CVE-2014-9584 The parse_rock_ridge_inode_internal function in fs/isofs/rock.c in the Linux kernel before 3.18.2 does not validate a length value in the Extensions Reference (ER) System Use Field, which allows local...
LowCVSS 2.1
EPSS 0.46%
- Published
- Updated
- Exploit status
- No public exploit known
Description
The parse_rock_ridge_inode_internal function in fs/isofs/rock.c in the Linux kernel before 3.18.2 does not validate a length value in the Extensions Reference (ER) System Use Field, which allows local users to obtain sensitive information from kernel memory via a crafted iso9660 image.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| debian/linux(Debian:12) | < 3.16.7-ckt4-1 | 3.16.7-ckt4-1 |
| debian/linux(Debian:13) | < 3.16.7-ckt4-1 | 3.16.7-ckt4-1 |
| debian/linux(Debian:14) | < 3.16.7-ckt4-1 | 3.16.7-ckt4-1 |
| Linux kernel | < 3.18.2 | 3.18.2 |
| redhat enterprise linux aus | = 6.6 | No fix listed |
| redhat enterprise linux desktop | = 6.0 | No fix listed |
| redhat enterprise linux desktop | = 7.0 | No fix listed |
| redhat enterprise linux eus | = 6.6 | No fix listed |
| redhat enterprise linux server | = 6.0 | No fix listed |
| redhat enterprise linux server | = 7.0 | No fix listed |
| redhat enterprise linux server aus | = 7.3 | No fix listed |
| redhat enterprise linux server aus | = 7.4 | No fix listed |
| redhat enterprise linux server aus | = 7.6 | No fix listed |
| redhat enterprise linux server aus | = 7.7 | No fix listed |
| redhat enterprise linux server eus | = 7.1 | No fix listed |
| redhat enterprise linux server eus | = 7.2 | No fix listed |
| redhat enterprise linux server eus | = 7.3 | No fix listed |
| redhat enterprise linux server eus | = 7.4 | No fix listed |
| redhat enterprise linux server eus | = 7.5 | No fix listed |
| redhat enterprise linux server eus | = 7.6 | No fix listed |
| redhat enterprise linux server eus | = 7.7 | No fix listed |
| redhat enterprise linux server tus | = 6.6 | No fix listed |
| redhat enterprise linux server tus | = 7.3 | No fix listed |
| redhat enterprise linux server tus | = 7.6 | No fix listed |
| redhat enterprise linux server tus | = 7.7 | No fix listed |
Show 19 more
| Product | Affected versions | Fixed in |
|---|---|---|
| redhat enterprise linux workstation | = 6.0 | No fix listed |
| redhat enterprise linux workstation | = 7.0 | No fix listed |
| openSUSE evergreen | = 11.4 | No fix listed |
| opensuse | = 13.1 | No fix listed |
| SUSE linux enterprise desktop | = 12 | No fix listed |
| SUSE linux enterprise real time extension | = 11-sp3 | No fix listed |
| SUSE linux enterprise server | = 10-sp4 | No fix listed |
| SUSE linux enterprise server | = 11-sp1 | No fix listed |
| SUSE linux enterprise server | = 11-sp2 | No fix listed |
| SUSE linux enterprise server | = 12 | No fix listed |
| SUSE linux enterprise software development kit | = 12 | No fix listed |
| SUSE linux enterprise workstation extension | = 12 | No fix listed |
| debian linux | = 7.0 | No fix listed |
| debian linux | = 8.0 | No fix listed |
| Canonical Ubuntu Linux | = 10.04 | No fix listed |
| Canonical Ubuntu Linux | = 12.04 | No fix listed |
| Canonical Ubuntu Linux | = 14.04 | No fix listed |
| Canonical Ubuntu Linux | = 14.10 | No fix listed |
| oracle linux | = 5 | No fix listed |
References
- Ubuntu CVE tracker vendor-advisory
- USN-2511-1 vendor-advisory
- USN-2512-1 vendor-advisory
- USN-2513-1 vendor-advisory
- USN-2514-1 vendor-advisory
- USN-2515-1 vendor-advisory
- USN-2516-1 vendor-advisory
- USN-2517-1 vendor-advisory
- USN-2518-1 vendor-advisory
- www.cve.org
- Debian Security Tracker CVE-2014-9584 vendor-advisory
- git.kernel.org
- SUSE-SU-2015:0481 mailing-list third-party-advisory vendor-advisory
- SUSE-SU-2015:0529 mailing-list third-party-advisory vendor-advisory
- openSUSE-SU-2015:0566 mailing-list third-party-advisory vendor-advisory
- SUSE-SU-2015:0652 mailing-list third-party-advisory vendor-advisory
- openSUSE-SU-2015:0714 mailing-list third-party-advisory vendor-advisory
- SUSE-SU-2015:0736 mailing-list third-party-advisory vendor-advisory
- SUSE-SU-2015:0812 mailing-list third-party-advisory vendor-advisory
- RHSA-2015:0864 third-party-advisory vendor-advisory
- RHSA-2015:1137 third-party-advisory vendor-advisory
- RHSA-2015:1138 third-party-advisory vendor-advisory
- DSA-3128 third-party-advisory vendor-advisory
- www.kernel.org vendor-advisory
- MDVSA-2015:058 third-party-advisory vendor-advisory
- [oss-security] 20150109 Re: CVE request Linux kernel: isofs: unchecked printing of ER records mailing-list third-party-advisory
- www.oracle.com third-party-advisory
- 71883 third-party-advisory vdb-entry
- USN-2511-1 third-party-advisory vendor-advisory
- USN-2512-1 third-party-advisory vendor-advisory
- USN-2513-1 third-party-advisory vendor-advisory
- USN-2514-1 third-party-advisory vendor-advisory
- USN-2515-1 third-party-advisory vendor-advisory
- USN-2516-1 third-party-advisory vendor-advisory
- USN-2517-1 third-party-advisory vendor-advisory
- USN-2518-1 third-party-advisory vendor-advisory
- bugzilla.redhat.com issue-tracking third-party-advisory
- github.com patch third-party-advisory