PT-2014-6496

CVE-2014-5472

·

Published

2014-08-31

·

Updated

2017-09-08

Description by

CVSS 2.0
4.0
Medium
MetricsAV:L/AC:H/Au:N/C:N/I:N/A:C
Name of the Vulnerable Software and Affected Versions Linux kernel versions prior to 3.16.1
Description The issue allows local users to cause a denial of service, resulting in an unkillable mount process. This can be achieved by using a crafted iso9660 image with a self-referential CL entry, which affects the parse rock ridge inode internal function in fs/isofs/rock.c.
Recommendations For versions prior to 3.16.1, update to version 3.16.1 or later to resolve the issue.
Exploitability
Exploit
Fix
Impacts
Researchers
Vendors
Affected products
Related identifiers
ALT-PU-2014-2106
ALT-PU-2015-1794
CESA-2014_1997
CESA-2015_0102
DLA-103-1
OPENSUSE-SU-2014_1669-1
OPENSUSE-SU-2014_1677-1
RHSA-2014:1318
RHSA-2014:1997
RHSA-2014_1997
RHSA-2015:0102
RHSA-2015_0102
RHSA-2015:0695
RHSA-2015:0782
RHSA-2015:0803
SUSE-RU-2015:0621-1
SUSE-SU-2015:0481-1
SUSE-SU-2015:0581-1
SUSE-SU-2015:0736-1
SUSE-SU-2015:1174-1
SUSE-SU-2015:1376-1
USN-2354-1
USN-2355-1
USN-2356-1
USN-2357-1
USN-2358-1
USN-2359-1
Found an issue in the description? Have something to add? Feel free to write us 👾