PT-2018-2820 · Linux · Linux Kernel
Publicado
2018-12-03
·
Atualizado
2018-12-03
CVSS v2.0
4.9
Média
| Vetor | AV:L/AC:L/Au:N/C:N/I:N/A:C |
Name of the Vulnerable Software and Affected Versions
Linux kernel (affected versions not specified)
Description
The issue is caused by an out-of-bounds operation in the xudc ep enable handler of the udc-xilinx.ko module in the Linux kernel. This can allow an attacker to write to unauthorized memory areas when a Xilinx USB peripheral controller device is connected. The
xudc ep enable function calls xudc ep enable, which reads the bEndpointAddress field of the device descriptor. If the bEndpointAddress is greater than 8 but less than 16, the ep->epnumber value will be greater than 8, exceeding the size of the rambase array. As a result, data may be sent to unauthorized memory locations in the xudc dma send function, which uses ep->rambase to determine the data write address.Recommendations
At the moment, there is no information about a newer version that contains a fix for this vulnerability.
Buffer Overflow
Encontrou algum problema na descrição? Tem algo a acrescentar? Fique à vontade para nos escrever 👾
Enumeração de Fraquezas
Identificadores relacionados
Produtos afetados
Linux Kernel