CVE の説明

The ping_unhash function in net/ipv4/ping.c in the Linux kernel before 4.0.3 does not initialize a certain list data structure during an unhash operation, which allows local users to gain privileges or cause a denial of service (use-after-free and system crash) by leveraging the ability to make a SOCK_DGRAM socket system call for the IPPROTO_ICMP or IPPROTO_ICMPV6 protocol, and then making a connect system call after a disconnect.

CVE の情報

メトリクス

メトリクス	スコア	深刻度	CVSS ベクター	出典
V2	4.9		AV:L/AC:L/Au:N/C:N/I:N/A:C	nvd@nist.gov

EPSS

EPSSは脆弱性が悪用される可能性を予測するスコアリングモデルです。

EPSSスコア

EPSSモデルは0から1（0〜100%）の確率スコアを算出します。スコアが高いほど、脆弱性が悪用される可能性が高いことを示します。

EPSSパーセンタイル

パーセンタイルはCVEをEPSSスコアで順位付けするために使用されます。例えば、EPSSスコアで95パーセンタイルにあるCVEは、他の95%のCVEよりも悪用される可能性が高いことを意味します。パーセンタイルはCVEのEPSSスコアを他のCVEと比較するために使用されます。

EPSS First.org

参考資料

http://www.debian.org/security/2015/dsa-3290
Tags : vendor-advisory, x_refsource_DEBIAN

http://www.ubuntu.com/usn/USN-2631-1
Tags : vendor-advisory, x_refsource_UBUNTU

http://www.ubuntu.com/usn/USN-2634-1
Tags : vendor-advisory, x_refsource_UBUNTU

http://lists.opensuse.org/opensuse-security-announce/2015-09/msg00011.html
Tags : vendor-advisory, x_refsource_SUSE

http://lists.opensuse.org/opensuse-security-announce/2015-09/msg00009.html
Tags : vendor-advisory, x_refsource_SUSE

http://www.ubuntu.com/usn/USN-2632-1
Tags : vendor-advisory, x_refsource_UBUNTU

http://lists.opensuse.org/opensuse-security-announce/2015-09/msg00008.html
Tags : vendor-advisory, x_refsource_SUSE

http://lists.fedoraproject.org/pipermail/package-announce/2015-May/158804.html
Tags : vendor-advisory, x_refsource_FEDORA

http://www.openwall.com/lists/oss-security/2015/05/02/5
Tags : mailing-list, x_refsource_MLIST

http://www.securitytracker.com/id/1033186
Tags : vdb-entry, x_refsource_SECTRACK

http://www.oracle.com/technetwork/topics/security/linuxbulletinjan2016-2867209.html
Tags : x_refsource_CONFIRM

https://github.com/torvalds/linux/commit/a134f083e79fb4c3d0a925691e732c56911b4326
Tags : x_refsource_CONFIRM

http://lists.fedoraproject.org/pipermail/package-announce/2015-May/157897.html
Tags : vendor-advisory, x_refsource_FEDORA

http://rhn.redhat.com/errata/RHSA-2015-1643.html
Tags : vendor-advisory, x_refsource_REDHAT

http://lists.opensuse.org/opensuse-security-announce/2015-08/msg00011.html
Tags : vendor-advisory, x_refsource_SUSE

http://www.kernel.org/pub/linux/kernel/v4.x/ChangeLog-4.0.3
Tags : x_refsource_CONFIRM

https://bugzilla.redhat.com/show_bug.cgi?id=1218074
Tags : x_refsource_CONFIRM

http://lists.opensuse.org/opensuse-security-announce/2015-09/msg00004.html
Tags : vendor-advisory, x_refsource_SUSE

http://rhn.redhat.com/errata/RHSA-2015-1583.html
Tags : vendor-advisory, x_refsource_REDHAT

http://rhn.redhat.com/errata/RHSA-2015-1534.html
Tags : vendor-advisory, x_refsource_REDHAT

http://rhn.redhat.com/errata/RHSA-2015-1564.html
Tags : vendor-advisory, x_refsource_REDHAT

http://lists.opensuse.org/opensuse-security-announce/2015-07/msg00023.html
Tags : vendor-advisory, x_refsource_SUSE

http://lists.opensuse.org/opensuse-security-announce/2015-09/msg00007.html
Tags : vendor-advisory, x_refsource_SUSE

http://git.kernel.org/cgit/linux/kernel/git/torvalds/linux.git/commit/?id=a134f083e79fb4c3d0a925691e732c56911b4326
Tags : x_refsource_CONFIRM

http://rhn.redhat.com/errata/RHSA-2015-1221.html
Tags : vendor-advisory, x_refsource_REDHAT

http://lists.fedoraproject.org/pipermail/package-announce/2015-May/157788.html
Tags : vendor-advisory, x_refsource_FEDORA

