CVE-2015-4002

drivers/staging/ozwpan/ozusbsvc1.c in the OZWPAN driver in the Linux kernel through 4.0.5 does not ensure that certain length values are sufficiently large, which allows remote attackers to cause a denial of service (system crash or large loop) or possibly execute arbitrary code via a crafted packet, related to the (1) oz_usb_rx and (2) oz_usb_handle_ep_data functions.

• CWE-119

• http://git.kernel.org/cgit/linux/kernel/git/torvalds/linux.git/commit/?id=9a59029bc218b48eff8b5d4dde5662fd79d3e1a8Vendor Advisory
• http://git.kernel.org/cgit/linux/kernel/git/torvalds/linux.git/commit/?id=d114b9fe78c8d6fc6e70808c2092aa307c36dc8eVendor Advisory
• http://lists.opensuse.org/opensuse-security-announce/2015-08/msg00011.htmlMailing List, Third Party Advisory
• http://openwall.com/lists/oss-security/2015/06/05/7Mailing List
• http://www.securityfocus.com/bid/74668Third Party Advisory, VDB Entry
• http://www.ubuntu.com/usn/USN-2665-1Third Party Advisory
• http://www.ubuntu.com/usn/USN-2667-1Third Party Advisory
• https://github.com/torvalds/linux/commit/9a59029bc218b48eff8b5d4dde5662fd79d3e1a8Vendor Advisory
• https://github.com/torvalds/linux/commit/d114b9fe78c8d6fc6e70808c2092aa307c36dc8eVendor Advisory
• http://git.kernel.org/cgit/linux/kernel/git/torvalds/linux.git/commit/?id=9a59029bc218b48eff8b5d4dde5662fd79d3e1a8Vendor Advisory
• http://git.kernel.org/cgit/linux/kernel/git/torvalds/linux.git/commit/?id=d114b9fe78c8d6fc6e70808c2092aa307c36dc8eVendor Advisory
• http://lists.opensuse.org/opensuse-security-announce/2015-08/msg00011.htmlMailing List, Third Party Advisory
• http://openwall.com/lists/oss-security/2015/06/05/7Mailing List
• http://www.securityfocus.com/bid/74668Third Party Advisory, VDB Entry
• http://www.ubuntu.com/usn/USN-2665-1Third Party Advisory
• http://www.ubuntu.com/usn/USN-2667-1Third Party Advisory
• https://github.com/torvalds/linux/commit/9a59029bc218b48eff8b5d4dde5662fd79d3e1a8Vendor Advisory
• https://github.com/torvalds/linux/commit/d114b9fe78c8d6fc6e70808c2092aa307c36dc8eVendor Advisory

Published

Jun 7, 2015

Last Modified

Jun 17, 2026

Status

Modified

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2015-3995SAP HANA DB 1.00.73.00.389160 (NewDB100_REL) allows remote a…
• CVE-2015-3996The default AFSecurityPolicy.validatesDomainName configurati…
• CVE-2015-3998Cross-site scripting (XSS) vulnerability in phpwhois 4.2.5, …
• CVE-2015-3999Piriform CCleaner 3.26.0.1988 through 5.02.5101 writes the f…
• CVE-2015-4000The TLS protocol 1.2 and earlier, when a DHE_EXPORT ciphersu…3.7
• CVE-2015-4001Integer signedness error in the oz_hcd_get_desc_cnf function…
• CVE-2015-4003The oz_usb_handle_ep_data function in drivers/staging/ozwpan…
• CVE-2015-4004The OZWPAN driver in the Linux kernel through 4.0.5 relies o…
• CVE-2015-4010Cross-site request forgery (CSRF) vulnerability in the Encry…
• CVE-2015-4016The client detection protocol in Valve Steam allows remote a…
• CVE-2015-4017Salt before 2014.7.6 does not verify certificates when conne…
• CVE-2015-4018SQL injection vulnerability in feedwordpresssyndicationpage.…