The udf_read_inode function in fs/udf/inode.c in the Linux kernel before 3.19.1 does not validate certain length values, which allows local users to cause a denial of service (incorrect data representation or integer overflow, and OOPS) via a crafted UDF filesystem.
CVSS Details
- CVSS 3.1 Base Score: 5.5
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Debian | — | Upgrade linux | Jul 30, 2024 | Aug 5, 2015 |
| F5 Big Ip | — | — | Feb 16, 2017 | Aug 5, 2015 |
| Oracle_linux | — | Upgrade kernel-uek-docUpgrade kernel-uek-debugUpgrade kernel-uekUpgrade kernel-uek-debug-develUpgrade kernel-uek-develUpgrade kernel-uek-firmware | Jul 1, 2017 | Aug 5, 2015 |
| Redhat_linux | — | No solution exists | Jul 9, 2025 | Jan 7, 2015 |
| Suse | — | Upgrade kernel-docsUpgrade kernel-ec2-develUpgrade kernel-defaultUpgrade kernel-obs-buildUpgrade kernel-ec2-extraUpgrade kernel-ec2 | Dec 18, 2015 | Jul 31, 2015 |
| Ubuntu | — | Upgrade linux-image-3.16.0-43-powerpc-smpUpgrade linux-image-3.2.0-85-powerpc64-smpUpgrade linux-image-3.2.0-85-powerpc-smpUpgrade linux-image-3.16.0-43-powerpc64-smpUpgrade linux-image-3.16.0-43-lowlatencyUpgrade linux-image-3.16.0-43-powerpc64-embUpgrade linux-image-3.2.0-85-highbankUpgrade linux-image-3.2.0-85-omapUpgrade linux-image-3.13.0-57-powerpc64-smpUpgrade linux-image-3.2.0-85-generic-paeUpgrade linux-image-3.16.0-43-genericUpgrade linux-image-3.13.0-57-powerpc-e500mcUpgrade linux-image-3.2.0-1465-omap4Upgrade linux-image-3.13.0-57-generic-lpaeUpgrade linux-image-3.13.0-57-powerpc-smpUpgrade linux-image-3.16.0-43-generic-lpaeUpgrade linux-image-3.13.0-57-powerpc64-embUpgrade linux-image-3.13.0-57-lowlatencyUpgrade linux-image-3.2.0-85-genericUpgrade linux-image-3.16.0-43-powerpc-e500mcUpgrade linux-image-3.13.0-57-powerpc-e500Upgrade linux-image-3.13.0-57-genericUpgrade linux-image-3.2.0-85-virtual | Nov 8, 2024 | Aug 5, 2015 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub