• caglararli@hotmail.com
  • 05386281520

CVE-2016-20022 | Linux Kernel up to 4.7 config.c usb_parse_endpoint wMaxPacketSize Privilege Escalation

Çağlar Arlı      -    45 Views

CVE-2016-20022 | Linux Kernel up to 4.7 config.c usb_parse_endpoint wMaxPacketSize Privilege Escalation

A vulnerability classified as problematic was found in Linux Kernel up to 4.7. Affected by this vulnerability is the function usb_parse_endpoint of the file drivers/usb/core/config.c. The manipulation of the argument wMaxPacketSize leads to Privilege Escalation. NOTE: This vulnerability only affects products that are no longer supported by the maintainer. This vulnerability is known as CVE-2016-20022. Access to the local network is required for this attack. There is no exploit available. It is recommended to upgrade the affected component.