PT-2014-3533 · Linux+4 · Linux Kernel+4
CVE-2014-0203
·
Publicado
2014-06-19
·
Atualizado
2023-02-13
CVSS v3.1
5.5
Média
| Vetor | AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H |
Name of the Vulnerable Software and Affected Versions
Linux kernel versions prior to 2.6.33
Description
The issue is related to the
do follow link function in fs/namei.c, which does not properly handle the last pathname component during use of certain filesystems. This allows local users to cause a denial of service, resulting in incorrect free operations and a system crash, via an open system call.Recommendations
For Linux kernel versions prior to 2.6.33, update to version 2.6.33 or later to resolve the issue.
Exploit
Correção
DoS
Use After Free
Encontrou algum problema na descrição? Tem algo a acrescentar? Fique à vontade para nos escrever 👾
Enumeração de Fraquezas
Identificadores relacionados
Produtos afetados
Alt Linux
Centos
Linux Kernel
Red Hat
Suse