Back to all categorys

Elevation of privilege vulnerability in kernel networking component

CVE-2015-2686

(json)

• CVE numbers: CVE-2015-2686 [Bulletin-CVE-2015-2686]
• Coordinated disclosure?: unknown
• Categories: Elevation of privilege vulnerability in kernel networking component
• Details: net/socket.c in the Linux kernel 3.19 before 3.19.3 does not validate certain range data for (1) sendto and (2) recvfrom system calls, which allows local users to gain privileges by leveraging a subsystem that uses the copy_from_iter function in the iov_iter interface, as demonstrated by the Bluetooth subsystem. [NIST-CVE-2015-2686]
• Discovered by: on: Unknown
• Reported on: 2016-08-01 [Bulletin-CVE-2015-2686]
• Fixed on: 2015-03-20 [Upstream kernel]
• Fix released on: Unknown
• Affected versions: regex:
• Affected devices:
• Affected manufacturers: all [Bulletin-CVE-2015-2686]
• Fixed versions:
• Submission: by: Daniel Carter, on: 2019-07-29

CVE-2016-3841

(json)

• CVE numbers: CVE-2016-3841 [Bulletin-CVE-2016-3841]
• Coordinated disclosure?: unknown
• Categories: Elevation of privilege vulnerability in kernel networking component
• Details: The IPv6 stack in the Linux kernel before 4.3.3 mishandles options data, which allows local users to gain privileges or cause a denial of service (use-after-free and system crash) via a crafted sendmsg system call. [NIST-CVE-2016-3841]
• Discovered by: on: Unknown
• Reported on: 2016-08-01 [Bulletin-CVE-2016-3841]
• Fixed on: 2015-11-29 [Upstream kernel]
• Fix released on: Unknown
• Affected versions: regex:
• Affected devices:
• Affected manufacturers: all [Bulletin-CVE-2016-3841]
• Fixed versions:
• Submission: by: Daniel Carter, on: 2019-07-29