Published: 02/05/2016 Updated: 13/08/2017

CVSS v2 Base Score: 4.9 | Impact Score: 6.9 | Exploitability Score: 3.9

CVSS v3 Base Score: 4.6 | Impact Score: 3.6 | Exploitability Score: 0.9

VMScore: 437

Vector: AV:L/AC:L/Au:N/C:N/I:N/A:C

Double free vulnerability in drivers/net/usb/cdc_ncm.c in the Linux kernel prior to 4.5 allows physically proximate malicious users to cause a denial of service (system crash) or possibly have unspecified other impact by inserting a USB device with an invalid USB descriptor.

Vulnerable Product	Search on Vulmon	Subscribe to Product
canonical ubuntu linux 15.10
canonical ubuntu linux 14.04
canonical ubuntu linux 12.04
novell suse linux enterprise desktop 12
novell suse linux enterprise module for public cloud 12
novell suse linux enterprise real time extension 12
novell suse linux enterprise software development kit 12.0
novell suse linux enterprise workstation extension 12.0
novell suse linux enterprise server 12.0
novell suse linux enterprise live patching 12.0
suse suse linux enterprise software development kit 12.0
linux linux kernel 4.5.0

Several vulnerabilities have been discovered in the Linux kernel that may lead to a privilege escalation, denial of service or information leaks CVE-2015-7515, CVE-2016-2184, CVE-2016-2185, CVE-2016-2186, CVE-2016-2187, CVE-2016-3136, CVE-2016-3137, CVE-2016-3138, CVE-2016-3140 Ralf Spenneberg of OpenSource Sec ...

Several security issues were fixed in the kernel ...

NVD-CWE-Other https://github.com/torvalds/linux/commit/4d06dd537f95683aba3651098ae288b7cbff8274 https://github.com/torvalds/linux/commit/1666984c8625b3db19a9abc298931d35ab7bc64b http://git.kernel.org/cgit/linux/kernel/git/torvalds/linux.git/commit/?id=1666984c8625b3db19a9abc298931d35ab7bc64b http://git.kernel.org/cgit/linux/kernel/git/torvalds/linux.git/commit/?id=4d06dd537f95683aba3651098ae288b7cbff8274 http://www.openwall.com/lists/oss-security/2016/04/06/4 https://www.spinics.net/lists/netdev/msg367669.html https://bugzilla.redhat.com/show_bug.cgi?id=1324782 http://www.ubuntu.com/usn/USN-3002-1 http://www.ubuntu.com/usn/USN-3001-1 http://www.ubuntu.com/usn/USN-3004-1 http://www.ubuntu.com/usn/USN-2989-1 http://www.ubuntu.com/usn/USN-3000-1 http://www.ubuntu.com/usn/USN-2998-1 http://www.ubuntu.com/usn/USN-3003-1 http://www.ubuntu.com/usn/USN-3021-1 http://www.ubuntu.com/usn/USN-3021-2 http://lists.opensuse.org/opensuse-security-announce/2016-06/msg00056.html http://lists.opensuse.org/opensuse-security-announce/2016-06/msg00054.html http://lists.opensuse.org/opensuse-security-announce/2016-07/msg00005.html http://www.securityfocus.com/bid/91028 http://www.debian.org/security/2016/dsa-3607 http://lists.opensuse.org/opensuse-security-announce/2016-05/msg00060.html http://www.securitytracker.com/id/1036763 https://nvd.nist.gov https://www.debian.org/security/./dsa-3607 https://usn.ubuntu.com/3021-2/

CVE-2016-3951

Vulnerability Summary

Vulnerability Trend

Vendor Advisories

References

Vulmon Search

About

Products

Connect