{"id":"CVE-2015-4003","aliases":["DEBIAN-CVE-2015-4003","EUVD-2015-4033","GHSA-v3q7-q964-x82m","UBUNTU-CVE-2015-4003","USN-2663-1","USN-2664-1","USN-2665-1"],"status":"published","title":"The oz_usb_handle_ep_data function in drivers/staging/ozwpan/ozusbsvc1.c in the OZWPAN driver in...","description":"The oz_usb_handle_ep_data function in drivers/staging/ozwpan/ozusbsvc1.c in the OZWPAN driver in the Linux kernel through 4.0.5 allows remote attackers to cause a denial of service (divide-by-zero error and system crash) via a crafted packet.","severity":{"version":"2.0","score":7.8,"vector":"AV:N/AC:L/Au:N/C:N/I:N/A:C","level":"high","assessor":"primary","from":"nvd"},"epss":{"day":"2026-11-08","score":0.0581,"percentile":0.93185,"model":"v2026.06.15"},"facts":{"in_kev":false,"known_exploited":false,"public_exploit":false,"fix_available":true},"cwes":["CWE-189"],"published":"2015-06-07T00:00:00Z","modified":"2026-09-09T06:47:28Z","fixes":[{"ecosystem":"Debian:12","package":"linux","fixed_in":["4.1.3-1"],"sources":["osv"]},{"ecosystem":"Debian:13","package":"linux","fixed_in":["4.1.3-1"],"sources":["osv"]},{"ecosystem":"Debian:14","package":"linux","fixed_in":["4.1.3-1"],"sources":["osv"]},{"ecosystem":"Ubuntu:14.04:LTS","package":"linux","fixed_in":["3.13.0-57.95"],"sources":["osv"]},{"ecosystem":"Ubuntu:14.04:LTS","package":"linux-lts-utopic","fixed_in":["3.16.0-43.58~14.04.1"],"sources":["osv"]},{"ecosystem":"Ubuntu:14.04:LTS","package":"linux-lts-vivid","fixed_in":["3.19.0-22.22~14.04.1"],"sources":["osv"]}],"affected":[{"source":"osv","ecosystem":"Debian:12","package":"linux","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.1.3-1"}]}]},{"source":"osv","ecosystem":"Debian:13","package":"linux","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.1.3-1"}]}]},{"source":"osv","ecosystem":"Debian:14","package":"linux","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.1.3-1"}]}]},{"source":"osv","ecosystem":"Ubuntu:14.04:LTS","package":"linux","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.13.0-57.95"}]}],"versions":["3.11.0-12.19","3.12.0-1.3","3.12.0-2.5","3.12.0-2.7","3.12.0-3.8","3.12.0-3.9","3.12.0-4.10","3.12.0-4.12","3.12.0-5.13","3.12.0-7.15","3.13.0-1.16","3.13.0-2.17","3.13.0-3.18","3.13.0-4.19","3.13.0-5.20","3.13.0-6.23","3.13.0-7.25","3.13.0-7.26","3.13.0-8.27","3.13.0-8.28","3.13.0-10.30","3.13.0-11.31","3.13.0-12.32","3.13.0-13.33","3.13.0-14.34","3.13.0-15.35","3.13.0-16.36","3.13.0-17.37","3.13.0-18.38","3.13.0-19.39","3.13.0-19.40","3.13.0-20.42","3.13.0-21.43","3.13.0-22.44","3.13.0-23.45","3.13.0-24.46","3.13.0-24.47","3.13.0-27.50","3.13.0-29.53","3.13.0-30.54","3.13.0-30.55","3.13.0-32.57","3.13.0-33.58","3.13.0-34.60","3.13.0-35.62","3.13.0-36.63","3.13.0-37.64","3.13.0-39.66","3.13.0-40.69","3.13.0-41.70","3.13.0-43.72","3.13.0-44.73","3.13.0-45.74","3.13.0-46.75","3.13.0-46.76","3.13.0-46.77","3.13.0-46.79","3.13.0-48.80","3.13.0-49.81","3.13.0-49.83","3.13.0-51.84","3.13.0-52.85","3.13.0-52.86","3.13.0-53.88","3.13.0-53.89","3.13.0-54.91","3.13.0-55.92","3.13.0-55.94"]},{"source":"osv","ecosystem":"Ubuntu:14.04:LTS","package":"linux-lts-utopic","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.16.0-43.58~14.04.1"}]}],"versions":["3.16.0-25.33~14.04.2","3.16.0-26.35~14.04.1","3.16.0-28.37~14.04.1","3.16.0-28.38~14.04