Lucene search

K
debiancveDebian Security Bug TrackerDEBIANCVE:CVE-2014-9731
HistoryAug 31, 2015 - 10:59 a.m.

CVE-2014-9731

2015-08-3110:59:00
Debian Security Bug Tracker
security-tracker.debian.org
17

2.1 Low

CVSS2

Access Vector

LOCAL

Access Complexity

LOW

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

NONE

Availability Impact

NONE

AV:L/AC:L/Au:N/C:P/I:N/A:N

0.0004 Low

EPSS

Percentile

5.3%

The UDF filesystem implementation in the Linux kernel before 3.18.2 does not ensure that space is available for storing a symlink targetโ€™s name along with a trailing \0 character, which allows local users to obtain sensitive information via a crafted filesystem image, related to fs/udf/symlink.c and fs/udf/unicode.c.

2.1 Low

CVSS2

Access Vector

LOCAL

Access Complexity

LOW

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

NONE

Availability Impact

NONE

AV:L/AC:L/Au:N/C:P/I:N/A:N

0.0004 Low

EPSS

Percentile

5.3%