CVE-2015-6109: Infoleak

Published Nov 11, 2015

Updated

The kernel in Microsoft Windows 8.1, Windows Server 2012 R2, Windows RT 8.1, and Windows 10 Gold and 1511 allows local users to bypass the KASLR protection mechanism, and consequently discover a driver base address, via a crafted application, aka "Windows Kernel Memory Information Disclosure Vulnerability."

Affected Software

5 affected components

Microsoft Windows 10

Microsoft Windows 10=1511

Microsoft Windows 8.1

Microsoft Windows RT 8.1

Microsoft Windows Server 2012=r2

Remediation

Patch Available

https://docs.microsoft.com/en-us/security-updates/securitybulletins/2015/ms15-115

Event History

Nov 11, 2015

CVE Published

via MITRE·11:00 AM

Data Sourced

via MITRE·11:00 AM

Description

Frequently Asked Questions

What is the severity of CVE-2015-6109?

CVE-2015-6109 has a medium severity level as it allows local users to bypass KASLR protection.

How do I fix CVE-2015-6109?

To fix CVE-2015-6109, apply the security updates released by Microsoft as part of their security bulletin MS15-115.

Which versions of Windows are affected by CVE-2015-6109?

CVE-2015-6109 affects Microsoft Windows 8.1, Windows 10 (both Gold and 1511), Windows RT 8.1, and Windows Server 2012 R2.

What type of vulnerability is CVE-2015-6109?

CVE-2015-6109 is a local information disclosure vulnerability affecting the Windows kernel.

Can CVE-2015-6109 be exploited remotely?

No, CVE-2015-6109 requires local access to exploit, meaning an attacker must have physical or administrative access to the system.