NVD

Id
36320  
Name
CVE-2014-9728  
Description
The UDF filesystem implementation in the Linux kernel before 3.18.2 does not validate certain lengths, which allows local users to cause a denial of service (buffer over-read and system crash) via a crafted filesystem image, related to fs/udf/inode.c and fs/udf/symlink.c.  
Reject
 
CVSS Version
2  
CVSS Score
4.9  
Severity
Medium  
CVSS Base Score
4.9  
CVSS Impact Subscore
6.9  
CVSS Exploit Subscore
3.9  
CVSS Vector
(AV:L/AC:L/Au:N/C:N/I:N/A:C)  
Pub Date
2017-01-19  
Published
2015-08-31  
Modified Date
2016-12-21  
Seq
2014-9728  

Actions

Related NVD References

Id NVD Id NVD No. Reference Actions
185779 36320 CVE-2014-9728 http://git.kernel.org/cgit/linux/kernel/git/torvalds/linux.git/commit/?id=a1d47b262952a45aae62bd49cfaf33dd76c11a2c  View
185780 36320 CVE-2014-9728 http://git.kernel.org/cgit/linux/kernel/git/torvalds/linux.git/commit/?id=e159332b9af4b04d882dbcfe1bb0117f0a6d4b58  View
185781 36320 CVE-2014-9728 http://git.kernel.org/cgit/linux/kernel/git/torvalds/linux.git/commit/?id=e237ec37ec154564f8690c5bd1795339955eeef9  View
185782 36320 CVE-2014-9728 SUSE-SU-2015:1224  View
185783 36320 CVE-2014-9728 SUSE-SU-2015:1324  View
185784 36320 CVE-2014-9728 openSUSE-SU-2015:1382  View
185785 36320 CVE-2014-9728 SUSE-SU-2015:1592  View
185786 36320 CVE-2014-9728 SUSE-SU-2015:1611  View
185787 36320 CVE-2014-9728 http://www.kernel.org/pub/linux/kernel/v3.x/ChangeLog-3.18.2  View
185788 36320 CVE-2014-9728 [oss-security] 20150602 CVE request Linux kernel: fs: udf heap overflow in __udf_adinicb_readpage  View
185789 36320 CVE-2014-9728 74964  View
185790 36320 CVE-2014-9728 https://bugzilla.redhat.com/show_bug.cgi?id=1228229  View
185791 36320 CVE-2014-9728 https://github.com/torvalds/linux/commit/a1d47b262952a45aae62bd49cfaf33dd76c11a2c  View
185792 36320 CVE-2014-9728 https://github.com/torvalds/linux/commit/e159332b9af4b04d882dbcfe1bb0117f0a6d4b58  View
185793 36320 CVE-2014-9728 https://github.com/torvalds/linux/commit/e237ec37ec154564f8690c5bd1795339955eeef9  View

Related JVN

Id Name Title Summary Cveinfo Name Cveinfo Id Nvdinfo Name Nvdinfo Id Cvssv2 Cvssv3 Jvnurl Published Date Last Updated Date Actions
19236 JVNDB-2014-008113 Linux Kernel の UDF ファイルシステムの実装におけるサービス運用妨害 (DoS) の脆弱性 Linux Kernel の UDF ファイルシステムの実装は、特定の長さを適切に検証しないため、サービス運用妨害 (バッファオーバーリードおよびシステムクラッシュ) 状態にされる脆弱性が存在します。 CVE-2014-9728 77021 CVE-2014-9728 36320 4.9 http://jvndb.jvn.jp/ja/contents/2014/JVNDB-2014-008113.html 2014-12-19 2015-09-01 View