CVE-2015-5706 :: Enginsight Vulnerability Database

Provider	Type	Base Score	Atk. Vector	Atk. Complexity	Vector
NIST	NIST	4.6 UNKNOWN	LOCAL	LOW	AV:L/AC:L/Au:N/C:P/I:P/A:P
mitre	CNA	---			---
CVE	ADP	---			---

Base Score

CVSS 3.x

EPSS Score

Percentile: 22%

Vendor	Product	Version
linux	linux_kernel	3.0 ≤ 𝑥 ≤ 3.19.8
linux	linux_kernel	4.0 ≤ 𝑥 < 4.0.4
canonical	ubuntu_linux	12.04
canonical	ubuntu_linux	14.04
debian	debian_linux	7.0
debian	debian_linux	8.0

𝑥

= Vulnerable software versions

Debian Releases

Debian Product

Codename

linux

bullseye	5.10.223-1 fixed
wheezy	not-affected
bullseye (security)	5.10.226-1 fixed
bookworm	6.1.106-3 fixed
bookworm (security)	6.1.112-1 fixed
trixie	6.11.5-1 fixed
sid	6.11.6-1 fixed

Ubuntu Releases

Ubuntu Product

Codename

linux

yakkety	not-affected
xenial	not-affected
wily	not-affected
vivid	Fixed 3.19.0-22.22 released
utopic	ignored
trusty	Fixed 3.13.0-58.97 released
precise	not-affected

linux-2.6

yakkety	dne
xenial	dne
wily	dne
vivid	dne
trusty	dne
precise	dne

linux-armadaxp

yakkety	dne
xenial	dne
wily	dne
vivid	dne
utopic	dne
trusty	dne
precise	not-affected

linux-aws

yakkety	dne
xenial	not-affected
trusty	not-affected
precise	dne

linux-ec2

yakkety	dne
xenial	dne
wily	dne
vivid	dne
utopic	dne
trusty	dne
precise	dne

linux-flo

yakkety	not-affected
xenial	not-affected
wily	not-affected
vivid	not-affected
utopic	not-affected
trusty	dne
precise	dne

linux-fsl-imx51

yakkety	dne
xenial	dne
wily	dne
vivid	dne
utopic	dne
trusty	dne
precise	dne

linux-gke

yakkety	dne
xenial	not-affected
trusty	dne
precise	dne

linux-goldfish

yakkety	not-affected
xenial	not-affected
wily	not-affected
vivid	not-affected
utopic	not-affected
trusty	dne
precise	dne

linux-grouper

yakkety	dne
xenial	dne
wily	dne
vivid	dne
utopic	not-affected
trusty	dne
precise	dne

linux-hwe

yakkety	dne
xenial	not-affected
trusty	dne
precise	dne

linux-hwe-edge

yakkety	dne
xenial	not-affected
trusty	dne
precise	dne

linux-linaro-omap

yakkety	dne
xenial	dne
wily	dne
vivid	dne
utopic	dne
trusty	dne
precise	ignored

linux-linaro-shared

yakkety	dne
xenial	dne
wily	dne
vivid	dne
utopic	dne
trusty	dne
precise	ignored

linux-linaro-vexpress

yakkety	dne
xenial	dne
wily	dne
vivid	dne
utopic	dne
trusty	dne
precise	ignored

linux-lts-quantal

yakkety	dne
xenial	dne
wily	dne
vivid	dne
utopic	dne
trusty	dne
precise	not-affected

linux-lts-raring

yakkety	dne
xenial	dne
wily	dne
vivid	dne
utopic	dne
trusty	dne
precise	ignored

linux-lts-saucy

yakkety	dne
xenial	dne
wily	dne
vivid	dne
utopic	dne
trusty	dne
precise	ignored

linux-lts-trusty

yakkety	dne
xenial	dne
wily	dne
vivid	dne
utopic	dne
trusty	dne
precise	Fixed 3.13.0-58.97~precise1 released

linux-lts-utopic

yakkety	dne
xenial	dne
wily	dne
vivid	dne
utopic	dne
trusty	Fixed 3.16.0-43.58~14.04.1 released
precise	dne

linux-lts-vivid

yakkety	dne
xenial	dne
wily	dne
vivid	dne
utopic	dne
trusty	Fixed 3.19.0-22.22~14.04.1 released
precise	dne

linux-lts-wily

yakkety	dne
xenial	dne
wily	dne
vivid	dne
trusty	dne
precise	dne

linux-lts-xenial

yakkety	dne
xenial	dne
wily	dne
vivid	dne
trusty	not-affected
precise	dne

linux-maguro

yakkety	dne
xenial	dne
wily	dne
vivid	dne
utopic	dne
trusty	dne
precise	dne

linux-mako

yakkety	not-affected
xenial	not-affected
wily	not-affected
vivid	not-affected
utopic	not-affected
trusty	dne
precise	dne

linux-manta

yakkety	dne
xenial	dne
wily	not-affected
vivid	not-affected
utopic	not-affected
trusty	dne
precise	dne

linux-mvl-dove

yakkety	dne
xenial	dne
wily	dne
vivid	dne
utopic	dne
trusty	dne
precise	dne

linux-qcm-msm

yakkety	dne
xenial	dne
wily	dne
vivid	dne
utopic	dne
trusty	dne
precise	ignored

linux-raspi2

yakkety	not-affected
xenial	not-affected
wily	not-affected
vivid	dne
trusty	dne
precise	dne

linux-snapdragon

yakkety	not-affected
xenial	not-affected
wily	dne
trusty	dne
precise	dne

linux-ti-omap4

yakkety	dne
xenial	dne
wily	dne
vivid	dne
utopic	dne
trusty	dne
precise	not-affected

Common Weakness Enumeration

CWE-416 - Use After Free
Referencing memory after it has been freed can cause a program to crash, use unexpected values, or execute code.

References

http://git.kernel.org/cgit/linux/kernel/git/torvalds/linux.git/commit/?id=f15133df088ecadd141ea1907f2c96df67c729f0

http://twitter.com/grsecurity/statuses/597127122910490624

http://www.debian.org/security/2015/dsa-3329

http://www.kernel.org/pub/linux/kernel/v4.x/ChangeLog-4.0.4

http://www.openwall.com/lists/oss-security/2015/08/01/5

http://www.securityfocus.com/bid/76142

http://www.ubuntu.com/usn/USN-2680-1

http://www.ubuntu.com/usn/USN-2681-1

https://bugzilla.redhat.com/show_bug.cgi?id=1250047

https://github.com/torvalds/linux/commit/f15133df088ecadd141ea1907f2c96df67c729f0

https://source.android.com/security/bulletin/2017-01-01.html