UBUNTU-CVE-2016-4913

The getrockridgefilename function in fs/isofs/rock.c in the Linux kernel before 4.5.5 mishandles NM aka alternate name entries containing \0 characters, which allows local users to obtain sensitive information from kernel memory or possibly have unspecified other impact via a crafted isofs...

CVE-2016-4913

The getrockridgefilename function in fs/isofs/rock.c in the Linux kernel before 4.5.5 mishandles NM aka alternate name entries containing \0 characters, which allows local users to obtain sensitive information from kernel memory or possibly have unspecified other impact via a crafted isofs...

The vulnerability of the FuseISO disk mounting software allows a hacker to trigger a service failure or cause other adverse effects.

The vulnerability of the isofsrealreadzf function isofs.c in the FuseISO disk mounting software is caused by a numerical overflow. Exploiting this vulnerability can allow an attacker to cause a service failure application termination, or possibly have other effects due to the large size of the ZF...

FuseISO Integer Overflow Vulnerability

FuseISO is an open source FUSE module for mounting ISO filesystems such as .iso, .nrg, .bin, .mdf, and .img images, developed by software developer Adam Rimon. An integer overflow vulnerability exists in the 'isofsrealreadzf' function in the isofs.c file in FuseISO 20070708 and earlier versions. ...

FuseISO Stack Buffer Overflow Vulnerability

FuseISO is an open source FUSE module for mounting ISO filesystems such as .iso, .nrg, .bin, .mdf, and .img images, developed by software developer Adam Rimon. A stack buffer overflow vulnerability exists in the 'isofsrealreaddir' function in the isofs.c file in FuseISO 20070708 and earlier...

DEBIAN-CVE-2015-8837

Stack-based buffer overflow in the isofsrealreaddir function in isofs.c in FuseISO 20070708 allows remote attackers to cause a denial of service application crash or possibly execute arbitrary code via a long pathname in an ISO file...

UBUNTU-CVE-2015-8836

Integer overflow in the isofsrealreadzf function in isofs.c in FuseISO 20070708 might allow remote attackers to cause a denial of service application crash or possibly have unspecified other impact via a large ZF block size in an ISO file, leading to a heap-based buffer overflow...

DEBIAN-CVE-2015-8836

Integer overflow in the isofsrealreadzf function in isofs.c in FuseISO 20070708 might allow remote attackers to cause a denial of service application crash or possibly have unspecified other impact via a large ZF block size in an ISO file, leading to a heap-based buffer overflow...

CVE-2015-8837

Stack-based buffer overflow in the isofsrealreaddir function in isofs.c in FuseISO 20070708 allows remote attackers to cause a denial of service application crash or possibly execute arbitrary code via a long pathname in an ISO file...

UBUNTU-CVE-2015-8837

Stack-based buffer overflow in the isofsrealreaddir function in isofs.c in FuseISO 20070708 allows remote attackers to cause a denial of service application crash or possibly execute arbitrary code via a long pathname in an ISO file...

Oracle Linux 7 : kernel (ELSA-2015-1137)

The remote Oracle Linux 7 host has packages installed that are affected by multiple vulnerabilities as referenced in the ELSA-2015-1137 advisory. - fs pipe: fix pipe corruption and iovec overrun on partial copy Seth Jennings 1202861 1198843 CVE-2015-1805 - x86 kernel: Remove a bogus 'retfromfork'...

kernel: isofs: unchecked printing of ER records

An information leak flaw was found in the way the Linux kernel's ISO9660 file system implementation accessed data on an ISO9660 image with RockRidge Extension Reference ER records. An attacker with physical access to the system could use this flaw to disclose up to 255 bytes of kernel memory...

Kernel: fs: isofs: infinite loop in CE record entries

It was found that the Linux kernel's ISO file system implementation did not correctly limit the traversal of Rock Ridge extension Continuation Entries CE. An attacker with physical access to the system could use this flaw to trigger an infinite loop in the kernel, resulting in a denial of service...

kernel security and bug fix update

3.10.0-229.7.2 - Oracle Linux certificates Alexey Petrenko 3.10.0-229.7.2 - fs pipe: fix pipe corruption and iovec overrun on partial copy Seth Jennings 1202861 1198843 CVE-2015-1805 3.10.0-229.7.1 - scsi storvsc: get rid of overly verbose warning messages Vitaly Kuznetsov 1215770 1206437 - scsi...

OracleVM 3.3 : kernel-uek (OVMSA-2015-0069)

The remote OracleVM system is missing necessary patches to address critical security updates : - x8664, vdso: Fix the vdso address randomization algorithm Andy Lutomirski Orabug: 21226729 CVE-2014-9585 - isofs: Fix infinite looping over CE entries Jan Kara Orabug: 21225975 CVE-2014-9420 - x8664,...

Oracle Linux 5 / 6 : Unbreakable Enterprise kernel (ELSA-2015-3043)

The remote Oracle Linux 5 / 6 host has packages installed that are affected by multiple vulnerabilities as referenced in the ELSA-2015-3043 advisory. - x8664, vdso: Fix the vdso address randomization algorithm Andy Lutomirski Orabug: 21226731 CVE-2014-9585 - isofs: Fix infinite looping over CE...

Oracle Linux 6 / 7 : Unbreakable Enterprise kernel (ELSA-2015-3041)

The remote Oracle Linux 6 / 7 host has packages installed that are affected by multiple vulnerabilities as referenced in the ELSA-2015-3041 advisory. - x8664, vdso: Fix the vdso address randomization algorithm Andy Lutomirski Orabug: 21226729 CVE-2014-9585 - isofs: Fix infinite looping over CE...

Oracle Linux 5 / 6 : Unbreakable Enterprise kernel (ELSA-2015-3042)

The remote Oracle Linux 5 / 6 host has packages installed that are affected by multiple vulnerabilities as referenced in the ELSA-2015-3042 advisory. - x8664, vdso: Fix the vdso address randomization algorithm Andy Lutomirski Orabug: 21226730 CVE-2014-9585 - isofs: Fix infinite looping over CE...

Unbreakable Enterprise kernel security update

kernel-uek 3.8.13-68.3.2 - x8664, vdso: Fix the vdso address randomization algorithm Andy Lutomirski Orabug: 21226729 CVE-2014-9585 - isofs: Fix infinite looping over CE entries Jan Kara Orabug: 21225975 CVE-2014-9420 - x8664, switchto: Load TLS descriptors before switching DS and ES Andy...

Oracle Linux 6 : kernel (ELSA-2015-1081)

The remote Oracle Linux 6 host has packages installed that are affected by multiple vulnerabilities as referenced in the ELSA-2015-1081 advisory. - fs pipe: fix pipe corruption and iovec overrun on partial copy Seth Jennings 1202860 1185166 CVE-2015-1805 - x86 crypto: aesni - fix memory usage in...