NVD

Id
33915  
Name
CVE-2014-6410  
Description
The __udf_read_inode function in fs/udf/inode.c in the Linux kernel through 3.16.3 does not restrict the amount of ICB indirection, which allows physically proximate attackers to cause a denial of service (infinite loop or stack consumption) via a UDF filesystem with a crafted inode.  
Reject
 
CVSS Version
2  
CVSS Score
4.7  
Severity
Medium  
CVSS Base Score
4.7  
CVSS Impact Subscore
6.9  
CVSS Exploit Subscore
3.4  
CVSS Vector
(AV:L/AC:M/Au:N/C:N/I:N/A:C)  
Pub Date
2017-01-19  
Published
2014-09-28  
Modified Date
2016-08-22  
Seq
2014-6410  

Actions

Related NVD References

Id NVD Id NVD No. Reference Actions
175973 33915 CVE-2014-6410 http://git.kernel.org/?p=linux/kernel/git/torvalds/linux-2.6.git;a=commit;h=c03aa9f6e1f938618e6db2e23afef0574efeeb65  View
175974 33915 CVE-2014-6410 SUSE-SU-2014:1316  View
175975 33915 CVE-2014-6410 SUSE-SU-2014:1319  View
175976 33915 CVE-2014-6410 HPSBGN03285  View
175977 33915 CVE-2014-6410 HPSBGN03282  View
175978 33915 CVE-2014-6410 RHSA-2014:1318  View
175979 33915 CVE-2014-6410 [oss-security] 20140915 Re: CVE request for Linux kernel: udf: Avoid infinite loop when processing indirect ICBs  View
175980 33915 CVE-2014-6410 69799  View
175981 33915 CVE-2014-6410 USN-2374-1  View
175982 33915 CVE-2014-6410 USN-2375-1  View
175983 33915 CVE-2014-6410 USN-2376-1  View
175984 33915 CVE-2014-6410 USN-2377-1  View
175985 33915 CVE-2014-6410 USN-2378-1  View
175986 33915 CVE-2014-6410 USN-2379-1  View
175987 33915 CVE-2014-6410 https://bugzilla.redhat.com/show_bug.cgi?id=1141809  View
175988 33915 CVE-2014-6410 https://github.com/torvalds/linux/commit/c03aa9f6e1f938618e6db2e23afef0574efeeb65  View

Related JVN

Id Name Title Summary Cveinfo Name Cveinfo Id Nvdinfo Name Nvdinfo Id Cvssv2 Cvssv3 Jvnurl Published Date Last Updated Date Actions
15568 JVNDB-2014-004443 Linux Kernel の fs/udf/inode.c の __udf_read_inode 関数におけるサービス運用妨害 (DoS) の脆弱性 Linux Kernel の fs/udf/inode.c の __udf_read_inode 関数は、ICB インダイレクションの量を適切に制限しないため、サービス運用妨害 (無限ループまたはスタック消費) 状態にされる脆弱性が存在します。 CVE-2014-6410 73702 CVE-2014-6410 33915 4.7 http://jvndb.jvn.jp/ja/contents/2014/JVNDB-2014-004443.html 2014-09-04 2014-11-26 View