.1","3.16.0-29.39~14.04.1","3.16.0-30.40~14.04.1","3.16.0-31.41~14.04.1","3.16.0-31.43~14.04.1","3.16.0-33.44~14.04.1","3.16.0-34.45~14.04.1","3.16.0-34.47~14.04.1","3.16.0-36.48~14.04.1","3.16.0-37.49~14.04.1","3.16.0-37.51~14.04.1","3.16.0-38.52~14.04.1","3.16.0-39.53~14.04.1","3.16.0-40.54~14.04.1","3.16.0-41.55~14.04.1","3.16.0-41.57~14.04.1"]},{"source":"osv","ecosystem":"Ubuntu:14.04:LTS","package":"linux-lts-vivid","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.19.0-22.22~14.04.1"}]}],"versions":["3.19.0-18.18~14.04.1","3.19.0-20.20~14.04.1","3.19.0-21.21~14.04.1"]},{"source":"osv","ecosystem":"Ubuntu:14.04:LTS","package":"linux","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.13.0-57.95"}]}],"versions":["3.11.0-12.19","3.12.0-1.3","3.12.0-2.5","3.12.0-2.7","3.12.0-3.8","3.12.0-3.9","3.12.0-4.10","3.12.0-4.12","3.12.0-5.13","3.12.0-7.15","3.13.0-1.16","3.13.0-2.17","3.13.0-3.18","3.13.0-4.19","3.13.0-5.20","3.13.0-6.23","3.13.0-7.25","3.13.0-7.26","3.13.0-8.27","3.13.0-8.28","3.13.0-10.30","3.13.0-11.31","3.13.0-12.32","3.13.0-13.33","3.13.0-14.34","3.13.0-15.35","3.13.0-16.36","3.13.0-17.37","3.13.0-18.38","3.13.0-19.39","3.13.0-19.40","3.13.0-20.42","3.13.0-21.43","3.13.0-22.44","3.13.0-23.45","3.13.0-24.46","3.13.0-24.47","3.13.0-27.50","3.13.0-29.53","3.13.0-30.54","3.13.0-30.55","3.13.0-32.57","3.13.0-33.58","3.13.0-34.60","3.13.0-35.62","3.13.0-36.63","3.13.0-37.64","3.13.0-39.66","3.13.0-40.69","3.13.0-41.70","3.13.0-43.72","3.13.0-44.73","3.13.0-45.74","3.13.0-46.75","3.13.0-46.76","3.13.0-46.77","3.13.0-46.79","3.13.0-48.80","3.13.0-49.81","3.13.0-49.83","3.13.0-51.84","3.13.0-52.85","3.13.0-52.86","3.13.0-53.88","3.13.0-53.89","3.13.0-54.91","3.13.0-55.92","3.13.0-55.94"],"bundled":6},{"source":"osv","ecosystem":"Ubuntu:14.04:LTS","package":"linux-lts-utopic","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.16.0-43.58~14.04.1"}]}],"versions":["3.16.0-25.33~14.04.2","3.16.0-26.35~14.04.1","3.16.0-28.37~14.04.1","3.16.0-28.38~14.04.1","3.16.0-29.39~14.04.1","3.16.0-30.40~14.04.1","3.16.0-31.41~14.04.1","3.16.0-31.43~14.04.1","3.16.0-33.44~14.04.1","3.16.0-34.45~14.04.1","3.16.0-34.47~14.04.1","3.16.0-36.48~14.04.1","3.16.0-37.49~14.04.1","3.16.0-37.51~14.04.1","3.16.0-38.52~14.04.1","3.16.0-39.53~14.04.1","3.16.0-40.54~14.04.1","3.16.0-41.55~14.04.1","3.16.0-41.57~14.04.1"],"bundled":7},{"source":"osv","ecosystem":"Ubuntu:14.04:LTS","package":"linux-lts-vivid","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.19.0-22.22~14.04.1"}]}],"versions":["3.19.0-18.18~14.04.1","3.19.0-20.20~14.04.1","3.19.0-21.21~14.04.1"],"bundled":5}],"products":[{"vendor":"linux","product":"linux_kernel"}],"references":[{"url":"http://www.securityfocus.com/bid/74668","tags":["vdb-entry","x_refsource_BID","x_transferred","Third Party Advisory","VDB Entry","advisory"]},{"url":"http://www.ubuntu.com/usn/USN-2665-1","tags":["vendor-advisory","x_refsource_UBUNTU","x_transferred","Third Party Advisory","advisory"]},{"url":"https://github.com/torvalds/linux/commit/04bf464a5dfd9ade0dda918e44366c2c61fce80b","tags":["x_refsource_CONFIRM","x_transferred","Vendor Advisory","advisory"]},{"url":"http://lists.opensuse.org/opensuse-security-announce/2015-08/msg00011.html","tags":["vendor-advisory","x_refsource_SUSE","x_transferred","Mailing List","Third Party