vulnrichmentMitreVULNRICHMENT:CVE-2016-20022
HistoryJun 27, 2024 - 12:00 a.m.

CVE-2016-20022

2024-06-2700:00:00
mitre
github.com
4
linux
kernel
usb
endpoint descriptor
vulnerability
validation
unsupported products

AI Score

6.3

Confidence

Low

SSVC

Exploitation

none

Automatable

no

Technical Impact

partial

In the Linux kernel before 4.8, usb_parse_endpoint in drivers/usb/core/config.c does not validate the wMaxPacketSize field of an endpoint descriptor. NOTE: This vulnerability only affects products that are no longer supported by the supplier.

AI Score

6.3

Confidence

Low

SSVC

Exploitation

none

Automatable

no

Technical Impact

partial

Related for VULNRICHMENT:CVE-2016-20022