NVD

Id
36123  
Name
CVE-2014-9420  
Description
The rock_continue function in fs/isofs/rock.c in the Linux kernel through 3.18.1 does not restrict the number of Rock Ridge continuation entries, which allows local users to cause a denial of service (infinite loop, and system crash or hang) via a crafted iso9660 image.  
Reject
 
CVSS Version
2  
CVSS Score
4.9  
Severity
Medium  
CVSS Base Score
4.9  
CVSS Impact Subscore
6.9  
CVSS Exploit Subscore
3.9  
CVSS Vector
(AV:L/AC:L/Au:N/C:N/I:N/A:C)  
Pub Date
2017-01-19  
Published
2014-12-25  
Modified Date
2017-01-06  
Seq
2014-9420  

Actions

Related NVD References

Id NVD Id NVD No. Reference Actions
184594 36123 CVE-2014-9420 http://git.kernel.org/?p=linux/kernel/git/torvalds/linux-2.6.git;a=commit;h=f54e18f1b831c92f6512d2eedb224cd63d607d3d  View
184595 36123 CVE-2014-9420 FEDORA-2015-0517  View
184596 36123 CVE-2014-9420 FEDORA-2015-0515  View
184597 36123 CVE-2014-9420 SUSE-SU-2015:0178  View
184598 36123 CVE-2014-9420 SUSE-SU-2015:0652  View
184599 36123 CVE-2014-9420 openSUSE-SU-2015:0714  View
184600 36123 CVE-2014-9420 SUSE-SU-2015:0736  View
184601 36123 CVE-2014-9420 SUSE-SU-2015:0812  View
184602 36123 CVE-2014-9420 MDVSA-2015:058  View
184603 36123 CVE-2014-9420 [oss-security] 20141225 Re: CVE Request Linux kernel: fs: isofs: infinite loop in CE records  View
184604 36123 CVE-2014-9420 http://www.oracle.com/technetwork/topics/security/linuxbulletinjan2016-2867209.html  View
184605 36123 CVE-2014-9420 USN-2490-1  View
184606 36123 CVE-2014-9420 USN-2491-1  View
184607 36123 CVE-2014-9420 USN-2492-1  View
184608 36123 CVE-2014-9420 USN-2493-1  View
184609 36123 CVE-2014-9420 USN-2515-1  View
184610 36123 CVE-2014-9420 USN-2516-1  View
184611 36123 CVE-2014-9420 USN-2517-1  View
184612 36123 CVE-2014-9420 USN-2518-1  View
184613 36123 CVE-2014-9420 https://bugzilla.redhat.com/show_bug.cgi?id=1175235  View
184614 36123 CVE-2014-9420 https://github.com/torvalds/linux/commit/f54e18f1b831c92f6512d2eedb224cd63d607d3d  View
184615 36123 CVE-2014-9420 https://source.android.com/security/bulletin/2017-01-01.html  View

Related JVN

Id Name Title Summary Cveinfo Name Cveinfo Id Nvdinfo Name Nvdinfo Id Cvssv2 Cvssv3 Jvnurl Published Date Last Updated Date Actions
18543 JVNDB-2014-007418 Linux Kernel の fs/isofs/rock.c の rock_continue 関数におけるサービス運用妨害 (DoS) の脆弱性 Linux Kernel の fs/isofs/rock.c の rock_continue 関数は、Rock Ridge の継続エントリ (continuation entry) の数を制限しないため、サービス運用妨害 (無限ループ、およびシステムクラッシュまたはハング) 状態にされる脆弱性が存在します。 CVE-2014-9420 76713 CVE-2014-9420 36123 4.9 http://jvndb.jvn.jp/ja/contents/2014/JVNDB-2014-007418.html 2014-12-15 2015-01-05 View