high7.8Public exploit code
CVE-2015-0569
Heap-based buffer overflow in the private wireless extensions IOCTL implementation in wlan_hdd_wext.c in the WLAN (aka Wi-Fi) driver for the Linux kernel 3.x a…
Public exploit code
Working exploit or proof of concept code has been published for this vulnerability. Treat unpatched systems as at risk.
- Linux Kernel 3.x/4.x - prima WLAN Driver Heap Overflow2016-01-25 · dos · linux
Impact
Heap-based buffer overflow in the private wireless extensions IOCTL implementation in wlan_hdd_wext.c in the WLAN (aka Wi-Fi) driver for the Linux kernel 3.x and 4.x, as used in Qualcomm Innovation Center (QuIC) Android contributions for MSM devices and other products, allows attackers to gain privileges via a crafted application that establishes a packet filter.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Linux | Linux Kernel | from 3.0.0 through 3.19.8 from 4.0.0 through 4.20.15 |
Weakness classification
References
- NVD record
- CVE.org record
- http://source.android.com/security/bulletin/2016-05-01.html
- http://www.securityfocus.com/bid/77691
- https://www.codeaurora.org/projects/security-advisories/multiple-issues-wlan-driver-allow-local-privilege-escalation-cve-2015
- https://www.exploit-db.com/exploits/39308/
- http://source.android.com/security/bulletin/2016-05-01.html
- http://www.securityfocus.com/bid/77691
- https://www.codeaurora.org/projects/security-advisories/multiple-issues-wlan-driver-allow-local-privilege-escalation-cve-2015
- https://www.exploit-db.com/exploits/39308/