Published: 28/12/2015 Updated: 07/11/2023

CVSS v2 Base Score: 1.9 | Impact Score: 2.9 | Exploitability Score: 3.4

CVSS v3 Base Score: 2.3 | Impact Score: 1.4 | Exploitability Score: 0.8

VMScore: 170

Vector: AV:L/AC:M/Au:N/C:P/I:N/A:N

The (1) pptp_bind and (2) pptp_connect functions in drivers/net/ppp/pptp.c in the Linux kernel up to and including 4.3.3 do not verify an address length, which allows local users to obtain sensitive information from kernel memory and bypass the KASLR protection mechanism via a crafted application.

Vulnerable Product	Search on Vulmon	Subscribe to Product
linux linux kernel

Debian Bug report logs - #808293 Regression in short UDP reads caused by "net: Fix skb csum races when peeking" Package: src:linux; Maintainer for src:linux is Debian Kernel Team <debian-kernel@listsdebianorg>; Affects: freeradius Reported by: Francesco Politi <fpoliti@micsoit> Date: Fri, 18 Dec 2015 12:09:01 UTC ...

Several security issues were fixed in the kernel ...

USN-2910-1 introduced a regression in the Ubuntu 1504 Linux kernel backported to Ubuntu 1404 LTS ...

Several security issues were fixed in the kernel ...

CWE-200 http://www.openwall.com/lists/oss-security/2015/12/15/11 http://www.ubuntu.com/usn/USN-2886-1 http://www.ubuntu.com/usn/USN-2890-3 http://www.securityfocus.com/bid/79428 http://git.kernel.org/cgit/linux/kernel/git/torvalds/linux.git/commit/?id=09ccfd238e5a0e670d8178cf50180ea81ae09ae1 http://twitter.com/grsecurity/statuses/676744240802750464 http://lists.opensuse.org/opensuse-security-announce/2016-04/msg00045.html https://lkml.org/lkml/2015/12/14/252 http://lists.fedoraproject.org/pipermail/package-announce/2016-February/176484.html http://lists.opensuse.org/opensuse-security-announce/2016-08/msg00038.html http://www.ubuntu.com/usn/USN-2890-2 https://github.com/torvalds/linux/commit/09ccfd238e5a0e670d8178cf50180ea81ae09ae1 http://www.securitytracker.com/id/1034549 https://bugzilla.redhat.com/show_bug.cgi?id=1292045 http://www.ubuntu.com/usn/USN-2890-1 http://www.debian.org/security/2016/dsa-3434 http://www.ubuntu.com/usn/USN-2888-1 http://lists.opensuse.org/opensuse-security-announce/2016-03/msg00094.html https://nvd.nist.gov https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=808293 https://usn.ubuntu.com/2886-1/

CVE-2015-8569

Vulnerability Summary

Vendor Advisories

References

Vulmon Search

About

Products

Connect