Published: 28/09/2014 Updated: 07/11/2023

CVSS v2 Base Score: 4.7 | Impact Score: 6.9 | Exploitability Score: 3.4

VMScore: 419

Vector: AV:L/AC:M/Au:N/C:N/I:N/A:C

The __udf_read_inode function in fs/udf/inode.c in the Linux kernel up to and including 3.16.3 does not restrict the amount of ICB indirection, which allows physically proximate malicious users to cause a denial of service (infinite loop or stack consumption) via a UDF filesystem with a crafted inode.

Vulnerable Product	Search on Vulmon	Subscribe to Product
linux linux kernel 3.16.0
linux linux kernel 3.16.2
linux linux kernel
linux linux kernel 3.16.1

Synopsis Important: kernel security and bug fix update Type/Severity Security Advisory: Important Topic Updated kernel packages that fix multiple security issues and several bugsare now available for Red Hat Enterprise Linux 6Red Hat Product Security has rated this update as having Important securityimpact ...

Several security issues were fixed in the kernel ...

A stack overflow flaw caused by infinite recursion was found in the way the Linux kernel's Universal Disk Format (UDF) file system implementation processed indirect Information Control Blocks (ICBs) An attacker with physical access to the system could use a specially crafted UDF image to crash the system ...

CWE-399 https://bugzilla.redhat.com/show_bug.cgi?id=1141809 https://github.com/torvalds/linux/commit/c03aa9f6e1f938618e6db2e23afef0574efeeb65 http://www.openwall.com/lists/oss-security/2014/09/15/9 http://www.securityfocus.com/bid/69799 http://www.ubuntu.com/usn/USN-2375-1 http://www.ubuntu.com/usn/USN-2377-1 http://www.ubuntu.com/usn/USN-2374-1 http://www.ubuntu.com/usn/USN-2376-1 http://www.ubuntu.com/usn/USN-2379-1 http://www.ubuntu.com/usn/USN-2378-1 http://rhn.redhat.com/errata/RHSA-2014-1318.html http://lists.opensuse.org/opensuse-security-announce/2014-10/msg00006.html http://lists.opensuse.org/opensuse-security-announce/2014-10/msg00007.html http://marc.info/?l=bugtraq&m=142722450701342&w=2 http://marc.info/?l=bugtraq&m=142722544401658&w=2 http://git.kernel.org/?p=linux/kernel/git/torvalds/linux-2.6.git%3Ba=commit%3Bh=c03aa9f6e1f938618e6db2e23afef0574efeeb65 https://access.redhat.com/errata/RHSA-2014:1997 https://nvd.nist.gov https://usn.ubuntu.com/2376-1/https://access.redhat.com/security/cve/cve-2014-6410

CVE-2014-6410

Vulnerability Summary

Vendor Advisories

References

Vulmon Search

About

Products

Connect