Advisory","advisory","article"]},{"url":"http://git.kernel.org/cgit/linux/kernel/git/torvalds/linux.git/commit/?id=04bf464a5dfd9ade0dda918e44366c2c61fce80b","tags":["x_refsource_CONFIRM","x_transferred","Vendor Advisory","advisory"]},{"url":"http://openwall.com/lists/oss-security/2015/06/05/7","tags":["mailing-list","x_refsource_MLIST","x_transferred","Mailing List","Third Party Advisory","advisory","article"]},{"url":"http://www.ubuntu.com/usn/USN-2667-1","tags":["vendor-advisory","x_refsource_UBUNTU","x_transferred","Third Party Advisory","advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2015-4003"},{"url":"https://github.com/advisories/GHSA-v3q7-q964-x82m"},{"url":"https://security-tracker.debian.org/tracker/CVE-2015-4003","tags":["advisory"]},{"url":"https://ubuntu.com/security/CVE-2015-4003","tags":["report"]},{"url":"http://www.openwall.com/lists/oss-security/2015/06/05/7","tags":["report"]},{"url":"https://ubuntu.com/security/notices/USN-2662-1","tags":["advisory"]},{"url":"https://ubuntu.com/security/notices/USN-2663-1","tags":["advisory"]},{"url":"https://ubuntu.com/security/notices/USN-2664-1","tags":["advisory"]},{"url":"https://ubuntu.com/security/notices/USN-2665-1","tags":["advisory"]},{"url":"https://ubuntu.com/security/notices/USN-2666-1","tags":["advisory"]},{"url":"https://ubuntu.com/security/notices/USN-2667-1","tags":["advisory"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2015-4003","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2014-9710","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2015-1420","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2015-4001","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2015-4002","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2015-4167","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2015-4700","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2015-5706","tags":["report"]}],"sources":{"cve":[{"id":"CVE-2015-4003","description":"The oz_usb_handle_ep_data function in drivers/staging/ozwpan/ozusbsvc1.c in the OZWPAN driver in the Linux kernel through 4.0.5 allows remote attackers to cause a denial of service (divide-by-zero error and system crash) via a crafted packet.","status":"published","published":"2015-06-07T23:00:00Z","modified":"2024-08-06T06:04:02.668Z","updated_at":"2026-11-02T14:35:43.698357Z"}],"euvd":[{"id":"EUVD-2015-4033","description":"The oz_usb_handle_ep_data function in drivers/staging/ozwpan/ozusbsvc1.c in the OZWPAN driver in the Linux kernel through 4.0.5 allows remote attackers to cause a denial of service (divide-by-zero error and system crash) via a crafted packet.","status":"published","published":"2015-06-07T23:00:00Z","modified":"2024-08-06T06:04:02Z","updated_at":"2026-11-03T02:22:05.665475Z"}],"ghsa":[{"id":"GHSA-v3q7-q964-x82m","title":"The oz_usb_handle_ep_data function in drivers/staging/ozwpan/ozusbsvc1.c in the OZWPAN driver in...","description":"The oz_usb_handle_ep_data function in drivers/staging/ozwpan/ozusbsvc1.c in the OZWPAN driver in the Linux kernel through 4.0.5 allows remote attackers to cause a denial of service (divide-by-zero error and system crash) via a crafted packet.","status":"published","published":"2022-05-17T03:14:23Z","modified":"2023-01-27T05:06:31Z","updated_at":"2026-11-02T14:42:56.089114Z"}],"nvd":[{"id":"CVE-2015-4003","description":"The