NVD

Id
24700  
Name
CVE-2015-2686  
Description
net/socket.c in the Linux kernel 3.19 before 3.19.3 does not validate certain range data for (1) sendto and (2) recvfrom system calls, which allows local users to gain privileges by leveraging a subsystem that uses the copy_from_iter function in the iov_iter interface, as demonstrated by the Bluetooth subsystem.  
Reject
 
CVSS Version
2  
CVSS Score
7.2  
Severity
High  
CVSS Base Score
7.2  
CVSS Impact Subscore
10  
CVSS Exploit Subscore
3.9  
CVSS Vector
(AV:L/AC:L/Au:N/C:C/I:C/A:C)  
Pub Date
2017-01-19  
Published
2016-05-02  
Modified Date
2016-06-27  
Seq
2015-2686  

Actions

Related NVD References

Id NVD Id NVD No. Reference Actions
130023 24700 CVE-2015-2686 http://git.kernel.org/cgit/linux/kernel/git/torvalds/linux.git/commit/?id=4de930efc23b92ddf88ce91c405ee645fe6e27ea  View
130024 24700 CVE-2015-2686 http://grsecurity.net/~spender/viro.txt  View
130025 24700 CVE-2015-2686 http://www.kernel.org/pub/linux/kernel/v3.x/ChangeLog-3.19.3  View
130026 24700 CVE-2015-2686 [oss-security] 20150323 CVE Request: Linux kernel: sys_sendto/sys_recvfrom does not validate the user provided ubuf pointer  View
130027 24700 CVE-2015-2686 73286  View
130028 24700 CVE-2015-2686 https://bugzilla.redhat.com/show_bug.cgi?id=1205242  View
130029 24700 CVE-2015-2686 https://github.com/torvalds/linux/commit/4de930efc23b92ddf88ce91c405ee645fe6e27ea  View

Related JVN

Id Name Title Summary Cveinfo Name Cveinfo Id Nvdinfo Name Nvdinfo Id Cvssv2 Cvssv3 Jvnurl Published Date Last Updated Date Actions
11793 JVNDB-2015-007113 Linux Kernel の net/socket.c における権限を取得される脆弱性 Linux Kernel の net/socket.c は、(1) sendto および (2) recvfrom システムコールの特定の範囲のデータを検証しないため、権限を取得される脆弱性が存在します。 CVE-2015-2686 79911 CVE-2015-2686 24700 7.2 7.8 http://jvndb.jvn.jp/ja/contents/2015/JVNDB-2015-007113.html 2015-03-26 2016-09-01 View