Published: 05/08/2015 Updated: 22/12/2016

CVSS v2 Base Score: 4.7 | Impact Score: 6.9 | Exploitability Score: 3.4

VMScore: 419

Vector: AV:L/AC:M/Au:N/C:N/I:N/A:C

The udf_read_inode function in fs/udf/inode.c in the Linux kernel prior to 3.19.1 does not validate certain length values, which allows local users to cause a denial of service (incorrect data representation or integer overflow, and OOPS) via a crafted UDF filesystem.

Vulnerable Product	Search on Vulmon	Subscribe to Product
debian debian linux 7.0
linux linux kernel
canonical ubuntu linux 12.04

Several vulnerabilities have been discovered in the Linux kernel that may lead to a privilege escalation or denial of service CVE-2015-3290 Andy Lutomirski discovered that the Linux kernel does not properly handle nested NMIs A local, unprivileged user could use this flaw for privilege escalation CVE-2015-3291 Andy Lutomirski di ...

Several security issues were fixed in the kernel ...

An inode data validation error was found in Linux kernels built with UDF file system (CONFIG_UDF_FS) support An attacker able to mount a corrupted/malicious UDF file system image could cause the kernel to crash ...

CWE-189 http://git.kernel.org/cgit/linux/kernel/git/torvalds/linux.git/commit/?id=23b133bdc452aa441fcb9b82cbf6dd05cfd342d0 http://www.openwall.com/lists/oss-security/2015/06/02/6 https://bugzilla.redhat.com/show_bug.cgi?id=1228204 http://www.kernel.org/pub/linux/kernel/v3.x/ChangeLog-3.19.1 https://github.com/torvalds/linux/commit/23b133bdc452aa441fcb9b82cbf6dd05cfd342d0 http://www.securitytracker.com/id/1033187 http://www.debian.org/security/2015/dsa-3290 http://www.ubuntu.com/usn/USN-2631-1 http://www.ubuntu.com/usn/USN-2632-1 http://www.securityfocus.com/bid/74963 http://lists.opensuse.org/opensuse-security-announce/2015-09/msg00021.html http://lists.opensuse.org/opensuse-security-announce/2015-09/msg00018.html http://www.debian.org/security/2015/dsa-3313 http://lists.opensuse.org/opensuse-security-announce/2015-08/msg00011.html http://lists.opensuse.org/opensuse-security-announce/2015-07/msg00049.html https://nvd.nist.gov https://www.debian.org/security/./dsa-3313 https://usn.ubuntu.com/2664-1/https://access.redhat.com/security/cve/cve-2015-4167

CVE-2015-4167

Vulnerability Summary

Vendor Advisories

References

Vulmon Search

About

Products

Connect