PT-2016-3558 · Linux+1 · Linux Kernel+1

Pray3R + 1 · Published 2016-05-09 · Updated 2021-05-28 · CVE-2015-0569

Positive Technologies (AI Summary)

CVSS v2.0

9.3

High

Base vector

AV:N/AC:M/Au:N/C:C/I:C/A:C

Name of the Vulnerable Software and Affected Versions Linux kernel versions 3.x and 4.x

Description A heap-based buffer overflow issue exists in the private wireless extensions IOCTL implementation in the WLAN driver, which could allow attackers to gain privileges through a crafted application that establishes a packet filter.

Recommendations For Linux kernel versions 3.x and 4.x, at the moment, there is no information about a newer version that contains a fix for this vulnerability.

Exploit

Memory Corruption

Weakness Enumeration

CWE-787

Related Identifiers

ALT-PU-2019-1437

ALT-PU-2019-1506

ALT-PU-2020-1198

ALT-PU-2020-1501

ALT-PU-2020-2410

ALT-PU-2020-2433

ALT-PU-2021-1870

CVE-2015-0569

Affected Products

Alt Linux

Linux Kernel

References · 797

• 🔥 https://github.com/rapid7/metasploit-framework/blob/master/modules/exploits/linux/local/rds_atomic_free_op_null_pointer_deref_priv_esc.rb · Exploit
• 🔥 https://github.com/bobfuzzer/CVE/tree/master/CVE-2019-19036 · Exploit
• 🔥 https://github.com/bobfuzzer/CVE/tree/master/CVE-2019-19816 · Exploit
• 🔥 https://github.com/bobfuzzer/CVE/tree/master/CVE-2019-19039 · Exploit
• 🔥 https://github.com/bobfuzzer/CVE/tree/master/CVE-2019-19037 · Exploit
• 🔥 https://github.com/tr3ee/CVE-2021-4204 · Exploit
• 🔥 https://github.com/xmzyshypnc/CVE-2020-27194 · Exploit
• 🔥 https://github.com/kiks7/CVE-2020-27786-Kernel-Exploit · Exploit
• 🔥 https://github.com/tdwyer/CVE-2020-25705 · Exploit
• 🔥 https://github.com/Limesss/cve-2019-18683 · Exploit
• 🔥 https://github.com/bobfuzzer/CVE-2019-18885 · Exploit
• 🔥 https://github.com/ii4gsp/CVE-2020-27786 · Exploit
• 🔥 https://exploit-db.com/exploits/39308 · Exploit
• https://bdu.fstec.ru/vul/2019-04854 · Security Note
• http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2019-19769 · Security Note