Direct naar de inhoud
⚡ Kritieke cyberalerts voor jouw sector & systemen — direct in je inbox. Aanmelden →
cybernieuws.nl Cybersecurity en informatiebeveiling nieuws alerts live · 12 min 162 bronnen 10 vandaag
CVE's Videos Dagbriefing

← Terug naar CVE-database

CVE-2014-9584

LOW · 2.1 CVSS Gepubliceerd: CWE-20

Beschrijving

The parse_rock_ridge_inode_internal function in fs/isofs/rock.c in the Linux kernel before 3.18.2 does not validate a length value in the Extensions Reference (ER) System Use Field, which allows local users to obtain sensitive information from kernel memory via a crafted iso9660 image.

Vendors

Linux Redhat Opensuse Suse Debian Canonical Oracle

Affected products

Linux Kernel Enterprise Linux Aus Enterprise Linux Desktop Enterprise Linux Eus Enterprise Linux Server Enterprise Linux Server Aus Enterprise Linux Server Eus Enterprise Linux Server Tus Enterprise Linux Workstation Evergreen Opensuse Linux Enterprise Desktop Linux Enterprise Real Time Extension Linux Enterprise Server Linux Enterprise Software Development Kit Linux Enterprise Workstation Extension Debian Linux Ubuntu Linux Linux

References