CVE-2015-8812

9.8CRITICAL

Key Information

Vendor: Novell
Status: Suse Linux Enterprise Real Time Extension
Vendor: CVE Published:; 27 April 2016

Summary

drivers/infiniband/hw/cxgb3/iwch_cm.c in the Linux kernel before 4.5 does not properly identify error conditions, which allows remote attackers to execute arbitrary code or cause a denial of service (use-after-free) via crafted packets.

EPSS Score

4% chance of being exploited in the next 30 days.

CVSS V3.1

Score:

9.8

Severity:

CRITICAL

Confidentiality:

High

Integrity:

High

Availability:

High

Attack Vector:

Network

Attack Complexity:

Low

Privileges Required:

None

User Interaction:

None

Scope:

Unchanged

Timeline

Vulnerability published.
Apr 27, 2016
Vulnerability Reserved.
Feb 11, 2016

Collectors

NVD DatabaseMitre Database