Buffer overflow in the fuse_do_ioctl function in fs/fuse/file.c in the Linux kernel before 2.6.37 allows local users to cause a denial of service or possibly have unspecified other impact by leveraging the ability to operate a CUSE server.
CVSS Details
- CVSS 3.1 Base Score: 7.8
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Suse | — | Upgrade kernel-traceUpgrade kernel-syms-rtUpgrade kernel-vanillaUpgrade kernel-vmiUpgrade kernel-rt-baseUpgrade kernel-desktopUpgrade kernel-debug-baseUpgrade brocade-bna-kmp-rtUpgrade ocfs2-kmp-rtUpgrade kernel-sourceUpgrade kernel-xenUpgrade kernel-vmi-baseUpgrade kernel-vmi-develUpgrade kernel-rtUpgrade SUSE-Linux-Enterprise-RT-releaseUpgrade kernel-default-develUpgrade kernel-ec2-develUpgrade kernel-desktop-baseUpgrade kernel-ec2-baseUpgrade kernel-symsUpgrade drbd-kmp-rtUpgrade kernel-pae-baseUpgrade kernel-rt_trace-baseUpgrade cluster-network-kmp-rt_traceUpgrade kernel-desktop-develUpgrade kernel-rt_traceUpgrade kernel-rt_trace-develUpgrade kernel-develUpgrade kernel-source-rtUpgrade kernel-vanilla-baseUpgrade kernel-source-vanillaUpgrade kernel-trace-baseUpgrade kernel-trace-develUpgrade kernel-pae-develUpgrade kernel-defaultUpgrade kernel-debugUpgrade drbd-kmp-rt_traceUpgrade kernel-debug-develUpgrade kernel-xen-develUpgrade kernel-docsUpgrade ofed-kmp-rtUpgrade preload-kmp-defaultUpgrade kernel-vanilla-develUpgrade ocfs2-kmp-rt_traceUpgrade preload-kmp-desktopUpgrade kernel-paeUpgrade kernel-ec2-extraUpgrade kernel-xen-baseUpgrade cluster-network-kmp-rtUpgrade iscsitarget-kmp-rtUpgrade kernel-default-baseUpgrade kernel-rt-develUpgrade kernel-ec2 | Feb 17, 2015 | Jun 21, 2012 |
| Ubuntu | — | Upgrade linux-image-2.6.35-27-genericUpgrade linux-image-2.6.32-29-sparc64Upgrade linux-image-2.6.32-216-doveUpgrade linux-image-2.6.35-30-serverUpgrade linux-image-2.6.35-27-versatileUpgrade linux-image-2.6.35-30-genericUpgrade linux-image-2.6.32-416-doveUpgrade linux-image-2.6.32-29-preemptUpgrade linux-image-2.6.32-29-versatileUpgrade linux-image-2.6.35-27-virtualUpgrade linux-image-2.6.35-27-generic-paeUpgrade linux-image-2.6.35-903-omap4Upgrade linux-image-2.6.32-29-lpiaUpgrade linux-image-2.6.35-27-serverUpgrade linux-image-2.6.35-30-generic-paeUpgrade linux-image-2.6.32-29-powerpcUpgrade linux-image-2.6.35-30-virtualUpgrade linux-image-2.6.35-27-powerpc64-smpUpgrade linux-image-2.6.32-29-386Upgrade linux-image-2.6.35-27-powerpc-smpUpgrade linux-image-2.6.32-313-ec2Upgrade linux-image-2.6.35-27-omapUpgrade linux-image-2.6.32-29-powerpc64-smpUpgrade linux-image-2.6.32-29-powerpc-smpUpgrade linux-image-2.6.32-29-serverUpgrade linux-image-2.6.32-29-virtualUpgrade linux-image-2.6.32-29-generic-paeUpgrade linux-image-2.6.32-29-sparc64-smpUpgrade linux-image-2.6.32-29-ia64Upgrade linux-image-2.6.35-27-powerpcUpgrade linux-image-2.6.32-29-generic | Nov 8, 2024 | Jun 21, 2012 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub