CVE-2016-3955: canonical ubuntu_linux
CVSS: 10.0v2.0HighModified
AliasesUBUNTU-CVE-2016-3955DEBIAN-CVE-2016-3955
Published 03-07-2016Last modified 06-08-2024
Vulnerability summary
CVE-2016-3955 is a high (CVSS 10.0) vulnerability in canonical ubuntu_linux. EPSS estimates a 25.29% chance of exploitation in the next 30 days, higher than 97.9% of scored vulnerabilities.
CVSS score
10.0/10
010
High · v2.0 (NVD)EPSS score
25.29%
0%100%
High · -0.64 pp in 30 daysKEVNot listedIn no KEV catalog
RansomwareNone recordedNo known use recorded
Public exploits0No public exploits recorded
Advisory lineage
Upstream 0 · Downstream 12 · Related 10Timeline
- 03-07-2016PublishedVulnerability first disclosed.
- 06-08-2024Last modifiedVulnerability information updated.
Description
The usbip_recv_xbuff function in drivers/usb/usbip/usbip_common.c in the Linux kernel before 4.5.3 allows remote attackers to cause a denial of service (out-of-bounds write) or possibly have unspecified other impact via a crafted length value in a USB/IP packet.
CVSS metrics
5 scores · 3 sources · 3 versionsCritical 9.8Preferred score · NVD (NIST)
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:HSourcesAll 3 agree
- OSV · UbuntuEcosystem advisory · calculated9.8CriticalCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
- OSV · DebianEcosystem advisory · calculated9.8CriticalCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
Critical 9.8Preferred score · OSV · Ubuntu (Ecosystem advisory) · calculated from vector
CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:HSourcesSingle source
High 10.0Preferred score · NVD (NIST)
AV:N/AC:L/Au:N/C:C/I:C/A:CSourcesSingle source
EPSS trend
Probability
25.29%
Chance of exploitation in the next 30 days
Percentile
98%
Versus all other CVEs
30-day change
-0.64 pp
From 25.93% on 18-09-2026
18-09-202618-10-2026
EPSS score25.29%
Known exploited
Compare KEV catalogsNot in any of the 3 tracked catalogs.
Public exploits
0 foundNo public exploits indexed.
Weaknesses
CWE · root causeAffected systems
Ubuntu23 products
- linux< 3.13.0-87.133 | < 4.4.0-22.39
- linux-azureAll versions (No fix recorded)
- linux-azure-6.11All versions (No fix recorded)
- linux-azure-fdeAll versions (No fix recorded)
- linux-azure-fde-5.15All versions (No fix recorded)
Debian2 products
- linux< 4.5.2-1
- debian_linuxEOL8.0
Canonical1 product
- ubuntu_linuxEOL12.04 | 14.04 | 15.10
Linux1 product
- linux_kernel< 3.2.80 | ≥ 3.3, < 3.10.102 | ≥ 3.11, < 3.12.59 | ≥ 3.13, < 3.14.68 | ≥ 3.17, < 3.18.37 | ≥ 3.19, < 4.1.28 | ≥ 4.2, < 4.4.9 | ≥ 4.5, < 4.5.3
4 vendors · 27 products
References
34 links- github.com/torvalds/linux/commit/b348d7dddb6c4fbfc810b7a0626e8ec9e29f7cbbX Refsource CONFIRMPatchVendor Advisory
- lists.opensuse.org/opensuse-security-announce/2016-06/msg00044.htmlVendor AdvisoryX Refsource SUSEMailing ListThird Party Advisory
Show all 34 references
- www.openwall.com/lists/oss-security/2016/04/19/1Mailing ListX Refsource MLISTThird Party AdvisoryREPORT