oz_usb_handle_ep_data function in drivers/staging/ozwpan/ozusbsvc1.c in the OZWPAN driver in the Linux kernel through 4.0.5 allows remote attackers to cause a denial of service (divide-by-zero error and system crash) via a crafted packet.","status":"published","published":"2015-06-07T23:59:07.58Z","modified":"2026-06-17T00:26:37.597Z","cvss":[{"version":"2.0","score":7.8,"vector":"AV:N/AC:L/Au:N/C:N/I:N/A:C","level":"high","assessor":"primary"}],"cwes":["CWE-189"],"updated_at":"2026-11-02T14:03:04.906059Z"}],"osv":[{"id":"CVE-2015-4003","description":"The oz_usb_handle_ep_data function in drivers/staging/ozwpan/ozusbsvc1.c in the OZWPAN driver in the Linux kernel through 4.0.5 allows remote attackers to cause a denial of service (divide-by-zero error and system crash) via a crafted packet.","status":"published","published":"2015-06-07T23:59:07Z","modified":"2026-04-10T03:45:17.726841Z","updated_at":"2026-11-02T15:44:00.594921Z"},{"id":"DEBIAN-CVE-2015-4003","description":"The oz_usb_handle_ep_data function in drivers/staging/ozwpan/ozusbsvc1.c in the OZWPAN driver in the Linux kernel through 4.0.5 allows remote attackers to cause a denial of service (divide-by-zero error and system crash) via a crafted packet.","status":"published","published":"2015-06-07T23:59:07.58Z","modified":"2026-09-09T06:47:28.173920848Z","updated_at":"2026-11-02T15:45:26.752992Z"},{"id":"UBUNTU-CVE-2015-4003","description":"The oz_usb_handle_ep_data function in drivers/staging/ozwpan/ozusbsvc1.c in the OZWPAN driver in the Linux kernel through 4.0.5 allows remote attackers to cause a denial of service (divide-by-zero error and system crash) via a crafted packet.","status":"published","published":"2015-06-07T00:00:00Z","modified":"2026-04-22T10:08:43.610021Z","updated_at":"2026-11-02T15:54:10.045446Z"},{"id":"USN-2663-1","title":"linux vulnerabilities","description":"Alexandre Oliva reported a race condition flaw in the btrfs file system's\nhandling of extended attributes (xattrs). A local attacker could exploit\nthis flaw to bypass ACLs and potentially escalate privileges.\n(CVE-2014-9710)\n\nA race condition was discovered in the Linux kernel's file_handle size\nverification. A local user could exploit this flaw to read potentially\nsensative memory locations. (CVE-2015-1420)\n\nA underflow error was discovered in the Linux kernel's Ozmo Devices USB\nover WiFi host controller driver. A remote attacker could exploit this flaw\nto cause a denial of service (system crash) or potentially execute\narbitrary code via a specially crafted packet. (CVE-2015-4001)\n\nA bounds check error was discovered in the Linux kernel's Ozmo Devices USB\nover WiFi host controller driver. A remote attacker could exploit this flaw\nto cause a denial of service (system crash) or potentially execute\narbitrary code via a specially crafted packet. (CVE-2015-4002)\n\nA division by zero error was discovered in the Linux kernel's Ozmo Devices\nUSB over WiFi host controller driver. A remote attacker could exploit this\nflaw to cause a denial of service (system crash). (CVE-2015-4003)\n\nCarl H Lunde discovered missing consistency checks in the Linux kernel's UDF\nfile system (CONFIG_UDF_FS). A local attacker could exploit this flaw to\ncause a denial of service (system crash) by