CVE-2014-9728
SUSE Security Advisory - SUSE-SU-2015:1611-1
Severity Score
Exploit Likelihood
Affected Versions
Public Exploits
0Exploited in Wild
-Decision
Descriptions
The UDF filesystem implementation in the Linux kernel before 3.18.2 does not validate certain lengths, which allows local users to cause a denial of service (buffer over-read and system crash) via a crafted filesystem image, related to fs/udf/inode.c and fs/udf/symlink.c.
Vulnerabilidad en la implementación del sistema de archivos UDF en el kernel de Linux en versiones anteriores a 3.18.2, no valida ciertas longitudes, lo cual permite a usuarios locales causar una denegación de servicio (sobre-lectura del buffer y caída del sistema) a través de una imagen de sistema de archivos manipulada, relacionado con fs/udf/inode.c y fs/udf/symlink.c.
An update that solves 14 vulnerabilities and has 45 fixes is now available. The SUSE Linux Enterprise 11 SP3 kernel was updated to receive various security and bug fixes.
CVSS Scores
SSVC
- Decision:-
Timeline
- 2015-06-03 CVE Reserved
- 2015-08-31 CVE Published
- 2024-08-06 CVE Updated
- 2025-05-21 EPSS Updated
- ---------- Exploited in Wild
- ---------- KEV Due Date
- ---------- First Exploit
CWE
- CWE-119: Improper Restriction of Operations within the Bounds of a Memory Buffer
CAPEC
References (15)
URL | Tag | Source |
---|---|---|
http://git.kernel.org/cgit/linux/kernel/git/torvalds/linux.git/commit/?id=a1d47b262952a45aae62bd49cfaf33dd76c11a2c | X_refsource_confirm | |
http://git.kernel.org/cgit/linux/kernel/git/torvalds/linux.git/commit/?id=e159332b9af4b04d882dbcfe1bb0117f0a6d4b58 | X_refsource_confirm | |
http://git.kernel.org/cgit/linux/kernel/git/torvalds/linux.git/commit/?id=e237ec37ec154564f8690c5bd1795339955eeef9 | X_refsource_confirm | |
http://www.openwall.com/lists/oss-security/2015/06/02/7 | Mailing List |
|
http://www.securityfocus.com/bid/74964 | Vdb Entry | |
https://bugzilla.redhat.com/show_bug.cgi?id=1228229 | X_refsource_confirm | |
https://github.com/torvalds/linux/commit/a1d47b262952a45aae62bd49cfaf33dd76c11a2c | X_refsource_confirm | |
https://github.com/torvalds/linux/commit/e159332b9af4b04d882dbcfe1bb0117f0a6d4b58 | X_refsource_confirm | |
https://github.com/torvalds/linux/commit/e237ec37ec154564f8690c5bd1795339955eeef9 | X_refsource_confirm |
URL | Date | SRC |
---|
URL | Date | SRC |
---|
Affected Vendors, Products, and Versions
Vendor | Product | Version | Other | Status | ||||||
---|---|---|---|---|---|---|---|---|---|---|
Vendor | Product | Version | Other | Status | <-- --> | Vendor | Product | Version | Other | Status |
Linux Search vendor "Linux" | Linux Kernel Search vendor "Linux" for product "Linux Kernel" | <= 3.18.1 Search vendor "Linux" for product "Linux Kernel" and version " <= 3.18.1" | - |
Affected
|