Vulnerability Database

313,825

Total vulnerabilities in the database

CVE-2015-4004

The OZWPAN driver in the Linux kernel through 4.0.5 relies on an untrusted length field during packet parsing, which allows remote attackers to obtain sensitive information from kernel memory or cause a denial of service (out-of-bounds read and system crash) via a crafted packet.

  • Published: Jun 7, 2015
  • Updated: Nov 9, 2025
  • CVE: CVE-2015-4004
  • Severity: High
  • Exploit:

CVSS v2:

  • Severity: High
  • Score: 8.5
  • AV:N/AC:L/Au:N/C:P/I:N/A:C

CWEs:

Software From Fixed in
canonical / ubuntu_linux 15.10 15.10.x
canonical / ubuntu_linux 14.04 14.04.x
canonical / ubuntu_linux 12.04 12.04.x
linux / linux_kernel 3.4 4.3