Buffer overflow in Linux Kernel

CVE-2014-3181

Multiple stack-based buffer overflows in the magicmouse_raw_event function in drivers/hid/hid-magicmouse.c in the Magic Mouse HID driver in the Linux kernel through 3.16.3 allow physically proximate attackers to cause a denial of service (system crash) or possibly execute arbitrary code via a crafted device that provides a large amount of (1) EHCI or (2) XHCI data associated with an event.

Vulnerability class: Buffer Overflow

EPSS: 0.008 (51.7th percentile) — read the EPSS interpretation.

Affected products

Linux Linux_kernel
N/a — versions n/a

Weakness classification (CWE)

CWE-119 — Improper Restriction of Operations within the Bounds of a Memory Buffer

References

chrome-cve-admin@google.com (x_refsource_UBUNTU, vendor-advisory, Third Party Advisory)
chrome-cve-admin@google.com (x_refsource_REDHAT, vendor-advisory, Third Party Advisory)
chrome-cve-admin@google.com (VDB Entry, Third Party Advisory, vdb-entry, x_refsource_BID)
chrome-cve-admin@google.com (Third Party Advisory, x_refsource_MISC)
chrome-cve-admin@google.com (x_refsource_CONFIRM, Third Party Advisory)
chrome-cve-admin@google.com (x_refsource_CONFIRM, Third Party Advisory, Broken Link)
chrome-cve-admin@google.com (vendor-advisory, VDB Entry, Third Party Advisory, x_refsource_SUSE)
chrome-cve-admin@google.com (mailing-list, x_refsource_MLIST, Mailing List, Third Party Advisory)
chrome-cve-admin@google.com (x_refsource_UBUNTU, vendor-advisory, Third Party Advisory)
chrome-cve-admin@google.com (vendor-advisory, Third Party Advisory, x_refsource_SUSE)