CVE-2015-8816

中危 6.8CVE-2015-8816 · Published 27/04/2016 · updated 17/06/2026

要点

CVE-2015-8816 是影响 suse linux enterprise software development kit (novell) 的中危 (CVSS 6.8)漏洞。
未来 30 天内被利用的概率（EPSS）：0.55%，高于 46.0% 的漏洞。
暂无已修复版本：请关注参考资料中的厂商公告。

Package	Affected versions	Patched versions
suse linux enterprise software development kit novell	`= 11.0= 12.0`	No fix yet

Description

The hub_activate function in drivers/usb/core/hub.c in the Linux kernel before 4.3.5 does not properly maintain a hub-interface data structure, which allows physically proximate attackers to cause a denial of service (invalid memory access and system crash) or possibly have unspecified other impact by unplugging a USB hub device.

References

git.kernel.org/cgit/linux/kernel/git/torvalds/linux.git/commit · Vendor Advisory
lists.opensuse.org/opensuse-security-announce/2016-04/msg00019.html · Third Party Advisory
lists.opensuse.org/opensuse-security-announce/2016-06/msg00052.html · Third Party Advisory
lists.opensuse.org/opensuse-security-announce/2016-06/msg00054.html · Third Party Advisory
lists.opensuse.org/opensuse-security-announce/2016-06/msg00059.html · Third Party Advisory
lists.opensuse.org/opensuse-security-announce/2016-07/msg00005.html · Third Party Advisory
lists.opensuse.org/opensuse-security-announce/2016-08/msg00003.html · Third Party Advisory
lists.opensuse.org/opensuse-security-announce/2016-08/msg00008.html · Third Party Advisory
lists.opensuse.org/opensuse-security-announce/2016-08/msg00009.html

suse linux enterprise software development kit 的其他漏洞

查看全部 →

Running one of these products? Scan your site to see whether it exposes a vulnerable version.

Scan my site free