CVE-2015-3331

Published: May 27, 2015Modified: May 6, 2026

9.3

Vector

AV:N/AC:M/Au:N/C:C/I:C/A:C

Exploitability: 8.6 / Impact: 10.0

Source: NVD

Description

The __driver_rfc4106_decrypt function in arch/x86/crypto/aesni-intel_glue.c in the Linux kernel before 3.19.3 does not properly determine the memory locations used for encrypted data, which allows context-dependent attackers to cause a denial of service (buffer overflow and system crash) or possibly execute arbitrary code by triggering a crypto API call, as demonstrated by use of a libkcapi test program with an AF_ALG(aead) socket.

Affected (11)

Products: Linux: Linux Kernel · Debian: Debian Linux · Canonical: Ubuntu Linux

1 product

1 product

1 product

Configuration A

8 vulnerable

Vulnerable Software	Affected Versions
Linux Linux Kernel	Before 3.2.69
Linux Linux Kernel	From 3.12 to 3.12.40
Linux Linux Kernel	From 3.13 to 3.14.37
Linux Linux Kernel	From 3.15 to 3.16.35
Linux Linux Kernel	From 3.17 to 3.18.11
Linux Linux Kernel	From 3.19 to 3.19.3
Linux Linux Kernel	From 3.3 to 3.4.108
Linux Linux Kernel	From 3.5 to 3.10.73

Configuration B

2 vulnerable

Vulnerable Software	Affected Versions
Debian Debian Linux	Version 7.0
Debian Debian Linux	Version 8.0

Configuration C

1 vulnerable

Vulnerable Software	Affected Versions
Canonical Ubuntu Linux	Version 12.04

Related CWEs

Improper Restriction of Operations within the Bounds of a Memory Buffer

The product performs operations on a memory buffer, but it reads from or writes to a memory location outside the buffer's intended boundary. This may result in read or write operations on unexpected memory locations that could be linked to other variables, data structures, or internal program data.

References (34)

http://git.kernel.org/?p=linux/kernel/git/torvalds/linux-2.6.git%3Ba=commit%3Bh=ccfe8c3f7e52ae83155cb038753f4c75b774ca8a

Source: cve@mitre.org

http://lists.opensuse.org/opensuse-security-announce/2015-09/msg00004.html

Source: cve@mitre.org

Issue TrackingThird Party Advisory

http://lists.opensuse.org/opensuse-security-announce/2015-09/msg00007.html

Source: cve@mitre.org

Issue TrackingThird Party Advisory

http://lists.opensuse.org/opensuse-security-announce/2015-09/msg00008.html

Source: cve@mitre.org

Issue TrackingThird Party Advisory

http://lists.opensuse.org/opensuse-security-announce/2015-09/msg00009.html

Source: cve@mitre.org

Issue TrackingThird Party Advisory

http://lists.opensuse.org/opensuse-security-announce/2015-09/msg00011.html

Source: cve@mitre.org

Issue TrackingThird Party Advisory

http://rhn.redhat.com/errata/RHSA-2015-1081.html

Source: cve@mitre.org

Third Party Advisory

http://rhn.redhat.com/errata/RHSA-2015-1199.html

Source: cve@mitre.org

Third Party Advisory

http://www.debian.org/security/2015/dsa-3237

Source: cve@mitre.org

Third Party Advisory

http://www.kernel.org/pub/linux/kernel/v3.x/ChangeLog-3.19.3

Source: cve@mitre.org

Vendor Advisory

http://www.openwall.com/lists/oss-security/2015/04/14/16

Source: cve@mitre.org

Mailing List

http://www.oracle.com/technetwork/topics/security/linuxbulletinjan2016-2867209.html

Source: cve@mitre.org

Third Party Advisory

http://www.securitytracker.com/id/1032416

Source: cve@mitre.org

Third Party AdvisoryVDB Entry

http://www.ubuntu.com/usn/USN-2631-1

Source: cve@mitre.org

Third Party Advisory

http://www.ubuntu.com/usn/USN-2632-1

Source: cve@mitre.org

Third Party Advisory

https://bugzilla.redhat.com/show_bug.cgi?id=1213322

Source: cve@mitre.org

Issue Tracking

https://github.com/torvalds/linux/commit/ccfe8c3f7e52ae83155cb038753f4c75b774ca8a

Source: cve@mitre.org

Third Party Advisory

http://git.kernel.org/?p=linux/kernel/git/torvalds/linux-2.6.git%3Ba=commit%3Bh=ccfe8c3f7e52ae83155cb038753f4c75b774ca8a

Source: af854a3a-2127-422b-91ae-364da2661108

http://lists.opensuse.org/opensuse-security-announce/2015-09/msg00004.html

Source: af854a3a-2127-422b-91ae-364da2661108

Issue TrackingThird Party Advisory

http://lists.opensuse.org/opensuse-security-announce/2015-09/msg00007.html

Source: af854a3a-2127-422b-91ae-364da2661108

Issue TrackingThird Party Advisory

http://lists.opensuse.org/opensuse-security-announce/2015-09/msg00008.html

Source: af854a3a-2127-422b-91ae-364da2661108

Issue TrackingThird Party Advisory

http://lists.opensuse.org/opensuse-security-announce/2015-09/msg00009.html

Source: af854a3a-2127-422b-91ae-364da2661108

Issue TrackingThird Party Advisory

http://lists.opensuse.org/opensuse-security-announce/2015-09/msg00011.html

Source: af854a3a-2127-422b-91ae-364da2661108

Issue TrackingThird Party Advisory

http://rhn.redhat.com/errata/RHSA-2015-1081.html

Source: af854a3a-2127-422b-91ae-364da2661108

Third Party Advisory

http://rhn.redhat.com/errata/RHSA-2015-1199.html

Source: af854a3a-2127-422b-91ae-364da2661108

Third Party Advisory

http://www.debian.org/security/2015/dsa-3237

Source: af854a3a-2127-422b-91ae-364da2661108

Third Party Advisory

http://www.kernel.org/pub/linux/kernel/v3.x/ChangeLog-3.19.3

Source: af854a3a-2127-422b-91ae-364da2661108

Vendor Advisory

http://www.openwall.com/lists/oss-security/2015/04/14/16

Source: af854a3a-2127-422b-91ae-364da2661108

Mailing List

http://www.oracle.com/technetwork/topics/security/linuxbulletinjan2016-2867209.html

Source: af854a3a-2127-422b-91ae-364da2661108

Third Party Advisory

http://www.securitytracker.com/id/1032416

Source: af854a3a-2127-422b-91ae-364da2661108

Third Party AdvisoryVDB Entry

http://www.ubuntu.com/usn/USN-2631-1

Source: af854a3a-2127-422b-91ae-364da2661108

Third Party Advisory

http://www.ubuntu.com/usn/USN-2632-1

Source: af854a3a-2127-422b-91ae-364da2661108

Third Party Advisory

https://bugzilla.redhat.com/show_bug.cgi?id=1213322

Source: af854a3a-2127-422b-91ae-364da2661108

Issue Tracking

https://github.com/torvalds/linux/commit/ccfe8c3f7e52ae83155cb038753f4c75b774ca8a

Source: af854a3a-2127-422b-91ae-364da2661108

Third Party Advisory

Timeline

No history available yet.