Vulnerability   
Search   
    Search 324607 CVE descriptions
and 145615 test descriptions,
access 10,000+ cross references.
Tests   CVE   All  

CVE ID:CVE-2015-2666
Description:Stack-based buffer overflow in the get_matching_model_microcode function in arch/x86/kernel/cpu/microcode/intel_early.c in the Linux kernel before 4.0 allows context-dependent attackers to gain privileges by constructing a crafted microcode header and leveraging root privileges for write access to the initrd.
Test IDs: None available
Cross References: Common Vulnerability Exposure (CVE) ID: CVE-2015-2666
http://lists.fedoraproject.org/pipermail/package-announce/2015-March/153329.html
http://www.openwall.com/lists/oss-security/2015/03/20/18
RedHat Security Advisories: RHSA-2015:1534
http://rhn.redhat.com/errata/RHSA-2015-1534.html
http://www.securitytracker.com/id/1032414




© 1998-2025 E-Soft Inc. All rights reserved.