Buffer overflow in Linux Kernel

CVE-2014-3185

Multiple buffer overflows in the command_port_read_callback function in drivers/usb/serial/whiteheat.c in the Whiteheat USB Serial Driver in the Linux kernel before 3.16.2 allow physically proximate attackers to execute arbitrary code or cause a denial of service (memory corruption and system crash) via a crafted device that provides a large amount of (1) EHCI or (2) XHCI data associated with a bulk response.

Vulnerability class: Buffer Overflow

EPSS: 0.006 (45.0th percentile) — read the EPSS interpretation.

Affected products

Linux Linux_kernel
N/a — versions n/a

Weakness classification (CWE)

CWE-119 — Improper Restriction of Operations within the Bounds of a Memory Buffer

References

chrome-cve-admin@google.com (x_refsource_UBUNTU, vendor-advisory, VDB Entry, Third Party Advisory)
chrome-cve-admin@google.com (x_refsource_REDHAT, vendor-advisory, VDB Entry, Third Party Advisory)
chrome-cve-admin@google.com (x_refsource_UBUNTU, vendor-advisory, VDB Entry, Third Party Advisory)
chrome-cve-admin@google.com (x_refsource_CONFIRM, Third Party Advisory)
chrome-cve-admin@google.com (vendor-advisory, VDB Entry, Third Party Advisory, x_refsource_SUSE)
chrome-cve-admin@google.com (x_refsource_CONFIRM, Broken Link)
chrome-cve-admin@google.com (Third Party Advisory, x_refsource_MISC)
chrome-cve-admin@google.com (x_refsource_CONFIRM, Mailing List, Third Party Advisory)
chrome-cve-admin@google.com (vendor-advisory, VDB Entry, Third Party Advisory, x_refsource_SUSE)
chrome-cve-admin@google.com (mailing-list, x_refsource_MLIST, Mailing List)