CVE-2015-1339
openSUSE Security Advisory - openSUSE-SU-2016:1008-1
Severity Score
6.2
*CVSS v3
Exploit Likelihood
*EPSS
Affected Versions
*CPE
Public Exploits
0
*Multiple Sources
Exploited in Wild
-
*KEV
Decision
-
*SSVC
Descriptions
Memory leak in the cuse_channel_release function in fs/fuse/cuse.c in the Linux kernel before 4.4 allows local users to cause a denial of service (memory consumption) or possibly have unspecified other impact by opening /dev/cuse many times.
Fuga de memoria en la función cuse_channel_release en fs/fuse/cuse.c en el kernel de Linux en versiones anteriores a 4.4 permite a usuarios locales provocar una denegación de servicio (consumo de memoria) o posiblemente tener otro impacto no especificado abriendo /dev/cuse muchas veces.
An update that solves 15 vulnerabilities and has 26 fixes is now available. The openSUSE Leap 42.1 kernel was updated to 4.1.20 to receive various security and bug fixes.
*Credits:
N/A
CVSS Scores
Attack Vector
Attack Complexity
Privileges Required
User Interaction
Scope
Confidentiality
Integrity
Availability
Attack Vector
Attack Complexity
Authentication
Confidentiality
Integrity
Availability
* Common Vulnerability Scoring System
SSVC
- Decision:-
Exploitation
Automatable
Tech. Impact
* Organization's Worst-case Scenario
Timeline
- 2015-01-22 CVE Reserved
- 2016-04-12 CVE Published
- 2024-08-06 CVE Updated
- 2025-07-10 EPSS Updated
- ---------- Exploited in Wild
- ---------- KEV Due Date
- ---------- First Exploit
CWE
- CWE-399: Resource Management Errors
CAPEC
References (8)
| URL | Tag | Source |
|---|---|---|
| http://git.kernel.org/cgit/linux/kernel/git/torvalds/linux.git/commit/?id=2c5816b4beccc8ba709144539f6fdd764f8fa49c | X_refsource_confirm | |
| https://bugzilla.novell.com/show_bug.cgi?id=969356 | Issue Tracking | |
| https://bugzilla.redhat.com/show_bug.cgi?id=1314331 | Issue Tracking | |
| https://security-tracker.debian.org/tracker/CVE-2015-1339 | X_refsource_confirm |
| URL | Date | SRC |
|---|
| URL | Date | SRC |
|---|---|---|
| http://www.openwall.com/lists/oss-security/2016/03/02/13 | 2016-12-01 | |
| https://github.com/torvalds/linux/commit/2c5816b4beccc8ba709144539f6fdd764f8fa49c | 2016-12-01 |
Affected Vendors, Products, and Versions
| Vendor | Product | Version | Other | Status | ||||||
|---|---|---|---|---|---|---|---|---|---|---|
| Vendor | Product | Version | Other | Status | <-- --> | Vendor | Product | Version | Other | Status |
| Linux Search vendor "Linux" | Linux Kernel Search vendor "Linux" for product "Linux Kernel" | <= 4.3.6 Search vendor "Linux" for product "Linux Kernel" and version " <= 4.3.6" | - |
Affected
| ||||||
| Novell Search vendor "Novell" | Suse Linux Enterprise Debuginfo Search vendor "Novell" for product "Suse Linux Enterprise Debuginfo" | 11 Search vendor "Novell" for product "Suse Linux Enterprise Debuginfo" and version "11" | sp4 |
Affected
| ||||||
| Novell Search vendor "Novell" | Suse Linux Enterprise Real Time Extension Search vendor "Novell" for product "Suse Linux Enterprise Real Time Extension" | 11 Search vendor "Novell" for product "Suse Linux Enterprise Real Time Extension" and version "11" | sp4 |
Affected
| ||||||