NVD

Id
25163  
Name
CVE-2015-3288  
Description
mm/memory.c in the Linux kernel before 4.1.4 mishandles anonymous pages, which allows local users to gain privileges or cause a denial of service (page tainting) via a crafted application that triggers writing to page zero.  
Reject
 
CVSS Version
2  
CVSS Score
7.2  
Severity
High  
CVSS Base Score
7.2  
CVSS Impact Subscore
10  
CVSS Exploit Subscore
3.9  
CVSS Vector
(AV:L/AC:L/Au:N/C:C/I:C/A:C)  
Pub Date
2017-01-19  
Published
2016-10-16  
Modified Date
2017-01-06  
Seq
2015-3288  

Actions

Related NVD References

Id NVD Id NVD No. Reference Actions
133079 25163 CVE-2015-3288 http://git.kernel.org/cgit/linux/kernel/git/torvalds/linux.git/commit/?id=6b7339f4c31ad69c8e9c0b2859276e22cf72176d  View
133080 25163 CVE-2015-3288 http://www.kernel.org/pub/linux/kernel/v4.x/ChangeLog-4.1.4  View
133081 25163 CVE-2015-3288 93591  View
133082 25163 CVE-2015-3288 https://bugzilla.redhat.com/show_bug.cgi?id=1333830  View
133083 25163 CVE-2015-3288 https://github.com/torvalds/linux/commit/6b7339f4c31ad69c8e9c0b2859276e22cf72176d  View
133084 25163 CVE-2015-3288 https://security-tracker.debian.org/tracker/CVE-2015-3288  View
133085 25163 CVE-2015-3288 https://source.android.com/security/bulletin/2017-01-01.html  View

Related JVN

Id Name Title Summary Cveinfo Name Cveinfo Id Nvdinfo Name Nvdinfo Id Cvssv2 Cvssv3 Jvnurl Published Date Last Updated Date Actions
11966 JVNDB-2015-007287 Linux Kernel の mm/memory.c における権限を取得される脆弱性 Linux Kernel の mm/memory.c は、匿名のページを誤って処理するため、権限を取得される、またはサービス運用妨害 (ページの汚染) 状態にされる脆弱性が存在します。 CVE-2015-3288 80513 CVE-2015-3288 25163 7.2 7.8 http://jvndb.jvn.jp/ja/contents/2015/JVNDB-2015-007287.html 2015-07-07 2016-10-20 View