VulnerabilityModified

CVE-2015-4004

The OZWPAN driver in the Linux kernel through 4.0.5 relies on an untrusted length field during packet parsing, which allows remote attackers to obtain sensitive information from kernel memory or cause a denial of service (out-of-bounds read and system…

HIGH 8.5EPSS 8.15%

Does this matter?

High impact if exploited, but EPSS currently rates exploitation as unlikely (8.15%). Schedule it in the normal patch cycle and watch for a rise in EPSS or a public exploit.

Description

CVSS 2.0: 8.5 HIGHAV:N/AC:L/Au:N/C:P/I:N/A:C
EPSS: 8.15% probability · 95th percentile
CISA KEV: Not listed
Weakness: CWE-119
Affected: canonical/ubuntu linux · linux/linux kernel
Source: cve@mitre.org

References

http://openwall.com/lists/oss-security/2015/06/05/7Mailing List, Third Party Advisory
http://www.securityfocus.com/bid/74669Third Party Advisory, VDB Entry
http://www.ubuntu.com/usn/USN-2989-1Third Party Advisory
http://www.ubuntu.com/usn/USN-2998-1Third Party Advisory
http://www.ubuntu.com/usn/USN-3000-1Third Party Advisory
http://www.ubuntu.com/usn/USN-3001-1Third Party Advisory
http://www.ubuntu.com/usn/USN-3002-1Third Party Advisory
http://www.ubuntu.com/usn/USN-3003-1Third Party Advisory
http://www.ubuntu.com/usn/USN-3004-1Third Party Advisory
https://lkml.org/lkml/2015/5/13/739Exploit, Vendor Advisory
http://openwall.com/lists/oss-security/2015/06/05/7Mailing List, Third Party Advisory
http://www.securityfocus.com/bid/74669Third Party Advisory, VDB Entry
http://www.ubuntu.com/usn/USN-2989-1Third Party Advisory
http://www.ubuntu.com/usn/USN-2998-1Third Party Advisory
http://www.ubuntu.com/usn/USN-3000-1Third Party Advisory
http://www.ubuntu.com/usn/USN-3001-1Third Party Advisory
http://www.ubuntu.com/usn/USN-3002-1Third Party Advisory
http://www.ubuntu.com/usn/USN-3003-1Third Party Advisory
http://www.ubuntu.com/usn/USN-3004-1Third Party Advisory
https://lkml.org/lkml/2015/5/13/739Exploit, Vendor Advisory

Source: NVD record, EPSS from FIRST.org, KEV from CISA. Refreshed daily.