cvedb.io
CVE-2015-4004
UNKNOWN · CVSS n/a
EPSS exploitation probability: 0%
Published 2015-06-07T23:59:08.660 · Last modified 2026-06-17T00:26:37.730

Summary

The OZWPAN driver in the Linux kernel through 4.0.5 relies on an untrusted length field during packet parsing, which allows remote attackers to obtain sensitive information from kernel memory or cause a denial of service (out-of-bounds read and system crash) via a crafted packet.

Affected products

canonical — ubuntu_linux

Does this affect you?

Add your gear to cvedb and we'll alert you only when canonical ships something exploited.

Check my exposure →

References

This product uses data from the NVD API but is not endorsed or certified by the NVD. Informational only; not professional security advice.