CVE-2015-3331: canonical ubuntu_linux

Modified

AliasesRHSA-2015:0981RHSA-2015:0987RHSA-2015:0989+2 more

Published 27-05-2015Last modified 06-08-2024

Vulnerability summary

CVE-2015-3331 is a high (CVSS 9.3) vulnerability in canonical ubuntu_linux. EPSS estimates a 10.03% chance of exploitation in the next 30 days, higher than 95.6% of scored vulnerabilities.

Priority

Routine

Not severe (CVSS 9.3, network access); no exploitation reported by the 5 checked sources

Source freshness unavailable

How is this decided?

CVSS score

9.3/10

010

High · v2.0 (NVD)

EPSS score

10.03%

0%100%

Medium · -0.08 pp in 30 days

KEVNot listedNot listed by any tracked catalog.

RansomwareNot flaggedNo ransomware use recorded.

Public exploits0No public exploits recorded

Advisory lineage

Upstream 0 · Downstream 14 · Related 8

DSA-3237-1 MGASA-2015-0171 MGASA-2015-0172 MGASA-2015-0219 RHSA-2015:1081 RHSA-2015:1199+8 more

Timeline

27-05-2015
PublishedVulnerability first disclosed.
06-08-2024
Last modifiedVulnerability information updated.

Description

The __driver_rfc4106_decrypt function in arch/x86/crypto/aesni-intel_glue.c in the Linux kernel before 3.19.3 does not properly determine the memory locations used for encrypted data, which allows context-dependent attackers to cause a denial of service (buffer overflow and system crash) or possibly execute arbitrary code by triggering a crypto API call, as demonstrated by use of a libkcapi test program with an AF_ALG(aead) socket.

CVSS metrics

1 score · 1 source · 1 version

v2.09.3

EPSS trend

Probability

10.03%

Chance of exploitation in the next 30 days

Percentile

96%

Versus all other CVEs

30-day change

Decrease -0.08 pp

From 10.11% on 04-10-2026

04-10-202603-11-2026

Known exploited

Compare KEV catalogs

CISA KEV

Not in the CISA KEV catalog.

ENISA CNW

Not in the ENISA CNW catalog.

CIRCL

Not in the CIRCL catalog.

Public exploits

0 found

No public exploits indexed.

Weaknesses

CWE · root cause

CWE-119Improper Restriction of Operations within the Bounds of a Memory BufferThe product performs operations on a memory buffer, but it reads from or writes to a memory location outside the buffer's intended boundary.

Affected systems

Version check

Known conditions: network-reachable, no authentication (CVSS vector). Other conditions: not stated in public data.

Redhat40 products

kernel< 0:3.10.0-229.4.2.el7 | < 0:3.10.0-229.4.2.ael7b
kernel-abi-whitelists< 0:3.10.0-229.4.2.el7 | < 0:3.10.0-229.4.2.ael7b
kernel-bootwrapper< 0:3.10.0-229.4.2.ael7b
kernel-debug< 0:3.10.0-229.4.2.el7 | < 0:3.10.0-229.4.2.ael7b
kernel-debug-debuginfo< 0:3.10.0-229.4.2.el7 | < 0:3.10.0-229.4.2.ael7b

