Strix
26.1K

CVE-2015-3331

UnknownEPSS 10.03%

Last modified

CVE-2015-3331 is a vulnerability of currently unknown severity. The __driver_rfc4106_decrypt function in arch/x86/crypto/aesni-intel_glue.c in the Linux kernel before 3.19.3 does not properly determine the memory locations used for encrypted data, which allows context-dependent attackers to cause a denial of service (buffer overflow and system crash) or possibly execute arbitrary code by triggering a crypto API call, as demonstrated by use of a libkcapi test program with an AF_ALG(aead) socket.. EPSS estimates a 10.03% chance of exploitation in the next 30 days.

Description

The __driver_rfc4106_decrypt function in arch/x86/crypto/aesni-intel_glue.c in the Linux kernel before 3.19.3 does not properly determine the memory locations used for encrypted data, which allows context-dependent attackers to cause a denial of service (buffer overflow and system crash) or possibly execute arbitrary code by triggering a crypto API call, as demonstrated by use of a libkcapi test program with an AF_ALG(aead) socket.

Metrics

EPSS Probability
10.03%

95.0th percentile

Probability of exploitation in the next 30 days. Learn more

Weakness Enumeration

Affected Software

VendorProductVersions
LinuxLinux Kernel< 3.2.69
LinuxLinux Kernel>= 3.3, < 3.4.108
LinuxLinux Kernel>= 3.5, < 3.10.73
LinuxLinux Kernel>= 3.12, < 3.12.40
LinuxLinux Kernel>= 3.13, < 3.14.37
LinuxLinux Kernel>= 3.15, < 3.16.35
LinuxLinux Kernel>= 3.17, < 3.18.11
LinuxLinux Kernel>= 3.19, < 3.19.3
DebianDebian Linux7.0
DebianDebian Linux8.0
CanonicalUbuntu Linux12.04

References

Timeline

Published
Last Modified
Status
Modified

Frequently Asked Questions

What is CVE-2015-3331?
The __driver_rfc4106_decrypt function in arch/x86/crypto/aesni-intel_glue.c in the Linux kernel before 3.19.3 does not properly determine the memory locations used for encrypted data, which allows context-dependent attackers to cause a denial of service (buffer overflow and system crash) or possibly execute arbitrary code by triggering a crypto API call, as demonstrated by use of a libkcapi test program with an AF_ALG(aead) socket.
How severe is CVE-2015-3331?
Severity scoring for CVE-2015-3331 is pending analysis. The EPSS model estimates a 10.03% probability of exploitation in the next 30 days.
How do I fix CVE-2015-3331?
Check the vendor references and advisories linked above for patched versions and mitigation guidance. You can also run a Strix scan to test if your systems are affected.

Are you affected by CVE-2015-3331?

Run a free Strix scan to check your systems for this vulnerability.

Scan your code now

Source: NVD / NIST