PT-2019-7248
CVE-2015-9289
·
تاريخ النشر
2015-08-12
·
تاريخ التحديث
2020-04-08
الوصف من
CVSS 3.1
5.5
متوسطةالمقاييسAV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N
Name of the Vulnerable Software and Affected Versions
Linux kernel versions prior to 4.1.4
Description
A buffer overflow occurs when checking userspace parameters in the drivers/media/dvb-frontends/cx24116.c file. The maximum size for a DiSEqC command is 6, according to the userspace API, but the code allows larger values, such as 23.
Recommendations
For versions prior to 4.1.4, update to version 4.1.4 or later to resolve the issue. As a temporary workaround, consider restricting the size of DiSEqC commands to the maximum allowed value of 6 to minimize the risk of exploitation.
وجدت خطأً في الوصف؟ لديك ما تضيفه؟ لا تتردد في مراسلتنا 👾