// For flags

CVE-2015-7799

 

Severity Score

4.9
*CVSS v2

Exploit Likelihood

*EPSS

Affected Versions

*CPE

Public Exploits

1
*Multiple Sources

Exploited in Wild

-
*KEV

Decision

-
*SSVC
Descriptions

The slhc_init function in drivers/net/slip/slhc.c in the Linux kernel through 4.2.3 does not ensure that certain slot numbers are valid, which allows local users to cause a denial of service (NULL pointer dereference and system crash) via a crafted PPPIOCSMAXCID ioctl call.

La función slhc_init en drivers/net/slip/slhc.c en el kernel de Linux hasta la versión 4.2.3 no asegura que ciertos números de ranura sean válidos, lo que permite a usuarios locales provocar una denegación de servicio (referencia a puntero NULL y caída del sistema) a través de una llamada PPPIOCSMAXCID ioctl manipulada.

*Credits: N/A
CVSS Scores
Attack Vector
Local
Attack Complexity
Low
Authentication
None
Confidentiality
None
Integrity
None
Availability
Complete
* Common Vulnerability Scoring System
SSVC
  • Decision:-
Exploitation
-
Automatable
-
Tech. Impact
-
* Organization's Worst-case Scenario
Timeline
  • 2015-10-09 CVE Reserved
  • 2015-10-19 CVE Published
  • 2023-03-08 EPSS Updated
  • 2024-08-06 CVE Updated
  • 2024-08-06 First Exploit
  • ---------- Exploited in Wild
  • ---------- KEV Due Date
CWE
CAPEC
References (22)
URL Tag Source
http://www.openwall.com/lists/oss-security/2015/10/10/3 Mailing List
http://www.securityfocus.com/bid/77033 Vdb Entry
http://www.securitytracker.com/id/1033809 Vdb Entry
https://bugzilla.redhat.com/show_bug.cgi?id=1271134 X_refsource_confirm
URL Date SRC
https://code.google.com/p/android/issues/detail?id=187973 2024-08-06
URL Date SRC
URL Date SRC
http://lists.opensuse.org/opensuse-security-announce/2015-12/msg00005.html 2017-03-24
http://lists.opensuse.org/opensuse-security-announce/2015-12/msg00018.html 2017-03-24
http://lists.opensuse.org/opensuse-security-announce/2015-12/msg00026.html 2017-03-24
http://lists.opensuse.org/opensuse-security-announce/2015-12/msg00031.html 2017-03-24
http://lists.opensuse.org/opensuse-security-announce/2016-04/msg00015.html 2017-03-24
http://lists.opensuse.org/opensuse-security-announce/2016-08/msg00038.html 2017-03-24
http://lists.opensuse.org/opensuse-updates/2015-12/msg00039.html 2017-03-24
http://www.debian.org/security/2015/dsa-3426 2017-03-24
http://www.ubuntu.com/usn/USN-2841-1 2017-03-24
http://www.ubuntu.com/usn/USN-2841-2 2017-03-24
http://www.ubuntu.com/usn/USN-2842-1 2017-03-24
http://www.ubuntu.com/usn/USN-2842-2 2017-03-24
http://www.ubuntu.com/usn/USN-2843-1 2017-03-24
http://www.ubuntu.com/usn/USN-2843-2 2017-03-24
http://www.ubuntu.com/usn/USN-2843-3 2017-03-24
http://www.ubuntu.com/usn/USN-2844-1 2017-03-24
http://www.ubuntu.com/usn/USN-2886-1 2017-03-24
Affected Vendors, Products, and Versions
Vendor Product Version Other Status
Vendor Product Version Other Status <-- --> Vendor Product Version Other Status
Linux
Search vendor "Linux"
 Linux Kernel
Search vendor "Linux" for product "Linux Kernel"
 <= 4.2.2
Search vendor "Linux" for product "Linux Kernel" and version " <= 4.2.2"
-
Affected