NVD

Id
28515  
Name
CVE-2015-8324  
Description
The ext4 implementation in the Linux kernel before 2.6.34 does not properly track the initialization of certain data structures, which allows physically proximate attackers to cause a denial of service (NULL pointer dereference and panic) via a crafted USB device, related to the ext4_fill_super function.  
Reject
 
CVSS Version
2  
CVSS Score
4.9  
Severity
Medium  
CVSS Base Score
4.9  
CVSS Impact Subscore
6.9  
CVSS Exploit Subscore
3.9  
CVSS Vector
(AV:L/AC:L/Au:N/C:N/I:N/A:C)  
Pub Date
2017-01-19  
Published
2016-05-02  
Modified Date
2016-11-28  
Seq
2015-8324  

Actions

Related NVD References

Id NVD Id NVD No. Reference Actions
149830 28515 CVE-2015-8324 http://git.kernel.org/cgit/linux/kernel/git/torvalds/linux.git/commit/?id=744692dc059845b2a3022119871846e74d4f6e11  View
149831 28515 CVE-2015-8324 http://mirror.linux.org.au/linux/kernel/v2.6/ChangeLog-2.6.34  View
149832 28515 CVE-2015-8324 RHSA-2016:0855  View
149833 28515 CVE-2015-8324 [oss-security] 20151123 CVE request -- linux kernel: Null pointer dereference when mounting ext4 filesystem  View
149834 28515 CVE-2015-8324 http://www.oracle.com/technetwork/topics/security/linuxbulletinapr2016-2952096.html  View
149835 28515 CVE-2015-8324 https://bugzilla.redhat.com/show_bug.cgi?id=1267261  View
149836 28515 CVE-2015-8324 https://github.com/torvalds/linux/commit/744692dc059845b2a3022119871846e74d4f6e11  View

Related JVN

Id Name Title Summary Cveinfo Name Cveinfo Id Nvdinfo Name Nvdinfo Id Cvssv2 Cvssv3 Jvnurl Published Date Last Updated Date Actions
11810 JVNDB-2015-007130 Linux Kernel の ext4 の実装におけるサービス運用妨害 (DoS) の脆弱性 Linux Kernel の ext4 の実装は、特定のデータ構造の初期化を適切に追跡しないため、サービス運用妨害 (NULL ポインタデリファレンスおよびパニック) 状態にされる脆弱性が存在します。 CVE-2015-8324 85549 CVE-2015-8324 28515 4.9 4.6 http://jvndb.jvn.jp/ja/contents/2015/JVNDB-2015-007130.html 2015-09-29 2016-05-11 View