CVE-2015-4004
- State
- Published
- Severity
- Not scored
- Published
- Jun 7, 2015
- Updated
- Aug 6, 2024
- Reserved
- May 15, 2015
Description
The OZWPAN driver in the Linux kernel through 4.0.5 relies on an untrusted length field during packet parsing, which allows remote attackers to obtain sensitive information from kernel memory or cause a denial of service (out-of-bounds read and system crash) via a crafted packet.
Scores
The record has no CVSS score.
Weaknesses
The record names no weakness.
Affected Products
| Product | Versions |
|---|---|
n/an/a |
|
References
- USN-3004-1vendor-advisory
- 74669vdb-entry
- [linux-kernel] 20150513 [PATCH 0/4] ozwpan: Four remote packet-of-death vulnerabilitiesmailing-list
- USN-3001-1vendor-advisory
- USN-3000-1vendor-advisory
- USN-3002-1vendor-advisory
- USN-2989-1vendor-advisory
- [oss-security] 20150605 Re: CVE Request: Linux Kernel Ozwpan Driver - Remote packet-of-death vulnerabilitiesmailing-list
- USN-3003-1vendor-advisory
- USN-2998-1vendor-advisory
Every record here comes from the CVE Program’s CVE List. © 1999–2026 The MITRE Corporation. CVE is a registered trademark of The MITRE Corporation. The records are reproduced under the CVE Program terms of use.