Wind River Support Network

HomeDefectsLIN5-19987
Fixed

LIN5-19987 : Security Advisory - linux - CVE-2014-9584

Created: Jan 14, 2015    Updated: Dec 19, 2017
Resolved Date: Feb 27, 2015
Found In Version: 5.0.1.23
Fix Version: 5.0.1.24
Severity: Standard
Applicable for: Wind River Linux 5
Component/s: Kernel

Description

The parse_rock_ridge_inode_internal function in fs/isofs/rock.c in the Linux kernel before 3.18.2 does not validate a length value in the Extensions Reference (ER) System Use Field, which allows local users to obtain sensitive information from kernel memory via a crafted iso9660 image.

http://web.nvd.nist.gov/view/vuln/detail?vulnId=CVE-2014-9584

Other Downloads


Live chat
Online