CVE-2016-3955

critical · 9.8

The usbip_recv_xbuff function in drivers/usb/usbip/usbip_common.c in the Linux kernel before 4.5.3 allows remote attackers to cause a denial of service (out-of-bounds write) or possibly have unspecified other impact via a crafted length value in a USB/IP packet.

9.8

CVSS

25.9%

EPSS (exploit prob.)

98th

EPSS percentile

2016-07-03

Published

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

Weaknesses

CWE-119

Affected products

Vendor	Product	Affected versions
canonical	ubuntu_linux	12.04
canonical	ubuntu_linux	12.04
canonical	ubuntu_linux	14.04
canonical	ubuntu_linux	14.04
canonical	ubuntu_linux	15.10
linux	linux_kernel	< 3.2.80
linux	linux_kernel	>= 3.3, < 3.10.102
linux	linux_kernel	>= 3.11, < 3.12.59
linux	linux_kernel	>= 3.13, < 3.14.68
linux	linux_kernel	>= 3.17, < 3.18.37
linux	linux_kernel	>= 3.19, < 4.1.28
linux	linux_kernel	>= 4.2, < 4.4.9
linux	linux_kernel	>= 4.5, < 4.5.3
debian	debian_linux	8.0

Check a specific version with /api/v1/cve/match.

References

Query this programmatically:

curl https://evil-db.io/api/v1/cve/CVE-2016-3955