PT-2016-3559 · Linux+1 · Linux Kernel+1

Publicado 2016-05-09 · Atualizado 2021-05-28 · CVE-2015-0570

Positive Technologies (AI Summary)

CVSS v2.0

9.3

Alta

Vetor base

AV:N/AC:M/Au:N/C:C/I:C/A:C

Name of the Vulnerable Software and Affected Versions Linux kernel versions 3.x and 4.x

Description A stack-based buffer overflow issue exists in the SET WPS IE IOCTL implementation in the WLAN driver, allowing attackers to gain privileges via a crafted application that uses a long WPS IE element.

Recommendations For Linux kernel versions 3.x and 4.x, consider restricting access to the WLAN driver or disabling the SET WPS IE IOCTL implementation until a patch is available.

Exploit

Correção

Memory Corruption

Enumeração de Fraquezas

CWE-787

Identificadores relacionados

ALT-PU-2019-1437

ALT-PU-2019-1506

ALT-PU-2020-1198

ALT-PU-2020-1501

ALT-PU-2020-2410

ALT-PU-2020-2433

ALT-PU-2021-1870

CVE-2015-0570

Produtos afetados

Alt Linux

Linux Kernel

Referências · 797

• 🔥 https://github.com/rapid7/metasploit-framework/blob/master/modules/exploits/linux/local/rds_atomic_free_op_null_pointer_deref_priv_esc.rb · Exploit
• 🔥 https://github.com/bobfuzzer/CVE/tree/master/CVE-2019-19036 · Exploit
• 🔥 https://github.com/bobfuzzer/CVE/tree/master/CVE-2019-19816 · Exploit
• 🔥 https://github.com/bobfuzzer/CVE/tree/master/CVE-2019-19039 · Exploit
• 🔥 https://github.com/bobfuzzer/CVE/tree/master/CVE-2019-19037 · Exploit
• 🔥 https://github.com/tr3ee/CVE-2021-4204 · Exploit
• 🔥 https://github.com/xmzyshypnc/CVE-2020-27194 · Exploit
• 🔥 https://github.com/kiks7/CVE-2020-27786-Kernel-Exploit · Exploit
• 🔥 https://github.com/tdwyer/CVE-2020-25705 · Exploit
• 🔥 https://github.com/Limesss/cve-2019-18683 · Exploit
• 🔥 https://github.com/bobfuzzer/CVE-2019-18885 · Exploit
• 🔥 https://github.com/ii4gsp/CVE-2020-27786 · Exploit
• https://github.com/torvalds/linux/commit/ceabee6c59943bdd5e1da1a6a20dc7ee5f8113a2 · Nota
• https://github.com/torvalds/linux/commit/088aaf17aa79300cab14dbee2569c58cfafd7d6e · Nota
• https://github.com/torvalds/linux/commit/01ca667133d019edc9f0a1f70a272447c84ec41f · Nota