Linux Kernel 'ozwpan' Driver Multiple Heap Buffer Overflow Vulnerabilities

Bugtraq ID:	74672
Class:	Boundary Condition Error
CVE:	CVE-2015-4001
Remote:	Yes
Local:	No
Published:	May 13 2015 12:00AM
Updated:	Feb 11 2016 07:38AM
Credit:	Jason A. Donenfeld
Vulnerable:	Ubuntu Ubuntu Linux 12.04 LTS i386 Ubuntu Ubuntu Linux 12.04 LTS amd64 Linux kernel 3.3.5 Linux kernel 3.3.4 Linux kernel 3.3.2 Linux kernel 3.2.13 Linux kernel 3.2.9 Linux kernel 3.2.1 Linux kernel 3.1.8 Linux kernel 3.0.5 Linux kernel 3.0.4 Linux kernel 3.0.2 Linux kernel 3.0.1 Linux kernel 3.2.2 Linux kernel 3.0.18 Linux kernel 3.0-rc1 Linux kernel 3.0
Not Vulnerable:

Linux Kernel 'ozwpan' Driver Multiple Heap Buffer Overflow Vulnerabilities

Linux Kernel is prone to multiple heap-based buffer-overflow vulnerabilities because it fails to properly bounds-check user-supplied input.

Successfully exploiting these issues allows attackers to execute arbitrary code with the privileges of a user running the application. Failed exploit attempts will result in a denial-of-service condition.

Linux Kernel 'ozwpan' Driver Multiple Heap Buffer Overflow Vulnerabilities

The researcher who discovered these issues has created proof-of-concepts. Please see the references for more information.

Linux Kernel 'ozwpan' Driver Multiple Heap Buffer Overflow Vulnerabilities

Solution:
Updates are available. Please see the references or vendor advisory for more information.

Linux Kernel 'ozwpan' Driver Multiple Heap Buffer Overflow Vulnerabilities

References:

• Linux kernel Homepage (kernel.org)