// For flags

CVE-2014-9728

 

Severity Score

4.9
*CVSS v2

Exploit Likelihood

*EPSS

Affected Versions

*CPE

Public Exploits

0
*Multiple Sources

Exploited in Wild

-
*KEV

Decision

-
*SSVC
Descriptions

The UDF filesystem implementation in the Linux kernel before 3.18.2 does not validate certain lengths, which allows local users to cause a denial of service (buffer over-read and system crash) via a crafted filesystem image, related to fs/udf/inode.c and fs/udf/symlink.c.

Vulnerabilidad en la implementación del sistema de archivos UDF en el kernel de Linux en versiones anteriores a 3.18.2, no valida ciertas longitudes, lo cual permite a usuarios locales causar una denegación de servicio (sobre-lectura del buffer y caída del sistema) a través de una imagen de sistema de archivos manipulada, relacionado con fs/udf/inode.c y fs/udf/symlink.c.

*Credits: N/A
CVSS Scores
Attack Vector
Local
Attack Complexity
Low
Authentication
None
Confidentiality
None
Integrity
None
Availability
Complete
* Common Vulnerability Scoring System
SSVC
  • Decision:-
Exploitation
-
Automatable
-
Tech. Impact
-
* Organization's Worst-case Scenario
Timeline
  • 2015-06-03 CVE Reserved
  • 2015-08-31 CVE Published
  • 2023-03-08 EPSS Updated
  • 2024-08-06 CVE Updated
  • ---------- Exploited in Wild
  • ---------- KEV Due Date
  • ---------- First Exploit
CWE
  • CWE-119: Improper Restriction of Operations within the Bounds of a Memory Buffer
CAPEC
References (15)
URL Tag Source
http://git.kernel.org/cgit/linux/kernel/git/torvalds/linux.git/commit/?id=a1d47b262952a45aae62bd49cfaf33dd76c11a2c X_refsource_confirm
http://git.kernel.org/cgit/linux/kernel/git/torvalds/linux.git/commit/?id=e159332b9af4b04d882dbcfe1bb0117f0a6d4b58 X_refsource_confirm
http://git.kernel.org/cgit/linux/kernel/git/torvalds/linux.git/commit/?id=e237ec37ec154564f8690c5bd1795339955eeef9 X_refsource_confirm
http://www.openwall.com/lists/oss-security/2015/06/02/7 Mailing List
http://www.securityfocus.com/bid/74964 Vdb Entry
https://bugzilla.redhat.com/show_bug.cgi?id=1228229 X_refsource_confirm
https://github.com/torvalds/linux/commit/a1d47b262952a45aae62bd49cfaf33dd76c11a2c X_refsource_confirm
https://github.com/torvalds/linux/commit/e159332b9af4b04d882dbcfe1bb0117f0a6d4b58 X_refsource_confirm
https://github.com/torvalds/linux/commit/e237ec37ec154564f8690c5bd1795339955eeef9 X_refsource_confirm
URL Date SRC
URL Date SRC
URL Date SRC
http://lists.opensuse.org/opensuse-security-announce/2015-07/msg00023.html 2016-12-22
http://lists.opensuse.org/opensuse-security-announce/2015-07/msg00049.html 2016-12-22
http://lists.opensuse.org/opensuse-security-announce/2015-08/msg00011.html 2016-12-22
http://lists.opensuse.org/opensuse-security-announce/2015-09/msg00018.html 2016-12-22
http://lists.opensuse.org/opensuse-security-announce/2015-09/msg00021.html 2016-12-22
http://www.kernel.org/pub/linux/kernel/v3.x/ChangeLog-3.18.2 2016-12-22
Affected Vendors, Products, and Versions
Vendor Product Version Other Status
Vendor Product Version Other Status <-- --> Vendor Product Version Other Status
Linux
Search vendor "Linux"
 Linux Kernel
Search vendor "Linux" for product "Linux Kernel"
 <= 3.18.1
Search vendor "Linux" for product "Linux Kernel" and version " <= 3.18.1"
-
Affected