CVE-2015-7799

 

Published at: - 19-10-2015 12:59

Last modified: - 21-09-2022 08:44

Total changes: - 2

Description

The slhc_init function in drivers/net/slip/slhc.c in the Linux kernel through 4.2.3 does not ensure that certain slot numbers are valid, which allows local users to cause a denial of service (NULL pointer dereference and system crash) via a crafted PPPIOCSMAXCID ioctl call.

Common Vulnerability Scoring System (CVSS)

AV:L/AC:L/Au:N/C:N/I:N/A:C

 

Verification logic

 

Reference

• [oss-security] 20151010 Re: CVE request - Android OS - Using the PPP character device driver caused the system to restart - Linux kernel-
• https://code.google.com/p/android/issues/detail?id=187973
• https://bugzilla.redhat.com/show_bug.cgi?id=1271134
• SUSE-SU-2016:2074-
• openSUSE-SU-2016:1008-
• USN-2886-1-
• USN-2843-1-
• USN-2842-1-
• USN-2844-1-
• SUSE-SU-2015:2194-
• SUSE-SU-2015:2339-
• SUSE-SU-2015:2350-
• USN-2841-1-
• USN-2842-2-
• USN-2843-3-
• USN-2841-2-
• USN-2843-2-
• DSA-3426-
• SUSE-SU-2015:2292-
• openSUSE-SU-2015:2232-
• 1033809-
• 77033-

 

Keywords

NVD

 

CVE-2015-7799

 

CVE

 

Common vulnerabilities & exposures

 

CVSS

 

Common vulnerability scoring system

 

Security

 

Vulnerabilities

 

Exposures