NVD

Id
28544  
Name
CVE-2015-8374  
Description
fs/btrfs/inode.c in the Linux kernel before 4.3.3 mishandles compressed inline extents, which allows local users to obtain sensitive pre-truncation information from a file via a clone action.  
Reject
 
CVSS Version
2  
CVSS Score
2.1  
Severity
Low  
CVSS Base Score
2.1  
CVSS Impact Subscore
2.9  
CVSS Exploit Subscore
3.9  
CVSS Vector
(AV:L/AC:L/Au:N/C:P/I:N/A:N)  
Pub Date
2017-01-19  
Published
2015-12-28  
Modified Date
2016-12-07  
Seq
2015-8374  

Actions

Related NVD References

Id NVD Id NVD No. Reference Actions
149961 28544 CVE-2015-8374 http://git.kernel.org/cgit/linux/kernel/git/torvalds/linux.git/commit/?id=0305cd5f7fca85dae392b9ba85b116896eb7c1c7  View
149962 28544 CVE-2015-8374 DSA-3426  View
149963 28544 CVE-2015-8374 http://www.kernel.org/pub/linux/kernel/v4.x/ChangeLog-4.3.3  View
149964 28544 CVE-2015-8374 [oss-security] 20151127 CVE request: Linux kernel, information disclosure after file truncate on BTRFS  View
149965 28544 CVE-2015-8374 http://www.oracle.com/technetwork/topics/security/linuxbulletinoct2016-3090545.html  View
149966 28544 CVE-2015-8374 http://www.oracle.com/technetwork/topics/security/ovmbulletinoct2016-3090547.html  View
149967 28544 CVE-2015-8374 78219  View
149968 28544 CVE-2015-8374 1034895  View
149969 28544 CVE-2015-8374 USN-2886-1  View
149970 28544 CVE-2015-8374 USN-2887-1  View
149971 28544 CVE-2015-8374 USN-2887-2  View
149972 28544 CVE-2015-8374 USN-2888-1  View
149973 28544 CVE-2015-8374 USN-2889-1  View
149974 28544 CVE-2015-8374 USN-2889-2  View
149975 28544 CVE-2015-8374 USN-2890-1  View
149976 28544 CVE-2015-8374 USN-2890-2  View
149977 28544 CVE-2015-8374 USN-2890-3  View
149978 28544 CVE-2015-8374 https://bugzilla.redhat.com/show_bug.cgi?id=1286261  View
149979 28544 CVE-2015-8374 https://github.com/torvalds/linux/commit/0305cd5f7fca85dae392b9ba85b116896eb7c1c7  View

Related JVN

Id Name Title Summary Cveinfo Name Cveinfo Id Nvdinfo Name Nvdinfo Id Cvssv2 Cvssv3 Jvnurl Published Date Last Updated Date Actions
11247 JVNDB-2015-006567 Linux Kernel の fs/btrfs/inode.c におけるファイルから重要なトランケーション前の情報を取得される脆弱性 Linux Kernel の fs/btrfs/inode.c は、圧縮された inline エクステントを誤って処理するため、ファイルから重要なトランケーション前の情報を取得される脆弱性が存在します。 CVE-2015-8374 85599 CVE-2015-8374 28544 2.1 http://jvndb.jvn.jp/ja/contents/2015/JVNDB-2015-006567.html 2015-12-14 2016-01-05 View