Buffer overflow in the hfsplus_find_cat function in fs/hfsplus/catalog.c in the Linux kernel before 2.6.28-rc1 allows attackers to cause a denial of service (memory corruption or system crash) via an hfsplus filesystem image with an invalid catalog namelength field, related to the hfsplus_cat_build_key_uni function.
CVSS Details
- CVSS 3.1 Base Score: 6.2
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Centos_linux | — | Upgrade kernel-hugememUpgrade kernel-smp-develUpgrade kernel-xenU-develUpgrade kernel-smpUpgrade kernel-docUpgrade kernelUpgrade kernel-xenUUpgrade kernel-develUpgrade kernel-hugemem-devel | Dec 1, 2016 | Nov 5, 2008 |
| Oracle_linux | — | Upgrade kernel | Oct 16, 2024 | Nov 5, 2008 |
| Suse | — | Upgrade kernel-ppc64Upgrade kernel-sourceUpgrade kernel-ps3Upgrade kernel-rtUpgrade kernel-vanillaUpgrade kernel-debugUpgrade kernel-kdumpUpgrade kernel-paeUpgrade kernel-symsUpgrade kernel-xenUpgrade kernel-docsUpgrade kernel-defaultUpgrade kernel-rt_debugUpgrade kernel-bigsmpUpgrade kernel-xenpae | Feb 17, 2015 | Nov 5, 2008 |
| Ubuntu | — | Upgrade linux-image-2.6.22-16-powerpcUpgrade linux-image-2.6.22-16-powerpc-smpUpgrade linux-image-2.6.24-22-openvzUpgrade linux-image-2.6.15-53-hppa32-smpUpgrade linux-image-2.6.27-9-serverUpgrade linux-image-2.6.15-53-hppa32Upgrade linux-image-2.6.22-16-serverUpgrade linux-image-2.6.24-22-powerpcUpgrade linux-image-2.6.22-16-sparc64Upgrade linux-image-2.6.24-22-virtualUpgrade linux-image-2.6.15-53-hppa64-smpUpgrade linux-image-2.6.22-16-lpiacompatUpgrade linux-image-2.6.15-53-686Upgrade linux-image-2.6.22-16-hppa64Upgrade linux-image-2.6.22-16-386Upgrade linux-image-2.6.27-9-genericUpgrade linux-image-2.6.27-9-virtualUpgrade linux-image-2.6.15-53-mckinley-smpUpgrade linux-image-2.6.15-53-powerpc64-smpUpgrade linux-image-2.6.15-53-server-bigironUpgrade linux-image-2.6.15-53-powerpc-smpUpgrade linux-image-2.6.15-53-itaniumUpgrade linux-image-2.6.24-22-sparc64-smpUpgrade linux-image-2.6.22-16-umeUpgrade linux-image-2.6.15-53-amd64-genericUpgrade linux-image-2.6.24-22-xenUpgrade linux-image-2.6.22-16-virtualUpgrade linux-image-2.6.24-22-genericUpgrade linux-image-2.6.24-22-lpiaUpgrade linux-image-2.6.24-22-mckinleyUpgrade linux-image-2.6.15-53-powerpcUpgrade linux-image-2.6.15-53-amd64-xeonUpgrade linux-image-2.6.22-16-mckinleyUpgrade linux-image-2.6.15-53-mckinleyUpgrade linux-image-2.6.24-22-serverUpgrade linux-image-2.6.22-16-genericUpgrade linux-image-2.6.22-16-rtUpgrade linux-image-2.6.24-22-sparc64Upgrade linux-image-2.6.22-16-powerpc64-smpUpgrade linux-image-2.6.15-53-amd64-serverUpgrade linux-image-2.6.24-22-rtUpgrade linux-image-2.6.15-53-serverUpgrade linux-image-2.6.24-22-lpiacompatUpgrade linux-image-2.6.22-16-hppa32Upgrade linux-image-2.6.24-22-itaniumUpgrade linux-image-2.6.24-22-hppa64Upgrade linux-image-2.6.22-16-itaniumUpgrade linux-image-2.6.24-22-386Upgrade linux-image-2.6.15-53-386Upgrade linux-image-2.6.15-53-sparc64-smpUpgrade linux-image-2.6.24-22-hppa32Upgrade linux-image-2.6.22-16-xenUpgrade linux-image-2.6.15-53-sparc64Upgrade linux-image-2.6.22-16-lpiaUpgrade linux-image-2.6.15-53-k7Upgrade linux-image-2.6.22-16-sparc64-smpUpgrade linux-image-2.6.15-53-hppa64Upgrade linux-image-2.6.15-53-amd64-k8Upgrade linux-image-2.6.15-53-itanium-smpUpgrade linux-image-2.6.22-16-cellUpgrade linux-image-2.6.24-22-powerpc64-smpUpgrade linux-image-2.6.24-22-powerpc-smp | Nov 8, 2024 | Nov 5, 2008 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub