cnvd-2015-03366
Vulnerability from cnvd
Title
KCodes NetUSB module for Linux kernel堆栈缓冲区溢出漏洞
Description
KCodes NetUSB module for Linux kernel是利用 150KB Flash and 1MB RAM 空间实现嵌入linux内核的技术。 KCodes NetUSB module for Linux kernel存在堆栈缓冲区溢出漏洞，允许远程攻击者通过在 TCP端口20005会话中提供一个长时间的计算机名称执行任意代码。
Severity
高
Patch Name
KCodes NetUSB module for Linux kernel堆栈缓冲区溢出漏洞的补丁
Patch Description
KCodes NetUSB module for Linux kernel是利用 150KB Flash and 1MB RAM 空间实现嵌入linux内核的技术。 KCodes NetUSB module for Linux kernel存在堆栈缓冲区溢出漏洞，允许远程攻击者通过在 TCP端口20005会话中提供一个长时间的计算机名称执行任意代码。目前，供应商发布了安全公告及相关补丁信息，修复了此漏洞。
Formal description

用户可联系供应商获得补丁信息： http://www.kcodes.com

Reference
https://www.sec-consult.com/fxdata/seccons/prod/temedia/advisories_txt/20150519-0_KCodes_NetUSB_Kernel_Stack_Buffer_Overflow_v10.txt
Impacted products
Name
KCodes NetUSB
Show details on source website

To clipboard 

{
  "cves": {
    "cve": {
      "cveNumber": "CVE-2015-3036"
    }
  },
  "description": "KCodes NetUSB module for Linux kernel\u662f\u5229\u7528 150KB Flash and 1MB RAM \u7a7a\u95f4\u5b9e\u73b0\u5d4c\u5165linux\u5185\u6838\u7684\u6280\u672f\u3002\r\n\r\nKCodes NetUSB module for Linux kernel\u5b58\u5728\u5806\u6808\u7f13\u51b2\u533a\u6ea2\u51fa\u6f0f\u6d1e\uff0c\u5141\u8bb8\u8fdc\u7a0b\u653b\u51fb\u8005\u901a\u8fc7\u5728 TCP\u7aef\u53e320005\u4f1a\u8bdd\u4e2d\u63d0\u4f9b\u4e00\u4e2a\u957f\u65f6\u95f4\u7684\u8ba1\u7b97\u673a\u540d\u79f0\u6267\u884c\u4efb\u610f\u4ee3\u7801\u3002",
  "discovererName": "Stefan Viehb\u9bffk (Office Vienna)                      SEC Consult Vulnerability Lab",
  "formalWay": "\u7528\u6237\u53ef\u8054\u7cfb\u4f9b\u5e94\u5546\u83b7\u5f97\u8865\u4e01\u4fe1\u606f\uff1a\r\nhttp://www.kcodes.com",
  "isEvent": "\u901a\u7528\u8f6f\u786c\u4ef6\u6f0f\u6d1e",
  "number": "CNVD-2015-03366",
  "openTime": "2015-05-27",
  "patchDescription": "KCodes NetUSB module for Linux kernel\u662f\u5229\u7528 150KB Flash and 1MB RAM \u7a7a\u95f4\u5b9e\u73b0\u5d4c\u5165linux\u5185\u6838\u7684\u6280\u672f\u3002 \r\n\r\nKCodes NetUSB module for Linux kernel\u5b58\u5728\u5806\u6808\u7f13\u51b2\u533a\u6ea2\u51fa\u6f0f\u6d1e\uff0c\u5141\u8bb8\u8fdc\u7a0b\u653b\u51fb\u8005\u901a\u8fc7\u5728 TCP\u7aef\u53e320005\u4f1a\u8bdd\u4e2d\u63d0\u4f9b\u4e00\u4e2a\u957f\u65f6\u95f4\u7684\u8ba1\u7b97\u673a\u540d\u79f0\u6267\u884c\u4efb\u610f\u4ee3\u7801\u3002\u76ee\u524d\uff0c\u4f9b\u5e94\u5546\u53d1\u5e03\u4e86\u5b89\u5168\u516c\u544a\u53ca\u76f8\u5173\u8865\u4e01\u4fe1\u606f\uff0c\u4fee\u590d\u4e86\u6b64\u6f0f\u6d1e\u3002",
  "patchName": "KCodes NetUSB module for Linux kernel\u5806\u6808\u7f13\u51b2\u533a\u6ea2\u51fa\u6f0f\u6d1e\u7684\u8865\u4e01",
  "products": {
    "product": "KCodes NetUSB"
  },
  "referenceLink": "https://www.sec-consult.com/fxdata/seccons/prod/temedia/advisories_txt/20150519-0_KCodes_NetUSB_Kernel_Stack_Buffer_Overflow_v10.txt",
  "serverity": "\u9ad8",
  "submitTime": "2015-05-21",
  "title": "KCodes NetUSB module for Linux kernel\u5806\u6808\u7f13\u51b2\u533a\u6ea2\u51fa\u6f0f\u6d1e"
}


Log in or create an account to share your comment.




Tags
Taxonomy of the tags.




Sightings

Author Source Type Date

Nomenclature

  • Seen: The vulnerability was mentioned, discussed, or seen somewhere by the user.
  • Confirmed: The vulnerability is confirmed from an analyst perspective.
  • Published Proof of Concept: A public proof of concept is available for this vulnerability.
  • Exploited: This vulnerability was exploited and seen by the user reporting the sighting.
  • Patched: This vulnerability was successfully patched by the user reporting the sighting.
  • Not exploited: This vulnerability was not exploited or seen by the user reporting the sighting.
  • Not confirmed: The user expresses doubt about the veracity of the vulnerability.
  • Not patched: This vulnerability was not successfully patched by the user reporting the sighting.