CVE-2015-3331: Buffer Overflow
Last updated 24 July 2024
Other sources
Linux kernel built with the Intel AES-NI instructions for AES algorithm support (CONFIGCRYPTOAESNIINTEL) is vulnerable to a memory corruption issue. It could occur when using the Intel AES-NI instruction to decrypt fragmented network packets.
An unprivileged remote user could use this flaw to crash the system (denial of service) or, potentially, escalate their privileges on a system over a connection with an active AEC-GCM mode IPSec security association.
Upstream fix: ------------- -> https://git.kernel.org/linus/ccfe8c3f7e52ae83155cb038753f4c75b774ca8a
Reference: ---------- -> http://www.openwall.com/lists/oss-security/2015/04/18/1 -> https://software.intel.com/en-us/articles/intel-advanced-encryption-standard-instructions-aes-ni
— Red Hat
The driverrfc4106decrypt function in arch/x86/crypto/aesni-intelglue.c in the Linux kernel before 3.19.3 does not properly determine the memory locations used for encrypted data, which allows context-dependent attackers to cause a denial of service (buffer overflow and system crash) or possibly execute arbitrary code by triggering a crypto API call, as demonstrated by use of a libkcapi test program with an AFALG(aead) socket.
— Launchpad
Affected Software
Remediation
Event History
Frequently Asked Questions
What is the severity of CVE-2015-3331?
CVE-2015-3331 is considered a high severity vulnerability due to potential memory corruption issues affecting unprivileged remote users.
How do I fix CVE-2015-3331?
To fix CVE-2015-3331, upgrade to the patched versions provided by your Linux distribution, such as the recommended versions in the defense package.
What software is affected by CVE-2015-3331?
CVE-2015-3331 affects multiple versions of the Linux kernel, particularly those built with Intel AES-NI instructions for AES algorithm support.
Can CVE-2015-3331 lead to system exploitation?
Yes, CVE-2015-3331 can potentially be exploited by attackers to execute arbitrary code or perform unauthorized actions on the affected Linux systems.
Is CVE-2015-3331 specific to certain Linux distributions?
CVE-2015-3331 is applicable to various Linux distributions, including Debian and Ubuntu, particularly those running specific vulnerable kernel versions.