CVE-2015-3036 Stack-based buffer overflow in the run_init_sbus function in the KCodes NetUSB module for the Linux kernel, as used in certain NETGEAR products, TP-LINK products, and other products, allows remote att...
HighCVSS 10.0
EPSS 27.7%
- Published
- Updated
- Exploit status
- No public exploit known
Description
Stack-based buffer overflow in the run_init_sbus function in the KCodes NetUSB module for the Linux kernel, as used in certain NETGEAR products, TP-LINK products, and other products, allows remote attackers to execute arbitrary code by providing a long computer name in a session on TCP port 20005.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| kcodes netusb | All versions | No fix listed |
References
- blog.sec-consult.com
- packetstormsecurity.com
- packetstormsecurity.com
- 20150519 SEC Consult SA-20150519-0 :: Critical buffer overflow vulnerability in KCodes NetUSB (VU#177092, CVE-2015-3036) mailing-list
- 20151010 Exploit NetUSB CVE-2015-3036 mailing-list
- VU#177092 third-party-advisory us-government-resource
- 74724 vdb-entry
- 1032377 vdb-entry
- 38454 exploit
- 38566 exploit
- www.sec-consult.com