Back to feed
EUVD-2016-4713 · Published May 2, 2016
The ims_pcu_parse_cdc_data function in drivers/input/misc/ims-pcu.c in the Linux kernel before 4.5.1 allows physically proximate attackers to cause a denial of service (system crash) via a USB device without both a master and a slave interface.
Technologies
Novell Suse Linux Enterprise DesktopLinux Linux KernelNovell Suse Linux Enterprise Real Time ExtensionNovell Suse Linux Enterprise Live PatchingNovell Suse Linux Enterprise ServerNovell Suse Linux Enterprise Workstation ExtensionNovell Suse Linux Enterprise Software Development KitCanonical Ubuntu LinuxNovell Suse Linux Enterprise Module For Public Cloud
Weaknesses
NVD-CWE-Other
CVSS scores
- v3.04.6
CVSS:3.0/AV:P/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H - v2.04.9
AV:L/AC:L/Au:N/C:N/I:N/A:C
MITRE ATT&CK
InferredWhere this vulnerability fits in an attack
Privilege Escalation
References
- http://git.kernel.org/cgit/linux/kernel/git/torvalds/linux.git/commit/?id=a0ad220c96692eda76b2e3fd7279f3dcd1d8a8ff
- http://lists.opensuse.org/opensuse-security-announce/2016-05/msg00060.html
- http://lists.opensuse.org/opensuse-security-announce/2016-06/msg00054.html
- http://lists.opensuse.org/opensuse-security-announce/2016-06/msg00056.html
- http://lists.opensuse.org/opensuse-security-announce/2016-07/msg00005.html
- http://www.kernel.org/pub/linux/kernel/v4.x/ChangeLog-4.5.1
Potentially impacted assets
See if this affects your attack surface
