QwikSec

Security Database

CVE

CWE

Training

CVE-2015-3036

Published: May 21, 2015

Modified: Aug 6, 2024

PUBLISHED

Description

Stack-based buffer overflow in the run_init_sbus function in the KCodes NetUSB module for the Linux kernel, as used in certain NETGEAR products, TP-LINK products, and other products, allows remote attackers to execute arbitrary code by providing a long computer name in a session on TCP port 20005.

Vendor	Product	Versions
n/a	n/a	affected `n/a`

References

third-party-advisory

x_refsource_CERT-VN

http://blog.sec-consult.com/2015/05/kcodes-netusb-how-small-taiwanese.html

x_refsource_MISC

exploit

x_refsource_EXPLOIT-DB

exploit

x_refsource_EXPLOIT-DB

http://packetstormsecurity.com/files/133919/NetUSB-Stack-Buffer-Overflow.html

x_refsource_MISC

20151010 Exploit NetUSB CVE-2015-3036

mailing-list

x_refsource_FULLDISC

http://packetstormsecurity.com/files/131987/KCodes-NetUSB-Buffer-Overflow.html

x_refsource_MISC

https://www.sec-consult.com/fxdata/seccons/prod/temedia/advisories_txt/20150519-0_KCodes_NetUSB_Kernel_Stack_Buffer_Overflow_v10.txt

x_refsource_MISC

vdb-entry

x_refsource_BID

vdb-entry

x_refsource_SECTRACK

20150519 SEC Consult SA-20150519-0 :: Critical buffer overflow vulnerability in KCodes NetUSB (VU#177092, CVE-2015-3036)

mailing-list

x_refsource_FULLDISC

Security Training

Train your team to recognize and prevent security threats with our comprehensive security awareness program.

Vulnerability Scanning

Discover vulnerabilities in your applications and infrastructure before attackers do.