CVE-2015-0569
HighSummary
CVE-2015-0569 involves a heap-based buffer overflow in the WLAN driver for Linux kernel 3.x and 4.x, allowing attackers to gain privileges via a crafted application that establishes a packet filter.
Risk Assessment
Attackers can exploit this vulnerability to gain elevated privileges on the system, potentially leading to serious security breaches on Android-based devices.
Recommendation
It is recommended to update the Linux kernel to the latest version that includes security patches to mitigate the risks associated with this vulnerability.
Other vulnerabilities in Sterownik WLAN dla jądra Linux 3.x i 4.x
See all- CVE-2015-0571High
The WLAN driver for Linux kernel 3.x and 4.x does not verify authorization for private SET IOCTL calls, allowing attackers to gain privileges via a crafted application.
- CVE-2015-0570High
CVE-2015-0570 involves a stack-based buffer overflow in the SET_WPS_IE IOCTL implementation in wlan_hdd_hostapd.c in the WLAN driver for Linux kernel 3.x and 4.x. This allows attackers to gain privileges via a crafted application that uses a long WPS IE element.
Original NVD description (English source)
Heap-based buffer overflow in the private wireless extensions IOCTL implementation in wlan_hdd_wext.c in the WLAN (aka Wi-Fi) driver for the Linux kernel 3.x and 4.x, as used in Qualcomm Innovation Center (QuIC) Android contributions for MSM devices and other products, allows attackers to gain privileges via a crafted application that establishes a packet filter.