Vulnerability in Google Android
CVE-2015-1805
The (1) pipe_read and (2) pipe_write implementations in fs/pipe.c in the Linux kernel before 3.16 do not properly consider the side effects of failed __copy_to_user_inatomic and __copy_from_user_inatomic calls, which allows local users to cause a denial of service (system crash) or possibly gain privileges via a crafted application, aka an "I/O vector array overrun."
EPSS: 0.012 (65.7th percentile) — read the EPSS interpretation.
Affected products
- Google Android — versions 4.4.3, 5.0.1, 5.1
- Linux Linux_kernel
- N/a — versions n/a
Weakness classification (CWE)
Public proof-of-concept exploits
- dosomder/iovyroot
- panyu6325/CVE-2015-1805
- ireshchaminda1/Android-Privilege-Escalation-Remote-Access-Vulnerability-CVE-2015-1805
- FloatingGuy/cve-2015-1805
- mobilelinux/iovy_root_research
- GhostTroops/TOP
- JERRY123S/all-poc
- JyotsnaSharma598/cybersecurity_
- R0B1NL1N/linux-kernel-exploitation
- Technoashofficial/kernel-exploitation-linux
References
- secalert@redhat.com (x_refsource_REDHAT, vendor-advisory)
- secalert@redhat.com (vendor-advisory, x_refsource_DEBIAN)
- secalert@redhat.com (vdb-entry, x_refsource_SECTRACK)
- secalert@redhat.com (vendor-advisory, x_refsource_SUSE)
- secalert@redhat.com (vdb-entry, x_refsource_BID)
- secalert@redhat.com (x_refsource_REDHAT, vendor-advisory)
- secalert@redhat.com (x_refsource_UBUNTU, vendor-advisory)
- secalert@redhat.com (vendor-advisory, x_refsource_SUSE)
- secalert@redhat.com (x_refsource_CONFIRM)
- secalert@redhat.com (x_refsource_CONFIRM)
Frequently asked questions
- What is CVE-2015-1805?
- CVE-2015-1805 is a vulnerability in Google Android, classified under CWE-17. Published 2015-08-08.
- Is CVE-2015-1805 known to be exploited?
- 40 public proof-of-concept repositories are indexed. Not currently listed in the CISA KEV catalog.