CVE-2015-9289: Buffer Overflow
First published: Sat Jul 27 2019(Updated: )
A vulnerability was found in Linux Kernel, an out-of-bounds read occurs when checking userspace params in drivers/media/dvb-frontends/cx24116.c. The maximum size for a DiSEqC command is 6, according to the userspace API. However, the code allows larger values such as 23. This was originally classfied as a buffer-overflow but it is not. It has been reclassified as a possible information leak. Reference: <a href="https://git.kernel.org/cgit/linux/kernel/git/torvalds/linux.git/commit/?id=1fa2337a315a2448c5434f41e00d56b01a22283c">https://git.kernel.org/cgit/linux/kernel/git/torvalds/linux.git/commit/?id=1fa2337a315a2448c5434f41e00d56b01a22283c</a> <a href="https://github.com/torvalds/linux/commit/1fa2337a315a2448c5434f41e00d56b01a22283c">https://github.com/torvalds/linux/commit/1fa2337a315a2448c5434f41e00d56b01a22283c</a> <a href="https://mirrors.edge.kernel.org/pub/linux/kernel/v4.x/ChangeLog-4.1.4">https://mirrors.edge.kernel.org/pub/linux/kernel/v4.x/ChangeLog-4.1.4</a>
Credit: cve@mitre.org
| Affected Software | Affected Version | How to fix |
|---|---|---|
| redhat/kernel-rt | <0:3.10.0-1127.rt56.1093.el7 | 0:3.10.0-1127.rt56.1093.el7 |
| redhat/kernel | <0:3.10.0-1127.el7 | 0:3.10.0-1127.el7 |
| IBM Data Risk Manager | <=2.0.6 | |
| Linux kernel | <4.1.4 |
Never miss a vulnerability like this again
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
Reference Links
- https://exchange.xforce.ibmcloud.com/vulnerabilities/166876
- https://www.ibm.com/support/pages/node/6335281 (Advisory)
- https://git.kernel.org/cgit/linux/kernel/git/torvalds/linux.git/commit/?id=1fa2337a315a2448c5434f41e00d56b01a22283c
- https://github.com/torvalds/linux/commit/1fa2337a315a2448c5434f41e00d56b01a22283c
- https://mirrors.edge.kernel.org/pub/linux/kernel/v4.x/ChangeLog-4.1.4
- https://bugzilla.redhat.com/show_bug.cgi/show_bug.cgi?id=1735656
- https://access.redhat.com/errata/RHSA-2020:1016
- https://access.redhat.com/errata/RHSA-2020:1070
- https://access.redhat.com/security/cve/cve-2015-9289
- https://bugzilla.redhat.com/show_bug.cgi?id=1735655
- https://www.cve.org/CVERecord?id=CVE-2015-9289 https://nvd.nist.gov/vuln/detail/CVE-2015-9289
Frequently Asked Questions
What is the severity of CVE-2015-9289?
CVE-2015-9289 has a medium severity rating due to the potential for out-of-bounds read vulnerabilities in the Linux Kernel.
How do I fix CVE-2015-9289?
To fix CVE-2015-9289, update to the recommended kernel versions 0:3.10.0-1127.rt56.1093.el7 or 0:3.10.0-1127.el7.
Which versions of the Linux Kernel are affected by CVE-2015-9289?
CVE-2015-9289 affects Linux Kernel versions up to 4.1.4.
What software products are impacted by CVE-2015-9289?
CVE-2015-9289 impacts Red Hat kernel and IBM Data Risk Manager versions up to 2.0.6.
Is there a patch available for CVE-2015-9289?
Yes, patches are available for the affected versions as mentioned in the Red Hat and IBM release notes.
- collector/redhat-cve
- agent/type
- agent/first-publish-date
- agent/softwarecombine
- collector/redhat-bugzilla
- source/Red Hat
- alias/CVE-2015-9289
- agent/remedy
- agent/severity
- agent/references
- agent/weakness
- agent/author
- collector/ibm-support
- source/IBM
- agent/software-canonical-lookup
- agent/description
- collector/mitre-cve
- source/MITRE
- agent/last-modified-date
- agent/event
- agent/trending
- agent/source
- agent/tags
- collector/nvd-index
- agent/software-canonical-lookup-request
- package-manager/redhat
- vendor/ibm
- canonical/ibm data risk manager
- version/ibm data risk manager/2.0.6
- vendor/linux
- canonical/linux kernel