using a corrupted file system\nimage. (CVE-2015-4167)\n","status":"published","published":"2015-07-07T09:39:14Z","modified":"2026-04-22T09:14:39.596911Z","updated_at":"2026-11-02T16:58:09.227524Z"},{"id":"USN-2664-1","title":"linux-lts-utopic vulnerabilities","description":"\nA race condition was discovered in the Linux kernel's file_handle size\nverification. A local user could exploit this flaw to read potentially\nsensative memory locations. (CVE-2015-1420)\n\nA underflow error was discovered in the Linux kernel's Ozmo Devices USB\nover WiFi host controller driver. A remote attacker could exploit this flaw\nto cause a denial of service (system crash) or potentially execute\narbitrary code via a specially crafted packet. (CVE-2015-4001)\n\nA bounds check error was discovered in the Linux kernel's Ozmo Devices USB\nover WiFi host controller driver. A remote attacker could exploit this flaw\nto cause a denial of service (system crash) or potentially execute\narbitrary code via a specially crafted packet. (CVE-2015-4002)\n\nA division by zero error was discovered in the Linux kernel's Ozmo Devices\nUSB over WiFi host controller driver. A remote attacker could exploit this\nflaw to cause a denial of service (system crash). (CVE-2015-4003)\n\nCarl H Lunde discovered missing consistency checks in the Linux kernel's UDF\nfile system (CONFIG_UDF_FS). A local attacker could exploit this flaw to cause\na denial of service (system crash) by using a corrupted file system image.\n(CVE-2015-4167)\n\nDaniel Borkmann reported a kernel crash in the Linux kernel's BPF filter\nJIT optimization. A local attacker could exploit this flaw to cause a\ndenial of service (system crash). (CVE-2015-4700)\n\nA double free flaw was discovered in the Linux kernel's path lookup. A\nlocal user could cause a denial of service (Oops). (CVE-2015-5706)\n","status":"published","published":"2015-07-07T09:41:40Z","modified":"2026-02-10T04:40:54Z","updated_at":"2026-11-02T16:58:09.227524Z"},{"id":"USN-2665-1","title":"linux-lts-vivid vulnerabilities","description":"\nA race condition was discovered in the Linux kernel's file_handle size\nverification. A local user could exploit this flaw to read potentially\nsensative memory locations. (CVE-2015-1420)\n\nA underflow error was discovered in the Linux kernel's Ozmo Devices USB\nover WiFi host controller driver. A remote attacker could exploit this flaw\nto cause a denial of service (system crash) or potentially execute\narbitrary code via a specially crafted packet. (CVE-2015-4001)\n\nA bounds check error was discovered in the Linux kernel's Ozmo Devices USB\nover WiFi host controller driver. A remote attacker could exploit this flaw\nto cause a denial of service (system crash) or potentially execute\narbitrary code via a specially crafted packet. (CVE-2015-4002)\n\nA division by zero error was discovered in the Linux kernel's Ozmo Devices\nUSB over WiFi host controller driver. A remote attacker could exploit this\nflaw to cause a denial of service (system crash). (CVE-2015-4003)\n\nA double free flaw was discovered in the Linux kernel's path lookup. A\nlocal user could cause a denial of service (Oops). (CVE-2015-5706)\n","status":"published","published":"2015-07-07T09:44:09Z","modified":"2026-02-10T04:40:54Z","updated_at":"2026-11-02T16:58:09.227524Z"}]}}