CVE

Id
82433  
CVE No.
CVE-2015-5156  
Status
Candidate  
Description
The virtnet_probe function in drivers/net/virtio_net.c in the Linux kernel before 4.2 attempts to support a FRAGLIST feature without proper memory allocation, which allows guest OS users to cause a denial of service (buffer overflow and memory corruption) via a crafted sequence of fragmented packets.  
Phase
Assigned (20150701)  
Votes
None (candidate not yet proposed)  
Comments
 

Actions

Related CVE References

Id CVE Id CVE No. Reference Actions
738430 82433 CVE-2015-5156 CONFIRM:http://git.kernel.org/cgit/linux/kernel/git/torvalds/linux.git/commit/?id=48900cb6af4282fa0fb6ff4d72a81aa3dadb5c39  View
738431 82433 CVE-2015-5156 CONFIRM:https://bugzilla.redhat.com/show_bug.cgi?id=1243852  View
738432 82433 CVE-2015-5156 CONFIRM:https://github.com/torvalds/linux/commit/48900cb6af4282fa0fb6ff4d72a81aa3dadb5c39  View
738433 82433 CVE-2015-5156 CONFIRM:http://www.oracle.com/technetwork/topics/security/linuxbulletinapr2016-2952096.html  View
738434 82433 CVE-2015-5156 CONFIRM:http://www.oracle.com/technetwork/topics/security/linuxbulletinjan2016-2867209.html  View
738435 82433 CVE-2015-5156 CONFIRM:http://www.oracle.com/technetwork/topics/security/linuxbulletinoct2015-2719645.html  View
738436 82433 CVE-2015-5156 FEDORA:FEDORA-2015-c15f00eb95  View
738437 82433 CVE-2015-5156 URL:http://lists.fedoraproject.org/pipermail/package-announce/2015-October/169378.html  View
738438 82433 CVE-2015-5156 FEDORA:FEDORA-2015-0253d1f070  View
738439 82433 CVE-2015-5156 URL:http://lists.fedoraproject.org/pipermail/package-announce/2015-November/171454.html  View
738440 82433 CVE-2015-5156 REDHAT:RHSA-2016:0855  View
738441 82433 CVE-2015-5156 URL:http://rhn.redhat.com/errata/RHSA-2016-0855.html  View
738442 82433 CVE-2015-5156 REDHAT:RHSA-2015:1978  View
738443 82433 CVE-2015-5156 URL:http://rhn.redhat.com/errata/RHSA-2015-1978.html  View
738444 82433 CVE-2015-5156 SUSE:SUSE-SU-2015:2292  View
738445 82433 CVE-2015-5156 URL:http://lists.opensuse.org/opensuse-security-announce/2015-12/msg00018.html  View
738446 82433 CVE-2015-5156 SUSE:SUSE-SU-2015:1727  View
738447 82433 CVE-2015-5156 URL:http://lists.opensuse.org/opensuse-security-announce/2015-10/msg00009.html  View
738448 82433 CVE-2015-5156 UBUNTU:USN-2777-1  View
738449 82433 CVE-2015-5156 URL:http://www.ubuntu.com/usn/USN-2777-1  View
738450 82433 CVE-2015-5156 UBUNTU:USN-2773-1  View
738451 82433 CVE-2015-5156 URL:http://www.ubuntu.com/usn/USN-2773-1  View
738452 82433 CVE-2015-5156 UBUNTU:USN-2774-1  View
738453 82433 CVE-2015-5156 URL:http://www.ubuntu.com/usn/USN-2774-1  View
738454 82433 CVE-2015-5156 BID:76230  View
738455 82433 CVE-2015-5156 URL:http://www.securityfocus.com/bid/76230  View
738456 82433 CVE-2015-5156 SECTRACK:1034045  View

Related JVN

Id JVN No. Title Summary CVE No. CVE Id CVSS_v2 CVSS_v3 JVN URL Actions
57 JVNDB-2016-000059 Apache Cordova において任意のプラグインが実行される脆弱性 Apache Software Foundation が提供する Apache Cordova は、様々なプラットフォーム向けにモバイルアプリケーションを作成するためのフレームワークです。 CVE-2015-5208 82433 6.8 6.3 http://jvndb.jvn.jp/ja/contents/2016/JVNDB-2016-000059.html  View