Stack-based buffer overflow in the hfs_mac2asc function in fs/hfs/trans.c in the Linux kernel 2.6 allows local users to cause a denial of service (crash) and possibly execute arbitrary code via an HFS image with a crafted len field.
CVSS Details
- CVSS 3.1 Base Score: 7.8
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Centos_linux | — | Upgrade kernelUpgrade kernel-xenUpgrade kernel-PAEUpgrade kernel-xen-develUpgrade kernel-develUpgrade kernel-docUpgrade kernel-debug-develUpgrade kernel-debugUpgrade kernel-PAE-develUpgrade kernel-headers | Dec 1, 2016 | Jan 27, 2012 |
| Oracle_linux | — | Upgrade kernel | Oct 16, 2024 | Jan 27, 2012 |
| Suse | — | Upgrade kernel-debugUpgrade kernel-rt_trace-develUpgrade iscsitarget-kmp-rtUpgrade kernel-kdumpUpgrade kernel-rt_trace-baseUpgrade kernel-iseries64Upgrade drbd-kmp-rt_traceUpgrade kernel-symsUpgrade kernel-ppc64Upgrade SUSE-Linux-Enterprise-RT-releaseUpgrade kernel-smpUpgrade kernel-rt-baseUpgrade drbd-kmp-rtUpgrade kernel-rtUpgrade kernel-vmipaeUpgrade cluster-network-kmp-rtUpgrade ofed-kmp-rtUpgrade kernel-rt-develUpgrade kernel-vmiUpgrade kernel-kdumppaeUpgrade kernel-sourceUpgrade cluster-network-kmp-rt_traceUpgrade kernel-bigsmpUpgrade kernel-syms-rtUpgrade kernel-xenpaeUpgrade kernel-source-rtUpgrade kernel-defaultUpgrade ocfs2-kmp-rt_traceUpgrade kernel-xenUpgrade brocade-bna-kmp-rtUpgrade kernel-rt_traceUpgrade ocfs2-kmp-rt | Feb 17, 2015 | Jan 27, 2012 |
| Ubuntu | — | Upgrade linux-image-2.6.35-31-powerpc64-smpUpgrade linux-image-2.6.24-30-itaniumUpgrade linux-image-2.6.38-13-versatileUpgrade linux-image-2.6.24-30-powerpcUpgrade linux-image-3.0.0-15-powerpc-smpUpgrade linux-image-2.6.35-31-omapUpgrade linux-image-2.6.38-13-virtualUpgrade linux-image-2.6.24-30-386Upgrade linux-image-3.0.0-15-serverUpgrade linux-image-2.6.24-30-lpiaUpgrade linux-image-2.6.24-30-sparc64-smpUpgrade linux-image-2.6.32-37-preemptUpgrade linux-image-2.6.24-30-rtUpgrade linux-image-2.6.35-31-generic-paeUpgrade linux-image-2.6.24-30-openvzUpgrade linux-image-2.6.38-1209-omap4Upgrade linux-image-2.6.35-31-serverUpgrade linux-image-3.0.0-15-virtualUpgrade linux-image-2.6.24-30-powerpc64-smpUpgrade linux-image-2.6.24-30-mckinleyUpgrade linux-image-2.6.32-37-sparc64Upgrade linux-image-2.6.35-31-genericUpgrade linux-image-2.6.32-37-sparc64-smpUpgrade linux-image-2.6.32-37-genericUpgrade linux-image-2.6.32-37-386Upgrade linux-image-2.6.32-37-powerpcUpgrade linux-image-2.6.24-30-sparc64Upgrade linux-image-2.6.35-31-virtualUpgrade linux-image-2.6.32-37-virtualUpgrade linux-image-2.6.38-13-serverUpgrade linux-image-2.6.38-13-genericUpgrade linux-image-2.6.35-31-powerpcUpgrade linux-image-3.0.0-1206-omap4Upgrade linux-image-2.6.24-30-powerpc-smpUpgrade linux-image-2.6.35-903-omap4Upgrade linux-image-2.6.24-30-lpiacompatUpgrade linux-image-2.6.24-30-hppa32Upgrade linux-image-2.6.32-37-lpiaUpgrade linux-image-2.6.24-30-xenUpgrade linux-image-3.0.0-15-generic-paeUpgrade linux-image-2.6.32-37-serverUpgrade linux-image-2.6.24-30-virtualUpgrade linux-image-2.6.38-13-powerpc64-smpUpgrade linux-image-2.6.24-30-hppa64Upgrade linux-image-3.0.0-15-omapUpgrade linux-image-2.6.32-37-generic-paeUpgrade linux-image-2.6.38-13-omapUpgrade linux-image-2.6.35-31-powerpc-smpUpgrade linux-image-2.6.32-341-ec2Upgrade linux-image-2.6.38-13-generic-paeUpgrade linux-image-2.6.32-37-powerpc64-smpUpgrade linux-image-2.6.24-30-genericUpgrade linux-image-2.6.24-30-serverUpgrade linux-image-3.0.0-15-powerpc64-smpUpgrade linux-image-2.6.32-37-ia64Upgrade linux-image-2.6.31-612-imx51Upgrade linux-image-3.0.0-15-genericUpgrade linux-image-2.6.38-13-powerpc-smpUpgrade linux-image-2.6.32-37-versatileUpgrade linux-image-2.6.38-13-powerpcUpgrade linux-image-2.6.32-37-powerpc-smpUpgrade linux-image-3.0.0-15-powerpcUpgrade linux-image-2.6.32-421-doveUpgrade linux-image-2.6.35-31-versatile | Nov 8, 2024 | Jan 27, 2012 |
Prioritize with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub