4 Medium
CVSS2
Access Vector
LOCAL
Access Complexity
HIGH
Authentication
NONE
Confidentiality Impact
NONE
Integrity Impact
NONE
Availability Impact
COMPLETE
AV:L/AC:H/Au:N/C:N/I:N/A:C
0.0004 Low
EPSS
Percentile
9.3%
The parse_rock_ridge_inode_internal function in fs/isofs/rock.c in the
Linux kernel through 3.16.1 allows local users to cause a denial of service
(unkillable mount process) via a crafted iso9660 image with a
self-referential CL entry.
Author | Note |
---|---|
jdstrand | android kernels (flo, goldfish, grouper, maguro, mako and manta) are not supported on the Ubuntu Touch 14.04 preview kernels linux-lts-saucy no longer receives official support linux-lts-quantal no longer receives official support |
OS | Version | Architecture | Package | Version | Filename |
---|---|---|---|---|---|
ubuntu | 10.04 | noarch | linux | < 2.6.32-66.132 | UNKNOWN |
ubuntu | 12.04 | noarch | linux | < 3.2.0-69.103 | UNKNOWN |
ubuntu | 14.04 | noarch | linux | < 3.13.0-36.63 | UNKNOWN |
ubuntu | 12.04 | noarch | linux-armadaxp | < 3.2.0-1638.55 | UNKNOWN |
ubuntu | 10.04 | noarch | linux-ec2 | < 2.6.32-370.86 | UNKNOWN |
ubuntu | 12.04 | noarch | linux-lts-trusty | < 3.13.0-36.63~precise1 | UNKNOWN |
ubuntu | 12.04 | noarch | linux-ti-omap4 | < 3.2.0-1453.73 | UNKNOWN |
code.google.com/p/google-security-research/issues/detail?id=88
github.com/torvalds/linux/commit/410dd3cf4c9b36f27ed4542ee18b1af5e68645a4
launchpad.net/bugs/cve/CVE-2014-5472
nvd.nist.gov/vuln/detail/CVE-2014-5472
security-tracker.debian.org/tracker/CVE-2014-5472
ubuntu.com/security/notices/USN-2354-1
ubuntu.com/security/notices/USN-2355-1
ubuntu.com/security/notices/USN-2356-1
ubuntu.com/security/notices/USN-2357-1
ubuntu.com/security/notices/USN-2358-1
ubuntu.com/security/notices/USN-2359-1
www.cve.org/CVERecord?id=CVE-2014-5472