Multiple stack-based buffer overflows in the magicmouse_raw_event function in drivers/hid/hid-magicmouse.c in the Magic Mouse HID driver in the Linux kernel through 3.16.3 allow physically proximate attackers to cause a denial of service (system crash) or possibly execute arbitrary code via a crafted device that provides a large amount of (1) EHCI or (2) XHCI data associated with an event.
CVSS Details
- CVSS 3.1 Base Score: 6.8
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Centos_linux | — | Upgrade perfUpgrade kernel-toolsUpgrade kernel-tools-libs-develUpgrade python-perfUpgrade kernel-abi-whitelistsUpgrade kernelUpgrade kernel-develUpgrade kernel-headersUpgrade kernel-tools-libsUpgrade kernel-docUpgrade kernel-debugUpgrade kernel-debug-devel | Dec 1, 2016 | Sep 28, 2014 |
| Debian | — | Upgrade linux | Jul 30, 2024 | Sep 28, 2014 |
| Oracle_linux | — | Upgrade kernel-uekUpgrade kernel | Oct 16, 2024 | Sep 28, 2014 |
| Suse | — | Upgrade kernel-docsUpgrade kernel-default | Dec 18, 2015 | Sep 28, 2014 |
| Ubuntu | — | Upgrade linux-image-3.13.0-37-lowlatencyUpgrade linux-image-3.2.0-70-highbankUpgrade linux-image-3.2.0-70-virtualUpgrade linux-image-3.13.0-37-powerpc-smpUpgrade linux-image-3.13.0-37-powerpc-e500mcUpgrade linux-image-3.2.0-70-powerpc-smpUpgrade linux-image-3.2.0-70-genericUpgrade linux-image-3.13.0-37-generic-lpaeUpgrade linux-image-3.13.0-37-genericUpgrade linux-image-3.2.0-70-generic-paeUpgrade linux-image-3.13.0-37-powerpc64-smpUpgrade linux-image-3.13.0-37-powerpc64-embUpgrade linux-image-3.2.0-1455-omap4Upgrade linux-image-3.2.0-70-omapUpgrade linux-image-3.2.0-70-powerpc64-smpUpgrade linux-image-3.13.0-37-powerpc-e500 | Nov 8, 2024 | Sep 28, 2014 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub