CVE Feed

    Dashboard / CVE / CVE-2015-7833

    CVE-2015-7833

    The usbvision driver in the Linux kernel package 3.10.0-123.20.1.el7 through 3.10.0-229.14.1.el7 in Red Hat Enterprise Linux (RHEL) 7.1 allows physically proximate attackers to cause a denial of service (panic) via a nonzero bInterfaceNumber value in a USB device descriptor.

    Published:Oct 8, 2015
    Last Modified:Apr 12, 2025
    EPS:Oct 19, 2015
    EPSS Score:0.00136
    CVSS Score:4.9

    Affected Products

    Vendor
    Novell
    Product
    Suse Linux Enterprise Real Time Extension
    Vendor
    Redhat
    Product
    Enterprise Linux

    Exploits

    http://www.os-s.net/advisories/DOS-KernelCrashesOnInvalidUSBDeviceDescriptors-UsbvisionDriver.pdfhttp://www.securityfocus.com/archive/1/536629http://www.os-s.net/advisories/DOS-KernelCrashesOnInvalidUSBDeviceDescriptors-UsbvisionDriver.pdfhttp://www.securityfocus.com/archive/1/536629

    Common Weakness Enumeration

    CWE-476 NULL Pointer Dereference

    Common Attack Pattern Enumeration and Classification (CAPEC)

    No CAPEC recorded yet

    Related CVEs

    CVE-2016-5829 (CVSS 7.8) — Multiple heap-based buffer overflows in the hiddev_ioctl_usage function in drivers/hid/usbhid/hiddev.c in the …
    CVE-2016-4997 (CVSS 7.8) — The compat IPT_SO_SET_REPLACE and IP6T_SO_SET_REPLACE setsockopt implementations in the netfilter subsystem in…
    CVE-2016-5828 (CVSS 7.8) — The start_thread function in arch/powerpc/kernel/process.c in the Linux kernel through 4.6.3 on powerpc platfo…
    CVE-2016-4470 (CVSS 5.5) — The key_reject_and_link function in security/keys/key.c in the Linux kernel through 4.6.3 does not ensure that…
    CVE-2016-3707 (CVSS 8.1) — The icmp_check_sysrq function in net/ipv4/icmp.c in the kernel.org projects/rt patches for the Linux kernel, a…
    CVE-2016-4569 (CVSS 5.5) — The snd_timer_user_params function in sound/core/timer.c in the Linux kernel through 4.6 does not initialize a…
    CVE-2016-4486 (CVSS 3.3) — The rtnl_fill_link_ifmap function in net/core/rtnetlink.c in the Linux kernel before 4.5.5 does not initialize…
    CVE-2016-4482 (CVSS 6.2) — The proc_connectinfo function in drivers/usb/core/devio.c in the Linux kernel through 4.6 does not initialize …
    CVE-2016-3672 (CVSS 7.8) — The arch_pick_mmap_layout function in arch/x86/mm/mmap.c in the Linux kernel through 4.5.2 does not properly r…
    CVE-2016-3689 (CVSS 4.6) — The ims_pcu_parse_cdc_data function in drivers/input/misc/ims-pcu.c in the Linux kernel before 4.5.1 allows ph…

    References

    http://lists.opensuse.org/opensuse-security-announce/2016-08/msg00000.html
    http://lists.opensuse.org/opensuse-security-announce/2016-08/msg00007.html
    http://lists.opensuse.org/opensuse-security-announce/2016-08/msg00044.html
    http://lists.opensuse.org/opensuse-security-announce/2016-08/msg00055.html
    http://www.debian.org/security/2015/dsa-3396
    http://www.debian.org/security/2015/dsa-3426
    http://www.os-s.net/advisories/DOS-KernelCrashesOnInvalidUSBDeviceDescriptors-UsbvisionDriver.pdf
    http://www.securityfocus.com/archive/1/536629
    http://www.securityfocus.com/bid/77030
    http://www.securitytracker.com/id/1034452
    http://www.ubuntu.com/usn/USN-2929-1
    http://www.ubuntu.com/usn/USN-2929-2
    http://www.ubuntu.com/usn/USN-2932-1
    http://www.ubuntu.com/usn/USN-2947-1
    http://www.ubuntu.com/usn/USN-2947-2
    http://www.ubuntu.com/usn/USN-2947-3
    http://www.ubuntu.com/usn/USN-2948-1
    http://www.ubuntu.com/usn/USN-2948-2
    http://www.ubuntu.com/usn/USN-2967-1
    http://www.ubuntu.com/usn/USN-2967-2
    https://bugzilla.redhat.com/show_bug.cgi?id=1201858
    http://lists.opensuse.org/opensuse-security-announce/2016-08/msg00000.html
    http://lists.opensuse.org/opensuse-security-announce/2016-08/msg00007.html
    http://lists.opensuse.org/opensuse-security-announce/2016-08/msg00044.html
    http://lists.opensuse.org/opensuse-security-announce/2016-08/msg00055.html
    http://www.debian.org/security/2015/dsa-3396
    http://www.debian.org/security/2015/dsa-3426
    http://www.os-s.net/advisories/DOS-KernelCrashesOnInvalidUSBDeviceDescriptors-UsbvisionDriver.pdf
    http://www.securityfocus.com/archive/1/536629
    http://www.securityfocus.com/bid/77030
    http://www.securitytracker.com/id/1034452
    http://www.ubuntu.com/usn/USN-2929-1
    http://www.ubuntu.com/usn/USN-2929-2
    http://www.ubuntu.com/usn/USN-2932-1
    http://www.ubuntu.com/usn/USN-2947-1
    http://www.ubuntu.com/usn/USN-2947-2
    http://www.ubuntu.com/usn/USN-2947-3
    http://www.ubuntu.com/usn/USN-2948-1
    http://www.ubuntu.com/usn/USN-2948-2
    http://www.ubuntu.com/usn/USN-2967-1
    http://www.ubuntu.com/usn/USN-2967-2
    https://bugzilla.redhat.com/show_bug.cgi?id=1201858

    Common Vulnerability Scoring System

    Attack Vector
    Network
    Adjacent
    Local
    Physical
    Privileges Required
    None
    Low
    High
    User Interaction
    None
    Required
    Scope
    Unchanged
    Changed
    Confidentiality
    None
    Low
    High
    Integrity
    None
    Low
    High
    Availability
    None
    Low
    High