Arbitrary Code Execution

2020-04-1001:08:06

Veracode Vulnerability Database

sca.analysiscenter.veracode.com

6.9 Medium

CVSS2

Access Vector

LOCAL

Access Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

COMPLETE

Integrity Impact

COMPLETE

Availability Impact

COMPLETE

AV:L/AC:M/Au:N/C:C/I:C/A:C

JSON

kernel is vulnerable to arbitrary code execution. A buffer overflow flaw was found in the way the Linux kernel’s XFS file system implementation handled links with overly long path names. A local, unprivileged user could use this flaw to cause a denial of service or escalate their privileges by mounting a specially-crafted disk.

CPENameOperatorVersion
kerneleq2.6.18__8.1.14.el5
kerneleq2.6.18__92.1.17.el5
kerneleq2.6.18__128.1.14.el5
kerneleq2.6.18__164.el5
kerneleq2.6.32__220.2.1.el6
kerneleq2.6.18__92.1.22.el5
kerneleq2.6.32__71.14.1.el6
kerneleq2.6.18__238.19.1.el5
kerneleq2.6.18__53.1.19.el5
kerneleq2.6.18__8.1.3.lspp.81.el5

Name	Operator	Version
kernel	eq	2.6.18__8.1.14.el5
kernel	eq	2.6.18__92.1.17.el5
kernel	eq	2.6.18__128.1.14.el5
kernel	eq	2.6.18__164.el5
kernel	eq	2.6.32__220.2.1.el6
kernel	eq	2.6.18__92.1.22.el5
kernel	eq	2.6.32__71.14.1.el6
kernel	eq	2.6.18__238.19.1.el5
kernel	eq	2.6.18__53.1.19.el5
kernel	eq	2.6.18__8.1.3.lspp.81.el5