imPC@ndo IT

Tracker / CVE-2015-4003

CVE-2015-4003

High 7.8

The oz_usb_handle_ep_data function in drivers/staging/ozwpan/ozusbsvc1.c in the OZWPAN driver in the Linux kernel through 4.0.5 allows remote attackers to cause a denial of service (divide-by-zero error and system crash) via a crafted packet.

Affected products and versions

linux linux_kernel · 3.11 → 3.12.45
linux linux_kernel · 3.13 → 3.14.45
linux linux_kernel · 3.15 → 3.16.35
linux linux_kernel · 3.17 → 3.18.18
linux linux_kernel · 3.19 → 4.0.6
linux linux_kernel · 3.4 → 3.4.109
linux linux_kernel · 3.5 → 3.10.81

Analysis

This page is not indexable yet.Until it carries original analysis — what it actually exposes, how to check in two minutes whether a system was touched, what to do if it was — the page stays noindex. The database decides that, not the template.

References