Off-by-one error in the ecryptfs_decode_from_filename function in fs/ecryptfs/crypto.c in the eCryptfs subsystem in the Linux kernel before 3.18.2 allows local users to cause a denial of service (buffer overflow and system crash) or possibly gain privileges via a crafted filename.
CVSS Details
- CVSS 3.1 Base Score: 7.8
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Debian | — | Upgrade linux | Jul 30, 2024 | Mar 3, 2015 |
| Oracle_linux | — | Upgrade kernelUpgrade kernel-uek | Oct 16, 2024 | Mar 3, 2015 |
| Suse | — | Upgrade kernel-docsUpgrade kernel-default | Dec 18, 2015 | Mar 3, 2015 |
| Ubuntu | — | Upgrade linux-image-3.13.0-46-powerpc64-smpUpgrade linux-image-3.2.0-79-virtualUpgrade linux-image-3.16.0-31-generic-lpaeUpgrade linux-image-3.2.0-79-omapUpgrade linux-image-3.16.0-31-lowlatencyUpgrade linux-image-3.13.0-46-powerpc-e500Upgrade linux-image-3.13.0-46-lowlatencyUpgrade linux-image-3.2.0-79-genericUpgrade linux-image-3.2.0-79-powerpc-smpUpgrade linux-image-3.2.0-79-powerpc64-smpUpgrade linux-image-3.13.0-46-powerpc-e500mcUpgrade linux-image-3.2.0-79-highbankUpgrade linux-image-3.2.0-79-generic-paeUpgrade linux-image-3.16.0-31-powerpc-e500mcUpgrade linux-image-3.16.0-31-powerpc64-smpUpgrade linux-image-3.16.0-31-powerpc-smpUpgrade linux-image-3.16.0-31-genericUpgrade linux-image-3.13.0-46-powerpc-smpUpgrade linux-image-3.13.0-46-generic-lpaeUpgrade linux-image-3.16.0-31-powerpc64-embUpgrade linux-image-3.13.0-46-genericUpgrade linux-image-3.13.0-46-powerpc64-embUpgrade linux-image-3.2.0-1461-omap4 | Nov 8, 2024 | Mar 3, 2015 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub