| Max CVSS | 6.9 | Min CVSS | 1.7 | Total Count | 2 |
| ID | CVSS | Summary | Last (major) update | Published | |
| CVE-2015-8709 | 6.9 |
kernel/ptrace.c in the Linux kernel through 4.4.1 mishandles uid and gid mappings, which allows local users to gain privileges by establishing a user namespace, waiting for a root process to enter that namespace with an unsafe uid or gid, and then us
|
11-04-2024 - 00:54 | 08-02-2016 - 03:59 | |
| CVE-2015-8543 | 6.9 |
The networking implementation in the Linux kernel through 4.3.3, as used in Android and other products, does not validate protocol identifiers for certain protocol families, which allows local users to cause a denial of service (NULL function pointer
|
07-06-2023 - 12:47 | 28-12-2015 - 11:59 | |
| CVE-2015-7513 | 4.9 |
arch/x86/kvm/x86.c in the Linux kernel before 4.4 does not reset the PIT counter values during state restoration, which allows guest OS users to cause a denial of service (divide-by-zero error and host OS crash) via a zero value, related to the kvm_v
|
10-12-2021 - 20:04 | 08-02-2016 - 03:59 | |
| CVE-2015-8551 | 4.7 |
The PCI backend driver in Xen, when running on an x86 system and using Linux 3.1.x through 4.3.x as the driver domain, allows local guest administrators to hit BUG conditions and cause a denial of service (NULL pointer dereference and host OS crash)
|
26-08-2020 - 13:53 | 13-04-2016 - 15:59 | |
| CVE-2015-8552 | 1.7 |
The PCI backend driver in Xen, when running on an x86 system and using Linux 3.1.x through 4.3.x as the driver domain, allows local guest administrators to generate a continuous stream of WARN messages and cause a denial of service (disk consumption)
|
04-11-2017 - 01:29 | 13-04-2016 - 15:59 | |
| CVE-2015-8550 | 5.7 |
Xen, when used on a system providing PV backends, allows local guest OS administrators to cause a denial of service (host OS crash) or gain privileges by writing to memory shared between the frontend and backend, aka a double fetch vulnerability.
|
04-11-2017 - 01:29 | 14-04-2016 - 14:59 | |
| CVE-2015-8569 | 1.9 |
The (1) pptp_bind and (2) pptp_connect functions in drivers/net/ppp/pptp.c in the Linux kernel through 4.3.3 do not verify an address length, which allows local users to obtain sensitive information from kernel memory and bypass the KASLR protection
|
04-11-2017 - 01:29 | 28-12-2015 - 11:59 | |
| CVE-2015-8575 | 2.1 |
The sco_sock_bind function in net/bluetooth/sco.c in the Linux kernel before 4.3.4 does not verify an address length, which allows local users to obtain sensitive information from kernel memory and bypass the KASLR protection mechanism via a crafted
|
04-11-2017 - 01:29 | 08-02-2016 - 03:59 | |
| CVE-2015-7550 | 4.9 |
The keyctl_read_key function in security/keys/keyctl.c in the Linux kernel before 4.3.4 does not properly use a semaphore, which allows local users to cause a denial of service (NULL pointer dereference and system crash) or possibly have unspecified
|
04-11-2017 - 01:29 | 08-02-2016 - 03:59 |