NVD

Id
25586  
Name
CVE-2015-4036  
Description
Array index error in the tcm_vhost_make_tpg function in drivers/vhost/scsi.c in the Linux kernel before 4.0 might allow guest OS users to cause a denial of service (memory corruption) or possibly have unspecified other impact via a crafted VHOST_SCSI_SET_ENDPOINT ioctl call. NOTE: the affected function was renamed to vhost_scsi_make_tpg before the vulnerability was announced.  
Reject
 
CVSS Version
2  
CVSS Score
7.2  
Severity
High  
CVSS Base Score
7.2  
CVSS Impact Subscore
10  
CVSS Exploit Subscore
3.9  
CVSS Vector
(AV:L/AC:L/Au:N/C:C/I:C/A:C)  
Pub Date
2017-01-19  
Published
2015-08-31  
Modified Date
2016-12-21  
Seq
2015-4036  

Actions

Related NVD References

Id NVD Id NVD No. Reference Actions
135361 25586 CVE-2015-4036 http://git.kernel.org/cgit/linux/kernel/git/torvalds/linux.git/commit/?id=59c816c1f24df0204e01851431d3bab3eb76719c  View
135362 25586 CVE-2015-4036 SUSE-SU-2015:1324  View
135363 25586 CVE-2015-4036 openSUSE-SU-2015:1382  View
135364 25586 CVE-2015-4036 [oss-security] 20150513 CVE request for vhost/scsi possible memory corruption.  View
135365 25586 CVE-2015-4036 74664  View
135366 25586 CVE-2015-4036 1033729  View
135367 25586 CVE-2015-4036 USN-2633-1  View
135368 25586 CVE-2015-4036 USN-2634-1  View
135369 25586 CVE-2015-4036 https://bugzilla.redhat.com/show_bug.cgi?id=1189864  View
135370 25586 CVE-2015-4036 https://github.com/torvalds/linux/commit/59c816c1f24df0204e01851431d3bab3eb76719c  View

Related JVN

Id Name Title Summary Cveinfo Name Cveinfo Id Nvdinfo Name Nvdinfo Id Cvssv2 Cvssv3 Jvnurl Published Date Last Updated Date Actions
9218 JVNDB-2015-004538 Linux Kernel の drivers/vhost/scsi.c の tcm_vhost_make_tpg 関数におけるサービス運用妨害 (DoS) の脆弱性 Linux Kernel の drivers/vhost/scsi.c の tcm_vhost_make_tpg 関数には、配列のインデックスエラーにより、サービス運用妨害 (メモリ破損) 状態にされるなど、不特定の影響を受ける脆弱性が存在します。 CVE-2015-4036 81261 CVE-2015-4036 25586 7.2 http://jvndb.jvn.jp/ja/contents/2015/JVNDB-2015-004538.html 2015-02-05 2015-09-02 View