Multiple integer overflows in sound/core/control.c in the ALSA control implementation in the Linux kernel before 3.15.2 allow local users to cause a denial of service by leveraging /dev/snd/controlCX access, related to (1) index values in the snd_ctl_add function and (2) numid values in the snd_ctl_remove_numid_conflict function.
CVSS Details
- CVSS 3.1 Base Score: 5.5
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Centos_linux | — | Upgrade kernel-tools-libsUpgrade kernel-headersUpgrade kernel-develUpgrade kernel-debugUpgrade kernel-firmwareUpgrade kernel-debug-develUpgrade kernelUpgrade kernel-tools-libs-develUpgrade perfUpgrade kernel-abi-whitelistsUpgrade kernel-toolsUpgrade python-perfUpgrade kernel-doc | Dec 1, 2016 | Jul 3, 2014 |
| Debian | — | Upgrade linux | Jul 30, 2024 | Jul 3, 2014 |
| Oracle_linux | — | Upgrade kernel-uekUpgrade kernel | Oct 16, 2024 | Jul 3, 2014 |
| Redhat_linux | — | No solution exists | Jul 9, 2025 | Jun 18, 2014 |
| Suse | — | Upgrade kernel-obs-buildUpgrade kernel-defaultUpgrade kernel-docsUpgrade kernel-zfcpdump | Dec 18, 2015 | Jul 3, 2014 |
| Ubuntu | — | Upgrade linux-image-3.2.0-68-highbankUpgrade linux-image-3.13.0-35-powerpc64-smpUpgrade linux-image-2.6.32-65-sparc64-smpUpgrade linux-image-2.6.32-65-powerpcUpgrade linux-image-2.6.32-65-sparc64Upgrade linux-image-2.6.32-65-serverUpgrade linux-image-2.6.32-65-preemptUpgrade linux-image-2.6.32-65-386Upgrade linux-image-2.6.32-65-powerpc-smpUpgrade linux-image-3.13.0-35-powerpc-smpUpgrade linux-image-3.2.0-1452-omap4Upgrade linux-image-3.13.0-35-powerpc64-embUpgrade linux-image-3.2.0-68-virtualUpgrade linux-image-2.6.32-65-ia64Upgrade linux-image-2.6.32-65-powerpc64-smpUpgrade linux-image-2.6.32-65-lpiaUpgrade linux-image-2.6.32-65-virtualUpgrade linux-image-3.2.0-68-omapUpgrade linux-image-3.13.0-35-generic-lpaeUpgrade linux-image-3.13.0-35-lowlatencyUpgrade linux-image-2.6.32-65-versatileUpgrade linux-image-3.13.0-35-genericUpgrade linux-image-3.2.0-68-generic-paeUpgrade linux-image-3.13.0-35-powerpc-e500mcUpgrade linux-image-3.2.0-68-genericUpgrade linux-image-3.2.0-68-powerpc64-smpUpgrade linux-image-3.2.0-68-powerpc-smpUpgrade linux-image-2.6.32-369-ec2Upgrade linux-image-2.6.32-65-genericUpgrade linux-image-3.13.0-35-powerpc-e500Upgrade linux-image-2.6.32-65-generic-pae | Nov 8, 2024 | Jul 3, 2014 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub