CVE-2016-3139
Summary
| CVE | CVE-2016-3139 |
|---|---|
| State | PUBLIC |
| Assigner | [email protected] |
| Source Priority | CVE Program / NVD first with legacy fallback |
| Published | 2016-04-27 17:59:00 UTC |
| Updated | 2023-11-07 02:32:00 UTC |
| Description | The wacom_probe function in drivers/input/tablet/wacom_sys.c in the Linux kernel before 3.17 allows physically proximate attackers to cause a denial of service (NULL pointer dereference and system crash) via a crafted endpoints value in a USB device descriptor. |
Risk And Classification
Problem Types: NVD-CWE-Other
NVD Known Affected Configurations (CPE 2.3)
References
| Reference | Source | Link | Tags |
|---|---|---|---|
| [security-announce] SUSE-SU-2016:1019-1: important: Security update for | SUSE | lists.opensuse.org | |
| Input: wacom - move the USB (now hid) Wacom driver in drivers/hid · torvalds/linux@471d171 · GitHub | github.com | ||
| 1316993 – (CVE-2016-3139) CVE-2016-3139 kernel: Crash on invalid USB device descriptors (wacom driver) | CONFIRM | bugzilla.redhat.com | Issue Tracking, Third Party Advisory, VDB Entry |
| [security-announce] SUSE-SU-2016:1707-1: important: Security update for | lists.opensuse.org | ||
| CVE-2016-3139 | CONFIRM | security-tracker.debian.org | Third Party Advisory, VDB Entry |
| Linux Kernel 3.10.0 (CentOS / RHEL 7.1) - 'Wacom' Multiple Nullpointer Dereferences - Linux dos Exploit | www.exploit-db.com | ||
| [security-announce] SUSE-SU-2016:1672-1: important: Security update for | SUSE | lists.opensuse.org | Third Party Advisory |
| [security-announce] SUSE-SU-2016:2074-1: important: Security update for | lists.opensuse.org | ||
| kernel/git/torvalds/linux.git - Linux kernel source tree | git.kernel.org | ||
| [security-announce] SUSE-SU-2016:1764-1: important: Security update for | SUSE | lists.opensuse.org | Third Party Advisory |
| Bug 1283375 – CVE-2016-3139 Local RedHat Enterprise Linux DoS – RHEL 7.1 Kernel crashes on invalid USB device descriptors (wacom driver) [local-DoS] | bugzilla.redhat.com | ||
| Bug 1283377 – CVE-2016-3139 Local RedHat Enterprise Linux DoS – RHEL 7.1 Kernel crashes on invalid USB device descriptors (wacom driver) [local-DoS] Bug2 | CONFIRM | bugzilla.redhat.com | Issue Tracking, Third Party Advisory, VDB Entry |
| [security-announce] SUSE-SU-2016:1690-1: important: Security update for | lists.opensuse.org | ||
| CVE Program record | CVE.ORG | www.cve.org | canonical |
| NVD vulnerability detail | NVD | nvd.nist.gov | canonical, analysis |
No vendor comments have been submitted for this CVE.
Legacy QID Mappings
- 671064 EulerOS Security Update for kernel (EulerOS-SA-2019-2599)