NetSight
IP …
critical9.3

CVE-2015-3331

The __driver_rfc4106_decrypt function in arch/x86/crypto/aesni-intel_glue.c in the Linux kernel before 3.19.3 does not properly determine the memory locations …

Impact

The __driver_rfc4106_decrypt function in arch/x86/crypto/aesni-intel_glue.c in the Linux kernel before 3.19.3 does not properly determine the memory locations used for encrypted data, which allows context-dependent attackers to cause a denial of service (buffer overflow and system crash) or possibly execute arbitrary code by triggering a crypto API call, as demonstrated by use of a libkcapi test program with an AF_ALG(aead) socket.

Affected products

VendorProductAffected versions
LinuxLinux Kernel
before 3.2.69
from 3.3 before 3.4.108
from 3.5 before 3.10.73
from 3.12 before 3.12.40
from 3.13 before 3.14.37
from 3.15 before 3.16.35
DebianDebian Linux
Versions 7.0, 8.0
CanonicalUbuntu Linux
Version 12.04

Weakness classification

CWE-119

References