http://www.ubuntu.com/usn/USN-2633-1
Tags : vendor-advisory, x_refsource_UBUNTU

http://www.securityfocus.com/bid/74450
Tags : vdb-entry, x_refsource_BID

日付	EPSS V0	EPSS V1	EPSS V2 (> 2022-02-04)	EPSS V3 (> 2025-03-07)	EPSS V4 (> 2025-03-17)
2022-02-06	–	–	5.84%	–	–
2022-02-13	–	–	5.84%	–	–
2022-04-03	–	–	5.84%	–	–
2023-03-12	–	–	–	0.04%	–
2023-11-05	–	–	–	0.04%	–
2023-12-03	–	–	–	0.04%	–
2024-03-31	–	–	–	0.04%	–
2024-06-02	–	–	–	0.04%	–
2024-08-25	–	–	–	0.04%	–
2024-12-08	–	–	–	0.04%	–
2025-01-19	–	–	–	0.04%	–
2025-03-09	–	–	–	0.04%	–
2025-03-09	–	–	–	0.04%	–
2025-03-18	–	–	–	–	2.22%
2025-03-30	–	–	–	–	2.56%
2025-04-15	–	–	–	–	2.56%
2025-05-01	–	–	–	–	3.12%
2025-05-09	–	–	–	–	2.56%
2025-05-11	–	–	–	–	2.18%
2025-05-18	–	–	–	–	1.61%
2025-06-01	–	–	–	–	1.93%
2025-06-04	–	–	–	–	1.61%
2025-06-18	–	–	–	–	2.56%
2025-07-01	–	–	–	–	3.12%
2025-07-04	–	–	–	–	2.56%
2025-08-01	–	–	–	–	3.12%
2025-08-05	–	–	–	–	2.56%
2025-08-15	–	–	–	–	2.2%
2025-08-17	–	–	–	–	2.26%
2025-08-30	–	–	–	–	2.2%
2025-09-24	–	–	–	–	1.92%
2025-10-01	–	–	–	–	2.02%
2025-10-04	–	–	–	–	1.9%
2025-10-27	–	–	–	–	1.92%
2025-10-28	–	–	–	–	1.9%
2025-11-01	–	–	–	–	2.02%
2025-11-04	–	–	–	–	1.9%
2025-11-18	–	–	–	–	1.9%
2025-11-21	–	–	–	–	1.9%
2025-11-25	–	–	–	–	1.96%
2025-12-01	–	–	–	–	2.08%
2025-12-03	–	–	–	–	2.08%
2025-12-04	–	–	–	–	1.96%
2025-12-08	–	–	–	–	1.9%
2025-12-27	–	–	–	–	1.92%
2025-12-28	–	–	–	–	1.9%
2026-01-01	–	–	–	–	2.02%
2026-01-04	–	–	–	–	1.9%
2026-01-05	–	–	–	–	3.02%
2026-03-01	–	–	–	–	2.22%
2026-03-08	–	–	–	–	2.09%
2026-04-26	–	–	–	–	3.3%
2026-05-10	–	–	–	–	3.02%
2026-05-17	–	–	–	–	3.04%

日付	パーセンタイル
2022-02-06	77%
2022-02-13	78%
2022-04-03	9%
2023-03-12	8%
2023-11-05	9%
2023-12-03	8%
2024-03-31	9%
2024-06-02	1%
2024-08-25	11%
2024-12-08	12%
2025-01-19	12%
2025-03-09	13%
2025-03-09	13%
2025-03-18	83%
2025-03-30	84%
2025-04-15	85%
2025-05-01	86%
2025-05-09	85%
2025-05-11	83%
2025-05-18	81%
2025-06-01	83%
2025-06-04	81%
2025-06-18	85%
2025-07-01	86%
2025-07-04	85%
2025-08-01	86%
2025-08-05	85%
2025-08-15	84%
2025-08-17	84%
2025-08-30	84%
2025-09-24	83%
2025-10-01	83%
2025-10-04	83%
2025-10-27	83%
2025-10-28	83%
2025-11-01	83%
2025-11-04	83%
2025-11-18	82%
2025-11-21	83%
2025-11-25	83%
2025-12-01	83%
2025-12-03	84%
2025-12-04	83%
2025-12-08	83%
2025-12-27	83%
2025-12-28	83%
2026-01-01	83%
2026-01-04	83%
2026-01-05	86%
2026-03-01	84%
2026-03-08	84%
2026-04-26	87%
2026-05-10	87%
2026-05-17	87%

CVE-2015-3636

CVE の説明

CVE の情報

メトリクス

EPSS

EPSSスコア

EPSSパーセンタイル

関連製品

構成 0

構成 0

構成 0

参考資料

CVE-2015-3636 : 詳細

CVE-2015-3636

CVE の説明

CVE の情報

メトリクス

EPSS

EPSSスコア

EPSSパーセンタイル

関連製品

構成 0

構成 0

構成 0

参考資料