Published: 06/02/2017 Updated: 24/08/2018

CVSS v2 Base Score: 4.9 | Impact Score: 6.9 | Exploitability Score: 3.9

CVSS v3 Base Score: 4.3 | Impact Score: 3.6 | Exploitability Score: 0.7

VMScore: 436

Vector: AV:L/AC:L/Au:N/C:N/I:N/A:C

The ext4_fill_super function in fs/ext4/super.c in the Linux kernel up to and including 4.9.8 does not properly validate meta block groups, which allows physically proximate malicious users to cause a denial of service (out-of-bounds read and system crash) via a crafted ext4 image.

Vulnerable Product	Search on Vulmon	Subscribe to Product
linux linux kernel

Debian Bug report logs - #852556 linux-image-490-1-amd64: [Regression] Trendnet's TU-ET100C Pegasus II based LAN to USB adapter stopped to work Package: src:linux; Maintainer for src:linux is Debian Kernel Team <debian-kernel@listsdebianorg>; Reported by: Lisandro Damián Nicanor Pérez Meyer <lisandro@debianorg> ...

Synopsis Important: kernel security, bug fix, and enhancement update Type/Severity Security Advisory: Important Topic An update for kernel is now available for Red Hat Enterprise Linux 7Red Hat Product Security has rated this update as having a security impact of Important A Common Vulnerability Scoring S ...

Synopsis Important: kernel-rt security and bug fix update Type/Severity Security Advisory: Important Topic An update for kernel-rt is now available for Red Hat Enterprise MRG 2Red Hat Product Security has rated this update as having a security impact of Important A Common Vulnerability Scoring System (CVS ...

Synopsis Important: kernel-rt security and bug fix update Type/Severity Security Advisory: Important Topic An update for kernel-rt is now available for Red Hat Enterprise Linux 7Red Hat Product Security has rated this update as having a security impact of Important A Common Vulnerability Scoring System (C ...

Several security issues were fixed in the kernel ...

Several security issues were fixed in the Linux kernel ...

Mounting a crafted EXT4 image read-only leads to an attacker controlled memory corruption and SLAB-Out-of-Bounds reads ...

CWE-125 https://github.com/torvalds/linux/commit/3a4b77cd47bb837b8557595ec7425f281f2ca1fe https://bugzilla.redhat.com/show_bug.cgi?id=1395190 http://www.openwall.com/lists/oss-security/2017/02/05/3 http://seclists.org/fulldisclosure/2016/Nov/75 http://git.kernel.org/cgit/linux/kernel/git/torvalds/linux.git/commit/?id=3a4b77cd47bb837b8557595ec7425f281f2ca1fe http://www.securityfocus.com/bid/94354 https://access.redhat.com/errata/RHSA-2017:1308 https://access.redhat.com/errata/RHSA-2017:1298 https://access.redhat.com/errata/RHSA-2017:1297 https://lists.debian.org/debian-lts-announce/2017/12/msg00004.html https://usn.ubuntu.com/3754-1/https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=852556 https://nvd.nist.gov https://usn.ubuntu.com/3234-1/

CVE-2016-10208

Vulnerability Summary

Vulnerability Trend

Vendor Advisories

References

Vulmon Search

About

Products

Connect