CVE-2015-3036: Buffer Overflow
Stack-based buffer overflow in the runinitsbus function in the KCodes NetUSB module for the Linux kernel, as used in certain NETGEAR products, TP-LINK products, and other products, allows remote attackers to execute arbitrary code by providing a long computer name in a session on TCP port 20005.
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2015-3036?
CVE-2015-3036 is considered high severity due to its potential to allow remote attackers to execute arbitrary code.
How does CVE-2015-3036 affect the KCodes NetUSB module?
CVE-2015-3036 affects the KCodes NetUSB module by exploiting a stack-based buffer overflow through a long computer name input.
What devices are impacted by CVE-2015-3036?
Devices from NETGEAR, TP-LINK, and other manufacturers that use the KCodes NetUSB module are impacted by CVE-2015-3036.
How can I mitigate the risk associated with CVE-2015-3036?
To mitigate CVE-2015-3036, update the firmware of affected devices to the latest version provided by the manufacturer.
Is there a patch available for CVE-2015-3036?
Yes, vendors have released patches to address CVE-2015-3036, so check with your device manufacturer for the appropriate updates.