CVE-2014-0004: Buffer Overflow
Published Mar 11, 2014
·Updated
Stack-based buffer overflow in udisks before 1.0.5 and 2.x before 2.1.3 allows local users to cause a denial of service (crash) and possibly execute arbitrary code via a long mount point.
Affected Software
14 affected components
Freedesktop udisks<=1.0.4
Freedesktop udisks=1.0
Freedesktop udisks=1.0.1
Freedesktop udisks=2.0.0
Freedesktop udisks=2.0.1
Freedesktop udisks=2.0.90
Freedesktop udisks=2.0.91
Freedesktop udisks=2.0.92
Freedesktop udisks=2.1.0
Freedesktop udisks=2.1.1
Freedesktop udisks=2.1.2
Canonical Ubuntu Linux=12.04
Canonical Ubuntu Linux=12.10
Canonical Ubuntu Linux=13.10
Remediation
Event History
Mar 11, 2014
CVE Published
via MITRE·03:00 PM
Data Sourced
via MITRE·03:00 PM
Description
Data Sourced
via NVD·07:37 PM
RemedyDescriptionSeverityWeaknessAffected Software
Frequently Asked Questions
1
What is the severity of CVE-2014-0004?
CVE-2014-0004 is classified as a high-severity vulnerability due to its potential to cause denial of service and execute arbitrary code.
2
How do I fix CVE-2014-0004?
To mitigate CVE-2014-0004, update to UDisks version 1.0.5 or later, or 2.1.3 or later.
3
Who is affected by CVE-2014-0004?
CVE-2014-0004 affects local users of UDisks versions before 1.0.5 and 2.x before 2.1.3.
4
What types of attacks are possible with CVE-2014-0004?
CVE-2014-0004 allows attackers to exploit a stack-based buffer overflow to crash the UDisks service or potentially execute arbitrary code.
5
Is CVE-2014-0004 present in Ubuntu distributions?
Yes, CVE-2014-0004 can be found in various Ubuntu Linux versions including 12.04, 12.10, and 13.10.