Buffer overflow in Linux Kernel
CVE-2014-3183
Heap-based buffer overflow in the logi_dj_ll_raw_request function in drivers/hid/hid-logitech-dj.c in the Linux kernel before 3.16.2 allows physically proximate attackers to cause a denial of service (system crash) or possibly execute arbitrary code via a crafted device that specifies a large report size for an LED report.
Vulnerability class: Buffer Overflow
EPSS: 0.005 (39.9th percentile) — read the EPSS interpretation.
Affected products
- Linux Linux_kernel
- N/a — versions n/a
Weakness classification (CWE)
References
- chrome-cve-admin@google.com (x_refsource_CONFIRM, Mailing List, Vendor Advisory)
- chrome-cve-admin@google.com (mailing-list, x_refsource_MLIST, Mailing List)
- chrome-cve-admin@google.com (x_refsource_CONFIRM, Broken Link)
- chrome-cve-admin@google.com (x_refsource_CONFIRM, Issue Tracking)
- chrome-cve-admin@google.com (x_refsource_CONFIRM, Third Party Advisory)
- chrome-cve-admin@google.com (Third Party Advisory, x_refsource_MISC)