Published: 28/09/2014 Updated: 14/03/2024

CVSS v2 Base Score: 6.9 | Impact Score: 10 | Exploitability Score: 3.4

VMScore: 615

Vector: AV:L/AC:M/Au:N/C:C/I:C/A:C

Multiple buffer overflows in the command_port_read_callback function in drivers/usb/serial/whiteheat.c in the Whiteheat USB Serial Driver in the Linux kernel prior to 3.16.2 allow physically proximate malicious users to execute arbitrary code or cause a denial of service (memory corruption and system crash) via a crafted device that provides a large amount of (1) EHCI or (2) XHCI data associated with a bulk response.

Vulnerable Product	Search on Vulmon	Subscribe to Product
linux linux kernel

Synopsis Important: kernel security and bug fix update Type/Severity Security Advisory: Important Topic Updated kernel packages that fix multiple security issues and several bugsare now available for Red Hat Enterprise Linux 65 Extended Update SupportRed Hat Product Security has rated this update as havin ...

Several security issues were fixed in the kernel ...

A memory corruption flaw was found in the way the USB ConnectTech WhiteHEAT serial driver processed completion commands sent via USB Request Blocks buffers An attacker with physical access to the system could use this flaw to crash the system or, potentially, escalate their privileges on the system ...

CWE-119 http://www.ubuntu.com/usn/USN-2377-1 http://rhn.redhat.com/errata/RHSA-2014-1318.html http://www.ubuntu.com/usn/USN-2375-1 https://github.com/torvalds/linux/commit/6817ae225cd650fb1c3295d769298c38b1eba818 http://lists.opensuse.org/opensuse-security-announce/2015-04/msg00000.html http://git.kernel.org/?p=linux/kernel/git/torvalds/linux-2.6.git%3Ba=commit%3Bh=6817ae225cd650fb1c3295d769298c38b1eba818 https://code.google.com/p/google-security-research/issues/detail?id=98 http://www.kernel.org/pub/linux/kernel/v3.x/ChangeLog-3.16.2 http://lists.opensuse.org/opensuse-security-announce/2015-03/msg00010.html http://www.openwall.com/lists/oss-security/2014/09/11/21 http://www.ubuntu.com/usn/USN-2378-1 http://lists.opensuse.org/opensuse-security-announce/2015-03/msg00025.html https://bugzilla.redhat.com/show_bug.cgi?id=1141400 http://rhn.redhat.com/errata/RHSA-2015-0284.html http://www.ubuntu.com/usn/USN-2374-1 http://www.securityfocus.com/bid/69781 http://www.ubuntu.com/usn/USN-2379-1 http://www.ubuntu.com/usn/USN-2376-1 http://lists.opensuse.org/opensuse-security-announce/2015-04/msg00020.html https://access.redhat.com/errata/RHSA-2015:0284 https://nvd.nist.gov https://usn.ubuntu.com/2376-1/https://access.redhat.com/security/cve/cve-2014-3185

CVE-2014-3185

Vulnerability Summary

Vulnerability Trend

Vendor Advisories

References

Vulmon Search

About

Products

Connect