CVE-2015-0569
HighHeap-based buffer overflow in the private wireless extensions IOCTL implementation in wlan_hdd_wext.c in the WLAN (aka Wi-Fi) driver for the Linux kernel 3.x and 4.x, as used in Qualcomm Innovation Center (QuIC) Android contributions for MSM devices and other products, allows attackers to gain privileges via a crafted application that establishes a packet filter.
CVSS 3.1 score
7.8
CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H
Weakness type
CWE-787CVE-2015-0569 is a Out-of-bounds Write vulnerability
What is Out-of-bounds Write?
The product writes data past the end or before the beginning of the intended buffer. Learn more on MITRE CWE
References
4 total-
Exploit-DBhttps://www.exploit-db.com/exploits/39308/Exploit Third Party Advisory VDB Entry
-
Vendor Advisory
-
Securityfocushttp://www.securityfocus.com/bid/77691Third Party Advisory VDB Entry
-
Broken Link
Frequently asked questions
-
What is CVE-2015-0569?
CVE-2015-0569 is a High severity Linux kernel vulnerability with a CVSS score of 7.8 out of 10 , classified as an Out-of-bounds Write flaw (CWE-787) . CVE-2015-0569 has not been confirmed as actively exploited and is not listed in the CISA KEV catalog.
-
What is the CVSS score for CVE-2015-0569?
CVE-2015-0569 has a CVSS score of 7.8 out of 10, rated High severity (CVSS 3.1). The vector string is
CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H. -
Is there a patch available for CVE-2015-0569?
Monitor the NIST NVD and your Linux distribution's security advisories for CVE-2015-0569 patch availability.
-
Is CVE-2015-0569 actively exploited?
No. CVE-2015-0569 has not been confirmed as actively exploited. It is not listed in the CISA Known Exploited Vulnerabilities (KEV) catalog.