CVE-2015-5707
Ubuntu Security Notice USN-2759-1
Severity Score
Exploit Likelihood
Affected Versions
10Public Exploits
0Exploited in Wild
-Decision
Descriptions
Integer overflow in the sg_start_req function in drivers/scsi/sg.c in the Linux kernel 2.6.x through 4.x before 4.1 allows local users to cause a denial of service or possibly have unspecified other impact via a large iov_count value in a write request.
Desbordamiento de entero en la función sg_start_req en drivers/scsi/sg.c en el kernel de Linux 2.6.x hasta la versión 4.x en versiones anteriores a 4.1 permite a usuarios locales provocar una denegación de servicio o posiblemente tener otro impacto no especificado a través de un valor iov_count grande en una petición de escritura.
It was discovered that an integer overflow error existed in the SCSI generic (sg) driver in the Linux kernel. A local attacker with write permission to a SCSI generic device could use this to cause a denial of service (system crash) or potentially escalate their privileges. Lureau discovered that the vhost driver did not properly release the userspace provided log file descriptor. A privileged attacker could use this to cause a denial of service (resource exhaustion). Various other issues were also addressed.
CVSS Scores
SSVC
- Decision:-
Timeline
- 2015-08-02 CVE Reserved
- 2015-08-07 CVE Published
- 2024-08-06 CVE Updated
- 2025-03-30 EPSS Updated
- ---------- Exploited in Wild
- ---------- KEV Due Date
- ---------- First Exploit
CWE
- CWE-190: Integer Overflow or Wraparound
CAPEC
References (27)
| URL | Tag | Source |
|---|---|---|
| http://www.openwall.com/lists/oss-securit... | Mailing List |
|
| http://www.securityfocus.com/bid/76145 | Third Party Advisory | |
| http://www.securitytracker.com/id/1033521 | Third Party Advisory | |
| https://bugzilla.redhat.com/show_bug.cgi?... | Issue Tracking | |
| https://source.android.com/security/bulle... | Third Party Advisory |
| URL | Date | SRC |
|---|