Buffer overflow in the hfsplus_find_cat function in fs/hfsplus/catalog.c in the Linux kernel before 2.6.28-rc1 allows attackers to cause a denial of service (memory corruption or system crash) via an hfsplus filesystem image with an invalid catalog namelength field, related to the hfsplus_cat_build_key_uni function.
CVSS Details
- CVSS 3.1 Base Score: 6.2
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Centos_linux | — | Upgrade kernelUpgrade kernel-smp-develUpgrade kernel-xenU-develUpgrade kernel-hugememUpgrade kernel-smpUpgrade kernel-docUpgrade kernel-hugemem-develUpgrade kernel-develUpgrade kernel-xenU | Dec 1, 2016 | Nov 5, 2008 |
| Oracle_linux | — | Upgrade kernel | Oct 16, 2024 | Nov 5, 2008 |
| Suse | — | Upgrade kernel-sourceUpgrade kernel-ps3Upgrade kernel-ppc64Upgrade kernel-rtUpgrade kernel-bigsmpUpgrade kernel-docsUpgrade kernel-vanillaUpgrade kernel-defaultUpgrade kernel-xenpaeUpgrade kernel-symsUpgrade kernel-paeUpgrade kernel-debugUpgrade kernel-kdumpUpgrade kernel-xenUpgrade kernel-rt_debug | Feb 17, 2015 | Nov 5, 2008 |
| Ubuntu | — | Upgrade linux-image-2.6.15-53-hppa32Upgrade linux-image-2.6.27-9-serverUpgrade linux-image-2.6.22-16-powerpc-smpUpgrade linux-image-2.6.15-53-powerpc64-smpUpgrade linux-image-2.6.15-53-hppa32-smpUpgrade linux-image-2.6.15-53-amd64-genericUpgrade linux-image-2.6.22-16-umeUpgrade linux-image-2.6.24-22-openvzUpgrade linux-image-2.6.24-22-xenUpgrade linux-image-2.6.22-16-sparc64Upgrade linux-image-2.6.24-22-virtualUpgrade linux-image-2.6.15-53-mckinley-smpUpgrade linux-image-2.6.27-9-genericUpgrade linux-image-2.6.24-22-genericUpgrade linux-image-2.6.24-22-mckinleyUpgrade linux-image-2.6.24-22-lpiaUpgrade linux-image-2.6.22-16-lpiacompatUpgrade linux-image-2.6.15-53-686Upgrade linux-image-2.6.22-16-386Upgrade linux-image-2.6.22-16-hppa64Upgrade linux-image-2.6.22-16-serverUpgrade linux-image-2.6.15-53-hppa64-smpUpgrade linux-image-2.6.15-53-server-bigironUpgrade linux-image-2.6.22-16-virtualUpgrade linux-image-2.6.15-53-powerpc-smpUpgrade linux-image-2.6.15-53-itaniumUpgrade linux-image-2.6.24-22-powerpcUpgrade linux-image-2.6.24-22-sparc64-smpUpgrade linux-image-2.6.27-9-virtualUpgrade linux-image-2.6.22-16-powerpcUpgrade linux-image-2.6.15-53-amd64-serverUpgrade linux-image-2.6.24-22-hppa64Upgrade linux-image-2.6.24-22-itaniumUpgrade linux-image-2.6.15-53-itanium-smpUpgrade linux-image-2.6.24-22-lpiacompatUpgrade linux-image-2.6.15-53-sparc64Upgrade linux-image-2.6.24-22-386Upgrade linux-image-2.6.15-53-amd64-k8Upgrade linux-image-2.6.22-16-itaniumUpgrade linux-image-2.6.15-53-powerpcUpgrade linux-image-2.6.22-16-hppa32Upgrade linux-image-2.6.22-16-rtUpgrade linux-image-2.6.22-16-mckinleyUpgrade linux-image-2.6.15-53-sparc64-smpUpgrade linux-image-2.6.22-16-genericUpgrade linux-image-2.6.22-16-sparc64-smpUpgrade linux-image-2.6.22-16-powerpc64-smpUpgrade linux-image-2.6.15-53-serverUpgrade linux-image-2.6.22-16-lpiaUpgrade linux-image-2.6.15-53-amd64-xeonUpgrade linux-image-2.6.22-16-xenUpgrade linux-image-2.6.24-22-sparc64Upgrade linux-image-2.6.24-22-powerpc64-smpUpgrade linux-image-2.6.24-22-powerpc-smpUpgrade linux-image-2.6.22-16-cellUpgrade linux-image-2.6.15-53-k7Upgrade linux-image-2.6.15-53-mckinleyUpgrade linux-image-2.6.24-22-rtUpgrade linux-image-2.6.15-53-386Upgrade linux-image-2.6.15-53-hppa64Upgrade linux-image-2.6.24-22-serverUpgrade linux-image-2.6.24-22-hppa32 | Nov 8, 2024 | Nov 5, 2008 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub