Published: 08/02/2016 Updated: 09/10/2018

CVSS v2 Base Score: 4.9 | Impact Score: 6.9 | Exploitability Score: 3.9

CVSS v3 Base Score: 4.6 | Impact Score: 3.6 | Exploitability Score: 0.9

VMScore: 495

Vector: AV:L/AC:L/Au:N/C:N/I:N/A:C

Subscribe to Suse Linux Enterprise Real Time Extension

The clie_5_attach function in drivers/usb/serial/visor.c in the Linux kernel up to and including 4.4.1 allows physically proximate malicious users to cause a denial of service (NULL pointer dereference and system crash) or possibly have unspecified other impact by inserting a USB device that lacks a bulk-out endpoint.

Vulnerable Product	Search on Vulmon	Subscribe to Product
novell suse linux enterprise real time extension 12
novell suse linux enterprise debuginfo 11
novell suse linux enterprise software development kit 11
novell suse linux enterprise real time extension 11
novell suse linux enterprise server 11
linux linux kernel

Several vulnerabilities have been discovered in the Linux kernel that may lead to a privilege escalation or denial-of-service CVE-2013-4312 Tetsuo Handa discovered that it is possible for a process to open far more files than the process' limit leading to denial-of-service conditions CVE-2015-7566 Ralf Spenneberg of OpenSource Se ...

A flaw was found in the way the Linux kernel visor driver handles certain invalid USB device descriptors The driver assumes that the device always has at least one bulk OUT endpoint By using a specially crafted USB device (without a bulk OUT endpoint), an unprivileged user with physical access could trigger a kernel NULL-pointer dereference and c ...

Several security issues were fixed in the kernel ...

USN 2948-1 introduced a regression in the Ubuntu 1410 Linux kernel backported to Ubuntu 1404 LTS ...

Several security issues were fixed in the kernel ...

OS-S Security Advisory 2016-09 Linux visor clie_5_attach Nullpointer Dereference Date: March 4th, 2016 Authors: Sergej Schumilo, Hendrik Schwartke, Ralf Spenneberg CVE: CVE-2015-7566 CVSS: 49 (AV:L/AC:L/Au:N/C:N/I:N/A:C) Title: Local RedHat Enterprise Linux DoS â?? RHEL 71 Kernel crashes on invalid USB device descriptors (visor clie_5_attach d ...

Linux kernel version 3100-229201el7x86_64 crashes on presentation of a buggy USB device requiring the visor (clie_5_attach) driver ...

NVD-CWE-Other https://github.com/torvalds/linux/commit/cb3232138e37129e88240a98a1d2aba2187ff57c https://security-tracker.debian.org/tracker/CVE-2015-7566 https://bugzilla.redhat.com/show_bug.cgi?id=1296466 http://git.kernel.org/cgit/linux/kernel/git/torvalds/linux.git/commit/?id=cb3232138e37129e88240a98a1d2aba2187ff57c https://bugzilla.redhat.com/show_bug.cgi?id=1283371 http://lists.opensuse.org/opensuse-security-announce/2016-06/msg00052.html http://lists.opensuse.org/opensuse-security-announce/2016-06/msg00059.html http://lists.opensuse.org/opensuse-security-announce/2016-07/msg00005.html http://lists.opensuse.org/opensuse-security-announce/2016-08/msg00038.html http://www.securityfocus.com/bid/82975 http://www.debian.org/security/2016/dsa-3503 http://www.ubuntu.com/usn/USN-2967-1 http://www.ubuntu.com/usn/USN-2967-2 http://www.ubuntu.com/usn/USN-2930-1 http://www.ubuntu.com/usn/USN-2929-1 http://www.ubuntu.com/usn/USN-2932-1 http://www.ubuntu.com/usn/USN-2948-2 http://www.ubuntu.com/usn/USN-2930-3 http://www.ubuntu.com/usn/USN-2930-2 http://www.ubuntu.com/usn/USN-2929-2 http://www.ubuntu.com/usn/USN-2948-1 http://lists.fedoraproject.org/pipermail/package-announce/2016-February/176484.html http://lists.fedoraproject.org/pipermail/package-announce/2016-January/175792.html http://www.debian.org/security/2016/dsa-3448 http://lists.fedoraproject.org/pipermail/package-announce/2016-January/176194.html https://www.exploit-db.com/exploits/39540/http://www.securityfocus.com/archive/1/537733/100/0/threaded https://nvd.nist.gov https://www.debian.org/security/./dsa-3448 https://www.exploit-db.com/exploits/39540/https://usn.ubuntu.com/2967-1/

CVE-2015-7566

Vulnerability Summary

Vendor Advisories

Exploits

References

Vulmon Search

About

Products

Connect