Published: 02/05/2016 Updated: 12/09/2023

CVSS v2 Base Score: 4.9 | Impact Score: 6.9 | Exploitability Score: 3.9

CVSS v3 Base Score: 4.6 | Impact Score: 3.6 | Exploitability Score: 0.9

VMScore: 437

Vector: AV:L/AC:L/Au:N/C:N/I:N/A:C

The ims_pcu_parse_cdc_data function in drivers/input/misc/ims-pcu.c in the Linux kernel prior to 4.5.1 allows physically proximate malicious users to cause a denial of service (system crash) via a USB device without both a master and a slave interface.

Vulnerable Product	Search on Vulmon	Subscribe to Product
novell suse linux enterprise module for public cloud 12.0
novell suse linux enterprise server 12.0
novell suse linux enterprise live patching 12.0
novell suse linux enterprise desktop 12.0
novell suse linux enterprise real time extension 12.0
novell suse linux enterprise workstation extension 12.0
novell suse linux enterprise software development kit 12.0
linux linux kernel
canonical ubuntu linux 14.04

The ims_pcu_parse_cdc_data function in drivers/input/misc/ims-pcuc in the Linux kernel before 451 allows physically proximate attackers to cause a denial of service (system crash) via a USB device without both a master and a slave interface ...

Several security issues were fixed in the kernel ...

NVD-CWE-Other http://www.kernel.org/pub/linux/kernel/v4.x/ChangeLog-4.5.1 https://bugzilla.novell.com/show_bug.cgi?id=971628 http://www.openwall.com/lists/oss-security/2016/03/30/6 https://github.com/torvalds/linux/commit/a0ad220c96692eda76b2e3fd7279f3dcd1d8a8ff http://git.kernel.org/cgit/linux/kernel/git/torvalds/linux.git/commit/?id=a0ad220c96692eda76b2e3fd7279f3dcd1d8a8ff https://bugzilla.redhat.com/show_bug.cgi?id=1320060 http://www.ubuntu.com/usn/USN-3000-1 http://lists.opensuse.org/opensuse-security-announce/2016-06/msg00056.html http://lists.opensuse.org/opensuse-security-announce/2016-06/msg00054.html http://lists.opensuse.org/opensuse-security-announce/2016-07/msg00005.html http://lists.opensuse.org/opensuse-security-announce/2016-05/msg00060.html http://www.ubuntu.com/usn/USN-2968-1 http://www.ubuntu.com/usn/USN-2971-1 http://www.ubuntu.com/usn/USN-2971-2 http://www.ubuntu.com/usn/USN-2970-1 http://www.ubuntu.com/usn/USN-2971-3 http://www.ubuntu.com/usn/USN-2968-2 http://www.securitytracker.com/id/1035441 https://nvd.nist.gov https://access.redhat.com/security/cve/cve-2016-3689 https://usn.ubuntu.com/2970-1/

CVE-2016-3689

Vulnerability Summary

Vendor Advisories

References

Vulmon Search

About

Products

Connect