PT-2016-3559 · Linux+1 · Linux Kernel+1

Published 2016-05-09 · Updated 2021-05-28 · CVE-2015-0570

Positive Technologies (AI Summary)

CVSS v2.0

9.3

High

Base vector

AV:N/AC:M/Au:N/C:C/I:C/A:C

Name of the Vulnerable Software and Affected Versions Linux kernel versions 3.x and 4.x

Description A stack-based buffer overflow issue exists in the SET WPS IE IOCTL implementation in the WLAN driver, allowing attackers to gain privileges via a crafted application that uses a long WPS IE element.

Recommendations For Linux kernel versions 3.x and 4.x, consider restricting access to the WLAN driver or disabling the SET WPS IE IOCTL implementation until a patch is available.

Exploit

Fix

Memory Corruption

Weakness Enumeration

CWE-787

Related Identifiers

ALT-PU-2019-1437

ALT-PU-2019-1506

ALT-PU-2020-1198

ALT-PU-2020-1501

ALT-PU-2020-2410

ALT-PU-2020-2433

ALT-PU-2021-1870

CVE-2015-0570

Affected Products

Alt Linux

Linux Kernel

References · 797

• 🔥 https://github.com/rapid7/metasploit-framework/blob/master/modules/exploits/linux/local/rds_atomic_free_op_null_pointer_deref_priv_esc.rb · Exploit
• 🔥 https://github.com/bobfuzzer/CVE/tree/master/CVE-2019-19036 · Exploit
• 🔥 https://github.com/bobfuzzer/CVE/tree/master/CVE-2019-19816 · Exploit
• 🔥 https://github.com/bobfuzzer/CVE/tree/master/CVE-2019-19039 · Exploit
• 🔥 https://github.com/bobfuzzer/CVE/tree/master/CVE-2019-19037 · Exploit
• 🔥 https://github.com/tr3ee/CVE-2021-4204 · Exploit
• 🔥 https://github.com/xmzyshypnc/CVE-2020-27194 · Exploit
• 🔥 https://github.com/kiks7/CVE-2020-27786-Kernel-Exploit · Exploit
• 🔥 https://github.com/tdwyer/CVE-2020-25705 · Exploit
• 🔥 https://github.com/Limesss/cve-2019-18683 · Exploit
• 🔥 https://github.com/bobfuzzer/CVE-2019-18885 · Exploit
• 🔥 https://github.com/ii4gsp/CVE-2020-27786 · Exploit
• https://bdu.fstec.ru/vul/2019-04854 · Security Note
• http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2019-19769 · Security Note
• https://bdu.fstec.ru/vul/2025-00844 · Security Note