Beveiligingsadvies

CVE-2014-3182

CVE-kwetsbaarheidsdetails - eXtreme Datacenter Security Operations

Gepubliceerd 2014-09-28 10:00:00
Laatst bijgewerkt 2024-08-06 10:35:57
Toegewezen door Chrome
CVSS-score geen score
Status PUBLISHED

Beschrijving

Array index error in the logi_dj_raw_event function in drivers/hid/hid-logitech-dj.c in the Linux kernel before 3.16.2 allows physically proximate attackers to execute arbitrary code or cause a denial of service (invalid kfree) via a crafted device that provides a malformed REPORT_TYPE_NOTIF_DEVICE_UNPAIRED value.