CVE-2015-7566

The clie_5_attach function in drivers/usb/serial/visor.c in the Linux kernel through 4.4.1 allows physically proximate attackers to cause a denial of service (NULL pointer dereference and system crash) or possibly have unspecified other impact by inserting a USB device that lacks a bulk-out endpoint.

Published: Feb 8, 2016
Updated: Apr 13, 2023
CVE: CVE-2015-7566
Severity: Low
Exploit:

CVSS v3:

Severity: Low
Score: 4.6
AV:P/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H

CVSS v2:

Severity: Low
Score: 4.9
AV:L/AC:L/Au:N/C:N/I:N/A:C

No CWE or OWASP classifications available.

Affected Software
References

Software	From	Fixed in
novell / suse_linux_enterprise_server	11-sp4	11-sp4.x
novell / suse_linux_enterprise_debuginfo	11-sp4	11-sp4.x
novell / suse_linux_enterprise_software_development_kit	11-sp4	11-sp4.x
novell / suse_linux_enterprise_real_time_extension	11-sp4	11-sp4.x
novell / suse_linux_enterprise_real_time_extension	12-sp1	12-sp1.x
novell / suse_linux_enterprise_server	11-extra	11-extra.x
linux / linux_kernel	-	4.4.1.x

Vulnerability Database

CVE-2015-7566

Deep Security Visibility Without the Complexity