CVE-2015-5707: canonical ubuntu_linux Integer Overflow or Wraparound
Vulnerability summary
CVE-2015-5707 is a medium (CVSS 4.6) Integer Overflow or Wraparound vulnerability in canonical ubuntu_linux. EPSS estimates a 0.51% chance of exploitation in the next 30 days, higher than 43.7% of scored vulnerabilities.
Not severe (CVSS 4.6, local access); no exploitation reported by the 5 checked sources
Source freshness unavailable
How is this decided?Advisory lineage
Upstream 0 · Downstream 19 · Related 14Timeline
- 19-10-2015PublishedVulnerability first disclosed.
- 06-08-2024Last modifiedVulnerability information updated.
Description
Integer overflow in the sg_start_req function in drivers/scsi/sg.c in the Linux kernel 2.6.x through 4.x before 4.1 allows local users to cause a denial of service or possibly have unspecified other impact via a large iov_count value in a write request.
CVSS metrics
1 score · 1 source · 1 versionEPSS trend
Probability
0.51%
Chance of exploitation in the next 30 days
Percentile
44%
Versus all other CVEs
30-day change
Increase +0.02 pp
From 0.49% on 04-10-2026
Known exploited
Compare KEV catalogs
CISA KEVNot in the CISA KEV catalog.
ENISA CNWNot in the ENISA CNW catalog.
CIRCLNot in the CIRCL catalog.
Public exploits
0 foundNo public exploits indexed.
Weaknesses
CWE · root causeAffected systems
Known conditions: local access, no authentication (CVSS vector). Other conditions: not stated in public data.
Ubuntu3 products
- linux< 3.13.0-63.103
- linux-lts-utopic< 3.16.0-50.66~14.04.1
- linux-lts-vivid< 3.19.0-28.30~14.04.1
Debian2 products
- linux< 4.1.3-1
- debian_linuxEOL7.0 | 8.0
Suse2 products
- suse_linux_enterprise_desktop11:sp3
- suse_linux_enterprise_server11:sp2 | 11:sp3
Canonical1 product
- ubuntu_linuxEOL12.04 | 14.04 | 15.04
Linux1 product
- linux_kernel≥ 2.6.0, < 4.1.0
5 vendors · 9 products
References
37 links- lists.opensuse.org/opensuse-security-announce/2015-11/msg00030.htmlVendor AdvisoryX Refsource SUSEMailing ListThird Party Advisory
- lists.opensuse.org/opensuse-security-announce/2015-11/msg00029.htmlVendor AdvisoryX Refsource SUSEMailing ListThird Party Advisory
- lists.opensuse.org/opensuse-security-announce/2015-09/msg00021.htmlVendor AdvisoryX Refsource SUSEMailing ListThird Party Advisory
Show all 37 references
- github.com/torvalds/linux/commit/fdc81f45e9f57858da6351836507fbcf1b7583eeX Refsource CONFIRMPatchThird Party Advisory
- lists.opensuse.org/opensuse-security-announce/2015-11/msg00032.htmlVendor AdvisoryX Refsource SUSEMailing ListThird Party Advisory
- lists.opensuse.org/opensuse-security-announce/2015-09/msg00004.htmlVendor AdvisoryX Refsource SUSEMailing ListThird Party Advisory
- github.com/torvalds/linux/commit/451a2886b6bf90e2fb378f7c46c655450fb96e81X Refsource CONFIRMPatchThird Party Advisory
- lists.opensuse.org/opensuse-security-announce/2015-11/msg00026.htmlVendor AdvisoryX Refsource SUSEMailing ListThird Party Advisory
- lists.opensuse.org/opensuse-security-announce/2015-11/msg00027.htmlVendor AdvisoryX Refsource SUSEMailing ListThird Party Advisory
- www.openwall.com/lists/oss-security/2015/08/01/6Mailing ListX Refsource MLISTThird Party AdvisoryREPORT
- lists.opensuse.org/opensuse-security-announce/2015-11/msg00028.htmlVendor AdvisoryX Refsource SUSEMailing ListThird Party Advisory
- lists.opensuse.org/opensuse-security-announce/2015-09/msg00018.htmlVendor AdvisoryX Refsource SUSEMailing ListThird Party Advisory
- lists.opensuse.org/opensuse-security-announce/2015-11/msg00031.htmlVendor AdvisoryX Refsource SUSEMailing ListThird Party Advisory