CVE-2012-2319: Buffer Overflow
Last updated 24 July 2024
Other sources
Multiple buffer overflows in the hfsplus filesystem implementation in the Linux kernel before 3.3.5 allow local users to gain privileges via a crafted HFS plus filesystem, a related issue to CVE-2009-4020.
— Launchpad
Previously Common Vulnerabilities and Exposures assigned an identifier of CVE-2009-4020 to the following vulnerability:
Stack-based buffer overflow in the hfs subsystem in the Linux kernel 2.6.32 allows remote attackers to have an unspecified impact via a crafted Hierarchical File System (HFS) filesystem, related to the hfsreaddir function in fs/hfs/dir.c.
Recently: [1] http://www.openwall.com/lists/oss-security/2012/05/07/3
Timo Warns pointed out similar flaws exists in the HFS plus file system.
Relevant upstream patch: [2] http://git.kernel.org/?p=linux/kernel/git/torvalds/linux-2.6.git;a=commitdiff;h=6f24f892871acc47b40dd594c63606a17c714f77
— Red Hat
Affected Software
Remediation
Event History
Frequently Asked Questions
What is the severity of CVE-2012-2319?
CVE-2012-2319 has been classified as a high severity vulnerability due to its potential to allow local users to gain elevated privileges.
How do I fix CVE-2012-2319?
To fix CVE-2012-2319, update the Linux kernel to version 3.3.5 or later.
Which versions of Linux are affected by CVE-2012-2319?
CVE-2012-2319 affects Linux kernel versions prior to 3.3.5.
Is CVE-2012-2319 related to any other vulnerabilities?
Yes, CVE-2012-2319 is related to CVE-2009-4020, as both involve vulnerabilities in the hfsplus filesystem.
Who can exploit CVE-2012-2319?
CVE-2012-2319 can be exploited by local users with access to a crafted HFS plus filesystem.