Stack-based buffer overflow in the hfs_mac2asc function in fs/hfs/trans.c in the Linux kernel 2.6 allows local users to cause a denial of service (crash) and possibly execute arbitrary code via an HFS image with a crafted len field.
CVSS Details
- CVSS 3.1 Base Score: 7.8
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Centos_linux | — | Upgrade kernel-xen-develUpgrade kernel-PAE-develUpgrade kernel-develUpgrade kernel-docUpgrade kernel-headersUpgrade kernel-debugUpgrade kernel-debug-develUpgrade kernel-PAEUpgrade kernel-xenUpgrade kernel | Dec 1, 2016 | Jan 27, 2012 |
| Oracle_linux | — | Upgrade kernel | Oct 16, 2024 | Jan 27, 2012 |
| Suse | — | Upgrade ocfs2-kmp-rtUpgrade kernel-defaultUpgrade kernel-bigsmpUpgrade kernel-source-rtUpgrade kernel-xenUpgrade kernel-syms-rtUpgrade ocfs2-kmp-rt_traceUpgrade cluster-network-kmp-rt_traceUpgrade kernel-xenpaeUpgrade kernel-rt_traceUpgrade brocade-bna-kmp-rtUpgrade kernel-rt_trace-baseUpgrade kernel-kdumppaeUpgrade kernel-kdumpUpgrade kernel-rtUpgrade kernel-smpUpgrade kernel-debugUpgrade drbd-kmp-rt_traceUpgrade kernel-ppc64Upgrade drbd-kmp-rtUpgrade iscsitarget-kmp-rtUpgrade kernel-vmipaeUpgrade cluster-network-kmp-rtUpgrade kernel-rt-baseUpgrade kernel-rt-develUpgrade kernel-rt_trace-develUpgrade kernel-vmiUpgrade ofed-kmp-rtUpgrade kernel-sourceUpgrade kernel-iseries64Upgrade SUSE-Linux-Enterprise-RT-releaseUpgrade kernel-syms | Feb 17, 2015 | Jan 27, 2012 |
| Ubuntu | — | Upgrade linux-image-2.6.38-13-virtualUpgrade linux-image-2.6.24-30-386Upgrade linux-image-2.6.32-37-sparc64-smpUpgrade linux-image-2.6.35-31-serverUpgrade linux-image-3.0.0-1206-omap4Upgrade linux-image-2.6.35-31-virtualUpgrade linux-image-2.6.32-37-powerpcUpgrade linux-image-2.6.24-30-sparc64Upgrade linux-image-2.6.24-30-powerpcUpgrade linux-image-2.6.32-37-virtualUpgrade linux-image-2.6.24-30-powerpc64-smpUpgrade linux-image-2.6.24-30-openvzUpgrade linux-image-2.6.24-30-rtUpgrade linux-image-2.6.24-30-sparc64-smpUpgrade linux-image-3.0.0-15-virtualUpgrade linux-image-2.6.24-30-itaniumUpgrade linux-image-2.6.32-37-386Upgrade linux-image-2.6.35-31-generic-paeUpgrade linux-image-2.6.24-30-lpiaUpgrade linux-image-2.6.35-31-powerpcUpgrade linux-image-2.6.32-37-preemptUpgrade linux-image-2.6.32-37-sparc64Upgrade linux-image-2.6.38-13-serverUpgrade linux-image-2.6.24-30-mckinleyUpgrade linux-image-3.0.0-15-powerpc-smpUpgrade linux-image-2.6.35-31-genericUpgrade linux-image-3.0.0-15-serverUpgrade linux-image-2.6.35-31-omapUpgrade linux-image-2.6.32-37-genericUpgrade linux-image-2.6.38-13-versatileUpgrade linux-image-2.6.38-13-genericUpgrade linux-image-2.6.38-1209-omap4Upgrade linux-image-2.6.35-31-powerpc64-smpUpgrade linux-image-2.6.24-30-virtualUpgrade linux-image-2.6.24-30-lpiacompatUpgrade linux-image-2.6.38-13-omapUpgrade linux-image-2.6.31-612-imx51Upgrade linux-image-2.6.32-37-lpiaUpgrade linux-image-2.6.24-30-hppa32Upgrade linux-image-2.6.38-13-powerpc-smpUpgrade linux-image-2.6.32-37-powerpc64-smpUpgrade linux-image-3.0.0-15-powerpcUpgrade linux-image-2.6.38-13-powerpcUpgrade linux-image-2.6.32-37-versatileUpgrade linux-image-2.6.38-13-generic-paeUpgrade linux-image-3.0.0-15-powerpc64-smpUpgrade linux-image-2.6.32-341-ec2Upgrade linux-image-2.6.32-37-ia64Upgrade linux-image-2.6.35-31-powerpc-smpUpgrade linux-image-2.6.24-30-serverUpgrade linux-image-2.6.24-30-hppa64Upgrade linux-image-2.6.38-13-powerpc64-smpUpgrade linux-image-2.6.35-31-versatileUpgrade linux-image-2.6.32-37-generic-paeUpgrade linux-image-3.0.0-15-omapUpgrade linux-image-2.6.35-903-omap4Upgrade linux-image-2.6.32-37-powerpc-smpUpgrade linux-image-3.0.0-15-genericUpgrade linux-image-2.6.32-421-doveUpgrade linux-image-2.6.24-30-genericUpgrade linux-image-2.6.24-30-powerpc-smpUpgrade linux-image-3.0.0-15-generic-paeUpgrade linux-image-2.6.32-37-serverUpgrade linux-image-2.6.24-30-xen | Nov 8, 2024 | Jan 27, 2012 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub