CVE-2014-0004 Stack-based buffer overflow in udisks before 1.0.5 and 2.x before 2.1.3 allows local users to cause a denial of service (crash) and possibly execute arbitrary code via a long mount point.
MediumCVSS 6.9
EPSS 0.43%
- Published
- Updated
- Exploit status
- No public exploit known
Description
Stack-based buffer overflow in udisks before 1.0.5 and 2.x before 2.1.3 allows local users to cause a denial of service (crash) and possibly execute arbitrary code via a long mount point.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| debian/udisks2(Debian:12) | < 2.1.3-1 | 2.1.3-1 |
| debian/udisks2(Debian:13) | < 2.1.3-1 | 2.1.3-1 |
| debian/udisks2(Debian:14) | < 2.1.3-1 | 2.1.3-1 |
| freedesktop udisks | <= 1.0.4 | No fix listed |
| freedesktop udisks | = 1.0 | No fix listed |
| freedesktop udisks | = 1.0.1 | No fix listed |
| freedesktop udisks | = 2.0.0 | No fix listed |
| freedesktop udisks | = 2.0.1 | No fix listed |
| freedesktop udisks | = 2.0.90 | No fix listed |
| freedesktop udisks | = 2.0.91 | No fix listed |
| freedesktop udisks | = 2.0.92 | No fix listed |
| freedesktop udisks | = 2.1.0 | No fix listed |
| freedesktop udisks | = 2.1.1 | No fix listed |
| freedesktop udisks | = 2.1.2 | No fix listed |
| Canonical Ubuntu Linux | = 12.04 | No fix listed |
| Canonical Ubuntu Linux | = 12.10 | No fix listed |
| Canonical Ubuntu Linux | = 13.10 | No fix listed |
References
- Debian Security Tracker CVE-2014-0004 vendor-advisory
- [devkit-devel] 20140310 udisks 2.1.3 / 1.0.5 security updates mailing-list patch
- openSUSE-SU-2014:0388 vendor-advisory
- openSUSE-SU-2014:0389 vendor-advisory
- openSUSE-SU-2014:0390 vendor-advisory
- RHSA-2014:0293 vendor-advisory
- DSA-2872 vendor-advisory
- 66081 vdb-entry
- USN-2142-1 vendor-advisory