NVD

Id
28668  
Name
CVE-2015-8543  
Description
The networking implementation in the Linux kernel through 4.3.3, as used in Android and other products, does not validate protocol identifiers for certain protocol families, which allows local users to cause a denial of service (NULL function pointer dereference and system crash) or possibly gain privileges by leveraging CLONE_NEWUSER support to execute a crafted SOCK_RAW application.  
Reject
 
CVSS Version
2  
CVSS Score
6.9  
Severity
Medium  
CVSS Base Score
6.9  
CVSS Impact Subscore
10  
CVSS Exploit Subscore
3.4  
CVSS Vector
(AV:L/AC:M/Au:N/C:C/I:C/A:C)  
Pub Date
2017-01-19  
Published
2015-12-28  
Modified Date
2016-12-07  
Seq
2015-8543  

Actions

Related NVD References

Id NVD Id NVD No. Reference Actions
150766 28668 CVE-2015-8543 http://git.kernel.org/cgit/linux/kernel/git/torvalds/linux.git/commit/?id=79462ad02e861803b3840cc782248c7359451cd9  View
150767 28668 CVE-2015-8543 SUSE-SU-2016:0911  View
150768 28668 CVE-2015-8543 SUSE-SU-2016:1102  View
150769 28668 CVE-2015-8543 SUSE-SU-2016:2074  View
150770 28668 CVE-2015-8543 RHSA-2016:0855  View
150771 28668 CVE-2015-8543 DSA-3426  View
150772 28668 CVE-2015-8543 [oss-security] 20151209 Re: CVE request - Android kernel - IPv6 connect cause a denial of service  View
150773 28668 CVE-2015-8543 http://www.oracle.com/technetwork/topics/security/linuxbulletinapr2016-2952096.html  View
150774 28668 CVE-2015-8543 79698  View
150775 28668 CVE-2015-8543 1034892  View
150776 28668 CVE-2015-8543 USN-2886-1  View
150777 28668 CVE-2015-8543 USN-2888-1  View
150778 28668 CVE-2015-8543 USN-2890-1  View
150779 28668 CVE-2015-8543 USN-2890-2  View
150780 28668 CVE-2015-8543 USN-2890-3  View
150781 28668 CVE-2015-8543 https://bugzilla.redhat.com/show_bug.cgi?id=1290475  View
150782 28668 CVE-2015-8543 https://github.com/torvalds/linux/commit/79462ad02e861803b3840cc782248c7359451cd9  View

Related JVN

Id Name Title Summary Cveinfo Name Cveinfo Id Nvdinfo Name Nvdinfo Id Cvssv2 Cvssv3 Jvnurl Published Date Last Updated Date Actions
11248 JVNDB-2015-006568 Android などの製品で使用される Linux Kernel のネットワーキングの実装におけるサービス運用妨害 (DoS) の脆弱性 Android およびその他の製品で使用される Linux Kernel のネットワーキングの実装は、特定のプロトコルファミリに対してプロトコル識別子を検証しないため、サービス運用妨害 (NULL 関数ポインタデリファレンスおよびシステムクラッシュ) 状態にされる、または権限を取得される脆弱性が存在します。 CVE-2015-8543 85768 CVE-2015-8543 28668 6.9 http://jvndb.jvn.jp/ja/contents/2015/JVNDB-2015-006568.html 2015-12-14 2016-01-05 View