CVE-2016-3955 The usbip_recv_xbuff function in drivers/usb/usbip/usbip_common.c in the Linux kernel before 4.5.3 allows remote attackers to cause a denial of service (out-of-bounds write) or possibly have unspecifi...
CriticalCVSS 9.8
EPSS 25.3%
- Published
- Updated
- Exploit status
- No public exploit known
Description
The usbip_recv_xbuff function in drivers/usb/usbip/usbip_common.c in the Linux kernel before 4.5.3 allows remote attackers to cause a denial of service (out-of-bounds write) or possibly have unspecified other impact via a crafted length value in a USB/IP packet.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| debian/linux(Debian:12) | < 4.5.2-1 | 4.5.2-1 |
| debian/linux(Debian:13) | < 4.5.2-1 | 4.5.2-1 |
| debian/linux(Debian:14) | < 4.5.2-1 | 4.5.2-1 |
| Canonical Ubuntu Linux | = 12.04 | No fix listed |
| Canonical Ubuntu Linux | = 14.04 | No fix listed |
| Canonical Ubuntu Linux | = 15.10 | No fix listed |
| Linux kernel | < 3.2.80 | 3.2.80 |
| Linux kernel | >= 3.3, < 3.10.102 | 3.10.102 |
| Linux kernel | >= 3.11, < 3.12.59 | 3.12.59 |
| Linux kernel | >= 3.13, < 3.14.68 | 3.14.68 |
| Linux kernel | >= 3.17, < 3.18.37 | 3.18.37 |
| Linux kernel | >= 3.19, < 4.1.28 | 4.1.28 |
| Linux kernel | >= 4.2, < 4.4.9 | 4.4.9 |
| Linux kernel | >= 4.5, < 4.5.3 | 4.5.3 |
| debian linux | = 8.0 | No fix listed |
References
- Ubuntu CVE tracker vendor-advisory
- USN-2965-1 vendor-advisory
- USN-2965-4 vendor-advisory
- USN-2965-3 vendor-advisory
- USN-2965-2 vendor-advisory
- USN-2989-1 vendor-advisory
- USN-2996-1 vendor-advisory
- USN-2997-1 vendor-advisory
- USN-2998-1 vendor-advisory
- USN-3000-1 vendor-advisory
- USN-3001-1 vendor-advisory
- USN-3002-1 vendor-advisory
- USN-3003-1 vendor-advisory
- USN-3004-1 vendor-advisory
- www.cve.org
- Debian Security Tracker CVE-2016-3955 vendor-advisory
- git.kernel.org vendor-advisory
- openSUSE-SU-2016:1641 mailing-list third-party-advisory vendor-advisory
- DSA-3607 third-party-advisory vendor-advisory
- www.kernel.org vendor-advisory
- [oss-security] 20160419 CVE Request: Linux kernel: remote buffer overflow in usbip mailing-list third-party-advisory
- 86534 third-party-advisory vdb-entry
- USN-2989-1 third-party-advisory vendor-advisory
- USN-2996-1 third-party-advisory vendor-advisory
- USN-2997-1 third-party-advisory vendor-advisory
- USN-2998-1 third-party-advisory vendor-advisory
- USN-3000-1 third-party-advisory vendor-advisory
- USN-3001-1 third-party-advisory vendor-advisory
- USN-3002-1 third-party-advisory vendor-advisory
- USN-3003-1 third-party-advisory vendor-advisory
- USN-3004-1 third-party-advisory vendor-advisory
- bugzilla.redhat.com issue-tracking third-party-advisory
- github.com patch vendor-advisory