kernel-debug-devel< 0:3.10.0-229.4.2.el7 | < 0:3.10.0-229.4.2.ael7b
kernel-debuginfo< 0:3.10.0-229.4.2.el7 | < 0:3.10.0-229.4.2.ael7b
kernel-debuginfo-common-ppc64< 0:3.10.0-229.4.2.el7
kernel-debuginfo-common-ppc64le< 0:3.10.0-229.4.2.ael7b
kernel-debuginfo-common-s390x< 0:3.10.0-229.4.2.el7
kernel-debuginfo-common-x86_64< 0:3.10.0-229.4.2.el7
kernel-devel< 0:3.10.0-229.4.2.el7 | < 0:3.10.0-229.4.2.ael7b
kernel-doc< 0:3.10.0-229.4.2.el7 | < 0:3.10.0-229.4.2.ael7b
kernel-headers< 0:3.10.0-229.4.2.el7 | < 0:3.10.0-229.4.2.ael7b
kernel-kdump< 0:3.10.0-229.4.2.el7
kernel-kdump-debuginfo< 0:3.10.0-229.4.2.el7
kernel-kdump-devel< 0:3.10.0-229.4.2.el7
kernel-rt< 0:3.10.0-229.4.2.rt56.141.6.el7_1 | < 1:3.10.0-229.rt56.151.el6rt
kernel-rt-debug< 0:3.10.0-229.4.2.rt56.141.6.el7_1 | < 1:3.10.0-229.rt56.151.el6rt
kernel-rt-debug-debuginfo< 0:3.10.0-229.4.2.rt56.141.6.el7_1 | < 1:3.10.0-229.rt56.151.el6rt
kernel-rt-debug-devel< 0:3.10.0-229.4.2.rt56.141.6.el7_1 | < 1:3.10.0-229.rt56.151.el6rt
kernel-rt-debuginfo< 0:3.10.0-229.4.2.rt56.141.6.el7_1 | < 1:3.10.0-229.rt56.151.el6rt
kernel-rt-debuginfo-common-x86_64< 0:3.10.0-229.4.2.rt56.141.6.el7_1 | < 1:3.10.0-229.rt56.151.el6rt
kernel-rt-devel< 0:3.10.0-229.4.2.rt56.141.6.el7_1 | < 1:3.10.0-229.rt56.151.el6rt
kernel-rt-doc< 0:3.10.0-229.4.2.rt56.141.6.el7_1 | < 1:3.10.0-229.rt56.151.el6rt
kernel-rt-firmware< 1:3.10.0-229.rt56.151.el6rt
kernel-rt-trace< 0:3.10.0-229.4.2.rt56.141.6.el7_1 | < 1:3.10.0-229.rt56.151.el6rt
kernel-rt-trace-debuginfo< 0:3.10.0-229.4.2.rt56.141.6.el7_1 | < 1:3.10.0-229.rt56.151.el6rt
kernel-rt-trace-devel< 0:3.10.0-229.4.2.rt56.141.6.el7_1 | < 1:3.10.0-229.rt56.151.el6rt
kernel-rt-vanilla< 1:3.10.0-229.rt56.151.el6rt
kernel-rt-vanilla-debuginfo< 1:3.10.0-229.rt56.151.el6rt
kernel-rt-vanilla-devel< 1:3.10.0-229.rt56.151.el6rt
kernel-tools< 0:3.10.0-229.4.2.el7 | < 0:3.10.0-229.4.2.ael7b
kernel-tools-debuginfo< 0:3.10.0-229.4.2.el7 | < 0:3.10.0-229.4.2.ael7b
kernel-tools-libs< 0:3.10.0-229.4.2.el7 | < 0:3.10.0-229.4.2.ael7b
kernel-tools-libs-devel< 0:3.10.0-229.4.2.el7 | < 0:3.10.0-229.4.2.ael7b
perf< 0:3.10.0-229.4.2.el7 | < 0:3.10.0-229.4.2.ael7b
perf-debuginfo< 0:3.10.0-229.4.2.el7 | < 0:3.10.0-229.4.2.ael7b
python-perf< 0:3.10.0-229.4.2.el7 | < 0:3.10.0-229.4.2.ael7b
python-perf-debuginfo< 0:3.10.0-229.4.2.el7 | < 0:3.10.0-229.4.2.ael7b

Show all 40

Debian2 products

linux< 3.16.7-ckt9-3
debian_linuxEOL7.0 | 8.0

Ubuntu2 products

linux< 3.13.0-53.88
linux-lts-utopic< 3.16.0-38.52~14.04.1

Canonical1 product

ubuntu_linuxEOL12.04

Linux1 product

linux_kernel< 3.2.69 | ≥ 3.3, < 3.4.108 | ≥ 3.5, < 3.10.73 | ≥ 3.12, < 3.12.40 | ≥ 3.13, < 3.14.37 | ≥ 3.15, < 3.16.35 | ≥ 3.17, < 3.18.11 | ≥ 3.19, < 3.19.3

5 vendors · 46 products