NVD

Id
24042  
Name
CVE-2015-1805  
Description
The (1) pipe_read and (2) pipe_write implementations in fs/pipe.c in the Linux kernel before 3.16 do not properly consider the side effects of failed __copy_to_user_inatomic and __copy_from_user_inatomic calls, which allows local users to cause a denial of service (system crash) or possibly gain privileges via a crafted application, aka an "I/O vector array overrun."  
Reject
 
CVSS Version
2  
CVSS Score
7.2  
Severity
High  
CVSS Base Score
7.2  
CVSS Impact Subscore
10  
CVSS Exploit Subscore
3.9  
CVSS Vector
(AV:L/AC:L/Au:N/C:C/I:C/A:C)  
Pub Date
2017-01-19  
Published
2015-08-08  
Modified Date
2016-12-21  
Seq
2015-1805  

Actions

Related NVD References

Id NVD Id NVD No. Reference Actions
127592 24042 CVE-2015-1805 http://git.kernel.org/cgit/linux/kernel/git/torvalds/linux.git/commit/?id=637b58c2887e5e57850865839cc75f59184b23d1  View
127593 24042 CVE-2015-1805 http://git.kernel.org/cgit/linux/kernel/git/torvalds/linux.git/commit/?id=f0d1bec9d58d4c038d0ac958c9af82be6eb18045  View
127594 24042 CVE-2015-1805 SUSE-SU-2015:1224  View
127595 24042 CVE-2015-1805 SUSE-SU-2015:1324  View
127596 24042 CVE-2015-1805 SUSE-SU-2015:1478  View
127597 24042 CVE-2015-1805 SUSE-SU-2015:1487  View
127598 24042 CVE-2015-1805 SUSE-SU-2015:1488  View
127599 24042 CVE-2015-1805 SUSE-SU-2015:1489  View
127600 24042 CVE-2015-1805 SUSE-SU-2015:1490  View
127601 24042 CVE-2015-1805 SUSE-SU-2015:1491  View
127602 24042 CVE-2015-1805 SUSE-SU-2015:1592  View
127603 24042 CVE-2015-1805 SUSE-SU-2015:1611  View
127604 24042 CVE-2015-1805 RHSA-2015:1042  View
127605 24042 CVE-2015-1805 RHSA-2015:1120  View
127606 24042 CVE-2015-1805 RHSA-2015:1190  View
127607 24042 CVE-2015-1805 RHSA-2015:1199  View
127608 24042 CVE-2015-1805 RHSA-2015:1211  View
127609 24042 CVE-2015-1805 http://source.android.com/security/bulletin/2016-04-02.html  View
127610 24042 CVE-2015-1805 http://source.android.com/security/bulletin/2016-05-01.html  View
127611 24042 CVE-2015-1805 DSA-3290  View
127612 24042 CVE-2015-1805 [oss-security] 20150606 CVE-2015-1805 Linux kernel: pipe: iovec overrun leading to memory corruption  View
127613 24042 CVE-2015-1805 http://www.oracle.com/technetwork/topics/security/linuxbulletinoct2015-2719645.html  View
127614 24042 CVE-2015-1805 74951  View
127615 24042 CVE-2015-1805 1032454  View
127616 24042 CVE-2015-1805 USN-2679-1  View
127617 24042 CVE-2015-1805 USN-2680-1  View
127618 24042 CVE-2015-1805 USN-2681-1  View
127619 24042 CVE-2015-1805 USN-2967-1  View
127620 24042 CVE-2015-1805 USN-2967-2  View
127621 24042 CVE-2015-1805 https://bugzilla.redhat.com/show_bug.cgi?id=1202855  View
127622 24042 CVE-2015-1805 https://github.com/torvalds/linux/commit/637b58c2887e5e57850865839cc75f59184b23d1  View
127623 24042 CVE-2015-1805 https://github.com/torvalds/linux/commit/f0d1bec9d58d4c038d0ac958c9af82be6eb18045  View

Related JVN

Id Name Title Summary Cveinfo Name Cveinfo Id Nvdinfo Name Nvdinfo Id Cvssv2 Cvssv3 Jvnurl Published Date Last Updated Date Actions
8710 JVNDB-2015-004030 Linux Kernel の fs/pipe.c の pipe_read および pipe_write の実装におけるサービス運用妨害 (DoS) の脆弱性 Linux Kernel の fs/pipe.c の (1) pipe_read および (2) pipe_write の実装は、__copy_to_user_inatomic および __copy_from_user_inatomic コールの失敗による副作用を適切に考慮しないため、サービス運用妨害 (システムクラッシュ) 状態にされる、または権限を取得される脆弱性が存在します。 CVE-2015-1805 79030 CVE-2015-1805 24042 7.2 http://jvndb.jvn.jp/ja/contents/2015/JVNDB-2015-004030.html 2015-03-17 2016-05-31 View