NetSight
IP …
medium6.9

CVE-2014-3185

Multiple buffer overflows in the command_port_read_callback function in drivers/usb/serial/whiteheat.c in the Whiteheat USB Serial Driver in the Linux kernel b…

Impact

Multiple buffer overflows in the command_port_read_callback function in drivers/usb/serial/whiteheat.c in the Whiteheat USB Serial Driver in the Linux kernel before 3.16.2 allow physically proximate attackers to execute arbitrary code or cause a denial of service (memory corruption and system crash) via a crafted device that provides a large amount of (1) EHCI or (2) XHCI data associated with a bulk response.

Affected products

VendorProductAffected versions
LinuxLinux Kernel
before 3.2.63
from 3.3 before 3.4.104
from 3.5 before 3.10.54
from 3.11 before 3.12.29
from 3.13 before 3.14.18
from 3.15 before 3.16.2

Weakness classification

CWE-119

References