CVE-2015-2516 — Improper Input Validation in Microsoft Windows Server 2008

CWE-20 — Improper Input Validation6 documents4 sources
Severity
4.3MEDIUMNVD
OSV2.1
EPSS
12.8%
top 5.97%
CISA KEV
Not in KEV
Exploit
No known exploits
Affected products
3
Linux KernelMicrosoft Windows Server 2008Microsoft Windows Server 2012
Timeline
PublishedSep 9
Latest updateMay 14

Description

Windows Journal in Microsoft Windows Vista SP2, Windows Server 2008 SP2 and R2 SP1, Windows 7 SP1, Windows 8, Windows 8.1, Windows Server 2012 Gold and R2, Windows RT Gold and 8.1, and Windows 10 allows remote attackers to cause a denial of service (data loss) via a crafted .jnt file, aka "Windows Journal DoS Vulnerability."

CVSS vector

AV:N/AC:M/C:N/I:N/A:PExploitability: 8.6 | Impact: 2.9

Affected Packages2 packages

▶Ubuntulinux/linux_kernel< 3.13.0-46.77+1

Patches

Patch: docs.microsoft.com ↗Patch: docs.microsoft.com ↗

🔴Vulnerability Details

3
GHSA
GHSA-83v4-rfv9-vvrr: Windows Journal in Microsoft Windows Vista SP2, Windows Server 2008 SP2 and R2 SP1, Windows 7 SP1, Windows 8, Windows 8↗2022-05-14
▶
OSV
linux vulnerabilities↗2015-03-04
▶
OSV
linux vulnerability↗2015-02-28
▶

🕵️Threat Intelligence

2
Talos
Microsoft Patch Tuesday - September 2015↗2015-09-08
▶
Talos
Microsoft Patch Tuesday - September 2015↗2015-09-08
▶