Lucene search

K
ubuntucveUbuntu.comUB:CVE-2015-8785
HistoryDec 31, 2015 - 12:00 a.m.

CVE-2015-8785

2015-12-3100:00:00
ubuntu.com
ubuntu.com
21

6.2 Medium

CVSS3

Attack Vector

LOCAL

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

NONE

Integrity Impact

NONE

Availability Impact

HIGH

CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H

4.9 Medium

CVSS2

Access Vector

LOCAL

Access Complexity

LOW

Authentication

NONE

Confidentiality Impact

NONE

Integrity Impact

NONE

Availability Impact

COMPLETE

AV:L/AC:L/Au:N/C:N/I:N/A:C

0.001 Low

EPSS

Percentile

49.8%

The fuse_fill_write_pages function in fs/fuse/file.c in the Linux kernel
before 4.4 allows local users to cause a denial of service (infinite loop)
via a writev system call that triggers a zero length for the first segment
of an iov.

Bugs

Notes

Author Note
jdstrand android kernels (flo, goldfish, grouper, maguro, mako and manta) are not supported on the Ubuntu Touch 14.10 and earlier preview kernels linux-lts-saucy no longer receives official support linux-lts-quantal no longer receives official support
OSVersionArchitecturePackageVersionFilename
ubuntu12.04noarchlinux< 3.2.0-98.138UNKNOWN
ubuntu14.04noarchlinux< 3.13.0-79.123UNKNOWN
ubuntu15.04noarchlinux< 3.19.0-51.57UNKNOWN
ubuntu15.10noarchlinux< 4.2.0-30.35UNKNOWN
ubuntu12.04noarchlinux-armadaxp< 3.2.0-1661.85UNKNOWN
ubuntu12.04noarchlinux-lts-trusty< 3.13.0-79.123~precise1UNKNOWN
ubuntu14.04noarchlinux-lts-utopic< 3.16.0-62.82~14.04.1UNKNOWN
ubuntu14.04noarchlinux-lts-vivid< 3.19.0-51.57~14.04.1UNKNOWN
ubuntu14.04noarchlinux-lts-wily< 4.2.0-30.35~14.04.1UNKNOWN
ubuntu15.10noarchlinux-raspi2< 4.2.0-1025.32UNKNOWN
Rows per page:
1-10 of 111

6.2 Medium

CVSS3

Attack Vector

LOCAL

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

NONE

Integrity Impact

NONE

Availability Impact

HIGH

CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H

4.9 Medium

CVSS2

Access Vector

LOCAL

Access Complexity

LOW

Authentication

NONE

Confidentiality Impact

NONE

Integrity Impact

NONE

Availability Impact

COMPLETE

AV:L/AC:L/Au:N/C:N/I:N/A:C

0.001 Low

EPSS

Percentile

49.8%