PT-2016-2705 · Linux+1 · Linux Kernel+1
Publicado
2015-06-03
·
Atualizado
2020-08-04
·
CVE-2015-0573
CVSS v2.0
10
Crítica
| Vetor | AV:N/AC:L/Au:N/C:C/I:C/A:C |
Name of the Vulnerable Software and Affected Versions
Linux kernel versions 3.x
Description
The issue is related to the TSC driver in the Linux kernel, specifically the
drivers/media/platform/msm/broadcast/tsc.c file. It allows attackers to cause a denial of service or possibly have other impacts via a crafted application that makes a TSC GET CARD STATUS ioctl call. The vulnerability is associated with pointer dereference errors. An attacker could exploit this vulnerability to cause a denial of service or other unspecified effects by using a specially crafted application.Recommendations
For Linux kernel version 3.x, consider restricting access to the
TSC GET CARD STATUS ioctl call until a patch is available. As a temporary workaround, disabling the vulnerable TSC driver may help minimize the risk of exploitation. At the moment, there is no information about a newer version that contains a fix for this vulnerability.Exploit
DoS
NULL Pointer Dereference
Encontrou algum problema na descrição? Tem algo a acrescentar? Fique à vontade para nos escrever 👾
Enumeração de Fraquezas
Identificadores relacionados
Produtos afetados
Alt Linux
Linux Kernel