CVE-2015-5707

Published: Oct 19, 2015Modified: May 6, 2026

4.6

Vector

AV:L/AC:L/Au:N/C:P/I:P/A:P

Exploitability: 3.9 / Impact: 6.4

Source: NVD

Description

Integer overflow in the sg_start_req function in drivers/scsi/sg.c in the Linux kernel 2.6.x through 4.x before 4.1 allows local users to cause a denial of service or possibly have unspecified other impact via a large iov_count value in a write request.

Affected (10)

Products: Linux: Linux Kernel · Canonical: Ubuntu Linux · Debian: Debian Linux · +1 more

Show all products

Linux: Linux Kernel · Canonical: Ubuntu Linux · Debian: Debian Linux · Suse: Suse Linux Enterprise Desktop, Suse Linux Enterprise Server

1 product

1 product

1 product

2 products

Suse Linux Enterprise Desktop

Suse Linux Enterprise Server

Configuration A

1 vulnerable

Vulnerable Software	Affected Versions
Linux Linux Kernel	From 2.6.0 to 4.1.0

Configuration B

3 vulnerable

Vulnerable Software	Affected Versions
Canonical Ubuntu Linux	Version 12.04
Canonical Ubuntu Linux	Version 14.04
Canonical Ubuntu Linux	Version 15.04

Configuration C

2 vulnerable

Vulnerable Software	Affected Versions
Debian Debian Linux	Version 7.0
Debian Debian Linux	Version 8.0

Configuration D

4 vulnerable

Vulnerable Software	Affected Versions
Suse Suse Linux Enterprise Desktop	Version 11 sp3
Suse Suse Linux Enterprise Server	Version 11 sp2
Suse Suse Linux Enterprise Server	Version 11 sp3
Suse Suse Linux Enterprise Server	Version 11 sp3

Related CWEs

CWE-190

Integer Overflow or Wraparound

The product performs a calculation that can produce an integer overflow or wraparound when the logic assumes that the resulting value will always be larger than the original value. This occurs when an integer value is incremented to a value that is too large to store in the associated representation. When this occurs, the value may become a very small or negative number.

References (54)

http://git.kernel.org/cgit/linux/kernel/git/torvalds/linux.git/commit/?id=451a2886b6bf90e2fb378f7c46c655450fb96e81

Source: cve@mitre.org

PatchVendor Advisory

http://git.kernel.org/cgit/linux/kernel/git/torvalds/linux.git/commit/?id=fdc81f45e9f57858da6351836507fbcf1b7583ee

Source: cve@mitre.org

PatchVendor Advisory

http://lists.opensuse.org/opensuse-security-announce/2015-09/msg00004.html

Source: cve@mitre.org

Mailing ListThird Party Advisory

http://lists.opensuse.org/opensuse-security-announce/2015-09/msg00018.html

Source: cve@mitre.org

Mailing ListThird Party Advisory

http://lists.opensuse.org/opensuse-security-announce/2015-09/msg00021.html

Source: cve@mitre.org

Mailing ListThird Party Advisory

http://lists.opensuse.org/opensuse-security-announce/2015-11/msg00026.html

Source: cve@mitre.org

Mailing ListThird Party Advisory

http://lists.opensuse.org/opensuse-security-announce/2015-11/msg00027.html

Source: cve@mitre.org

Mailing ListThird Party Advisory

http://lists.opensuse.org/opensuse-security-announce/2015-11/msg00028.html

Source: cve@mitre.org

Mailing ListThird Party Advisory

http://lists.opensuse.org/opensuse-security-announce/2015-11/msg00029.html

Source: cve@mitre.org

Mailing ListThird Party Advisory

http://lists.opensuse.org/opensuse-security-announce/2015-11/msg00030.html

Source: cve@mitre.org

Mailing ListThird Party Advisory

http://lists.opensuse.org/opensuse-security-announce/2015-11/msg00031.html

Source: cve@mitre.org

Mailing ListThird Party Advisory

http://lists.opensuse.org/opensuse-security-announce/2015-11/msg00032.html

Source: cve@mitre.org

Mailing ListThird Party Advisory

http://www.debian.org/security/2015/dsa-3329

Source: cve@mitre.org

Third Party Advisory

http://www.openwall.com/lists/oss-security/2015/08/01/6

Source: cve@mitre.org

Mailing ListThird Party Advisory

http://www.securityfocus.com/bid/76145

Source: cve@mitre.org

Third Party AdvisoryVDB Entry

http://www.securitytracker.com/id/1033521

Source: cve@mitre.org

Third Party AdvisoryVDB Entry

http://www.ubuntu.com/usn/USN-2733-1

Source: cve@mitre.org

Third Party Advisory

http://www.ubuntu.com/usn/USN-2734-1

Source: cve@mitre.org

Third Party Advisory

http://www.ubuntu.com/usn/USN-2737-1

Source: cve@mitre.org

Third Party Advisory

http://www.ubuntu.com/usn/USN-2738-1

Source: cve@mitre.org

Third Party Advisory

http://www.ubuntu.com/usn/USN-2750-1

Source: cve@mitre.org

Third Party Advisory

http://www.ubuntu.com/usn/USN-2759-1

Source: cve@mitre.org

Third Party Advisory

http://www.ubuntu.com/usn/USN-2760-1

Source: cve@mitre.org

Third Party Advisory

https://bugzilla.redhat.com/show_bug.cgi?id=1250030

Source: cve@mitre.org

Issue TrackingThird Party Advisory

https://github.com/torvalds/linux/commit/451a2886b6bf90e2fb378f7c46c655450fb96e81

Source: cve@mitre.org

PatchThird Party Advisory

https://github.com/torvalds/linux/commit/fdc81f45e9f57858da6351836507fbcf1b7583ee

Source: cve@mitre.org

PatchThird Party Advisory

https://source.android.com/security/bulletin/2017-07-01

Source: cve@mitre.org

Third Party Advisory

http://git.kernel.org/cgit/linux/kernel/git/torvalds/linux.git/commit/?id=451a2886b6bf90e2fb378f7c46c655450fb96e81