Array index error in the tcm_vhost_make_tpg function in drivers/vhost/scsi.c in the Linux kernel before 4.0 might allow guest OS users to cause a denial of service (memory corruption) or possibly have unspecified other impact via a crafted VHOST_SCSI_SET_ENDPOINT ioctl call. NOTE: the affected function was renamed to vhost_scsi_make_tpg before the vulnerability was announced.
References
| Link | Resource |
|---|---|
| http://git.kernel.org/cgit/linux/kernel/git/torvalds/linux.git/commit/?id=59c816c1f24df0204e01851431d3bab3eb76719c | Third Party Advisory |
| http://lists.opensuse.org/opensuse-security-announce/2015-07/msg00049.html | Third Party Advisory |
| http://lists.opensuse.org/opensuse-security-announce/2015-08/msg00011.html | Third Party Advisory |
| http://www.openwall.com/lists/oss-security/2015/05/13/4 | Exploit Mailing List Third Party Advisory |
| http://www.securityfocus.com/bid/74664 | URL Repurposed VDB Entry |
| http://www.securitytracker.com/id/1033729 | URL Repurposed |
| http://www.ubuntu.com/usn/USN-2633-1 | Third Party Advisory |
| http://www.ubuntu.com/usn/USN-2634-1 | Third Party Advisory |
| https://bugzilla.redhat.com/show_bug.cgi?id=1189864 | Issue Tracking Third Party Advisory |
| https://github.com/torvalds/linux/commit/59c816c1f24df0204e01851431d3bab3eb76719c | Third Party Advisory |
Configurations
Configuration 1 (hide)
|
History
21 Nov 2023, 19:15
| Type | Values Removed | Values Added |
|---|---|---|
| CPE | cpe:2.3:o:linux:linux_kernel:3.6:rc2:*:*:*:*:*:* cpe:2.3:o:linux:linux_kernel:3.6:rc7:*:*:*:*:*:* cpe:2.3:o:linux:linux_kernel:3.6:rc5:*:*:*:*:*:* cpe:2.3:o:linux:linux_kernel:3.6:-:*:*:*:*:*:* cpe:2.3:o:linux:linux_kernel:3.6:rc3:*:*:*:*:*:* cpe:2.3:o:linux:linux_kernel:3.6:rc4:*:*:*:*:*:* cpe:2.3:o:linux:linux_kernel:3.6:rc6:*:*:*:*:*:* |
|
| References | (MLIST) http://www.openwall.com/lists/oss-security/2015/05/13/4 - Exploit, Mailing List, Third Party Advisory | |
| References | (SUSE) http://lists.opensuse.org/opensuse-security-announce/2015-07/msg00049.html - Third Party Advisory | |
| References | (UBUNTU) http://www.ubuntu.com/usn/USN-2634-1 - Third Party Advisory | |
| References | (BID) http://www.securityfocus.com/bid/74664 - URL Repurposed, VDB Entry | |
| References | (CONFIRM) http://git.kernel.org/cgit/linux/kernel/git/torvalds/linux.git/commit/?id=59c816c1f24df0204e01851431d3bab3eb76719c - Third Party Advisory | |
| References | (SUSE) http://lists.opensuse.org/opensuse-security-announce/2015-08/msg00011.html - Third Party Advisory | |
| References | (SECTRACK) http://www.securitytracker.com/id/1033729 - URL Repurposed | |
| References | (CONFIRM) https://bugzilla.redhat.com/show_bug.cgi?id=1189864 - Issue Tracking, Third Party Advisory | |
| References | (CONFIRM) https://github.com/torvalds/linux/commit/59c816c1f24df0204e01851431d3bab3eb76719c - Third Party Advisory | |
| References | (UBUNTU) http://www.ubuntu.com/usn/USN-2633-1 - Third Party Advisory |
Information
Published : 2015-08-31 20:59
Updated : 2023-12-10 11:46
NVD link : CVE-2015-4036
Mitre link : CVE-2015-4036
CVE.ORG link : CVE-2015-4036
JSON object : View
Products Affected
linux
- linux_kernel
CWE
CWE-119
Improper Restriction of Operations within the Bounds of a Memory Buffer