CVE-2016-3139
MEDIUMNovell Suse Linux Enterprise Software... - Denial of Service
Title source: ruleDescription
The wacom_probe function in drivers/input/tablet/wacom_sys.c in the Linux kernel before 3.17 allows physically proximate attackers to cause a denial of service (NULL pointer dereference and system crash) via a crafted endpoints value in a USB device descriptor.
Exploits (1)
exploitdb
WORKING POC
by OpenSource Security · textdoslinux
https://www.exploit-db.com/exploits/39538
References (13)
Scores
CVSS v3
4.6
EPSS
0.0013
EPSS Percentile
31.8%
Attack Vector
PHYSICAL
CVSS:3.0/AV:P/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
Classification
Status
draft
Affected Products (13)
novell/suse_linux_enterprise_software_development_kit
novell/suse_linux_enterprise_software_development_kit
novell/suse_linux_enterprise_debuginfo
novell/suse_linux_enterprise_desktop
novell/suse_linux_enterprise_live_patching
novell/suse_linux_enterprise_module_for_public_cloud
novell/suse_linux_enterprise_real_time_extension
novell/suse_linux_enterprise_real_time_extension
novell/suse_linux_enterprise_server
novell/suse_linux_enterprise_server
novell/suse_linux_enterprise_server
novell/suse_linux_enterprise_workstation_extension
linux/linux_kernel
< 3.16.7
Timeline
Published
Apr 27, 2016
Tracked Since
Feb 18, 2026