CVE-2014-6410
First published: Mon Sep 15 2014(Updated: )
A stack overflow flaw caused by infinite recursion was found in the way the Linux kernel's Universal Disk Format (UDF) file system implementation processed indirect Information Control Blocks (ICBs). An attacker with physical access to the system could use a specially crafted UDF image to crash the system.
Credit: cve@mitre.org cve@mitre.org
| Affected Software | Affected Version | How to fix |
|---|---|---|
| redhat/kernel | <0:2.6.32-504.3.3.el6 | 0:2.6.32-504.3.3.el6 |
| redhat/kernel | <0:3.10.0-123.13.1.el7 | 0:3.10.0-123.13.1.el7 |
| redhat/kernel-rt | <0:3.10.33-rt32.51.el6 | 0:3.10.33-rt32.51.el6 |
| Linux Linux kernel | <=3.16.3 | |
| Linux Linux kernel | =3.16.0 | |
| Linux Linux kernel | =3.16.1 | |
| Linux Linux kernel | =3.16.2 | |
| debian/linux | 5.10.223-1 5.10.226-1 6.1.115-1 6.1.119-1 6.11.10-1 | |
| <=3.16.3 | ||
| =3.16.0 | ||
| =3.16.1 | ||
| =3.16.2 |
Never miss a vulnerability like this again
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
Reference Links
- https://www.cve.org/CVERecord?id=CVE-2014-6410 https://nvd.nist.gov/vuln/detail/CVE-2014-6410
- https://bugzilla.redhat.com/show_bug.cgi?id=1141809
- https://access.redhat.com/errata/RHSA-2014:1997
- https://access.redhat.com/errata/RHSA-2014:1971
- https://access.redhat.com/errata/RHSA-2014:1318
- https://access.redhat.com/security/cve/CVE-2014-6410
- http://git.kernel.org/?p=linux/kernel/git/torvalds/linux-2.6.git;a=commit;h=c03aa9f6e1f938618e6db2e23afef0574efeeb65
- http://lists.opensuse.org/opensuse-security-announce/2014-10/msg00006.html
- http://lists.opensuse.org/opensuse-security-announce/2014-10/msg00007.html
- http://marc.info/?l=bugtraq&m=142722450701342&w=2
- http://marc.info/?l=bugtraq&m=142722544401658&w=2
- http://rhn.redhat.com/errata/RHSA-2014-1318.html
- http://www.openwall.com/lists/oss-security/2014/09/15/9
- http://www.securityfocus.com/bid/69799
- http://www.ubuntu.com/usn/USN-2374-1
- http://www.ubuntu.com/usn/USN-2375-1
- http://www.ubuntu.com/usn/USN-2376-1
- http://www.ubuntu.com/usn/USN-2377-1
- http://www.ubuntu.com/usn/USN-2378-1
- http://www.ubuntu.com/usn/USN-2379-1
- https://github.com/torvalds/linux/commit/c03aa9f6e1f938618e6db2e23afef0574efeeb65
- http://marc.info/?l=bugtraq&m=142722544401658&w=2
- http://marc.info/?l=bugtraq&m=142722450701342&w=2
- https://launchpad.net/bugs/cve/CVE-2014-6410
- https://git.kernel.org/linus/c03aa9f6e1f938618e6db2e23afef0574efeeb65
- http://seclists.org/oss-sec/2014/q3/600
- https://bugzilla.redhat.com/show_bug.cgi/show_bug.cgi?id=1141810
- http://seclists.org/oss-sec/2014/q3/606
- http://pkgs.fedoraproject.org/cgit/kernel.git/commit/?h=f20&id=52720ac370a759fa09dcd86768a5413a5ed3f9cf
- https://rhn.redhat.com/errata/RHSA-2014-1318.html
- https://rhn.redhat.com/errata/RHSA-2014-1971.html
- https://rhn.redhat.com/errata/RHSA-2014-1997.html
- http://git.kernel.org/?p=linux/kernel/git/torvalds/linux-2.6.git%3Ba=commit%3Bh=c03aa9f6e1f938618e6db2e23afef0574efeeb65
- https://git.kernel.org/cgit/linux/kernel/git/torvalds/linux.git/commit/?id=c03aa9f6e1f938618e6db2e23afef0574efeeb65
- https://security-tracker.debian.org/tracker/CVE-2014-6410
- https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-6410
- https://nvd.nist.gov/vuln/detail/CVE-2014-6410
- https://ubuntu.com/security/CVE-2014-6410
Parent vulnerabilities
(Appears in the following advisories)
- collector/redhat-cve
- collector/nvd-index
- agent/type
- agent/remedy
- agent/first-publish-date
- collector/launchpad-cve
- source/Launchpad
- collector/redhat-bugzilla
- source/Red Hat
- alias/CVE-2014-6410
- agent/author
- collector/nvd-cve
- source/NVD
- agent/software-canonical-lookup
- agent/severity
- agent/weakness
- collector/mitre-cve
- source/MITRE
- agent/last-modified-date
- collector/usn-cve
- source/Ubuntu
- agent/references
- agent/description
- agent/softwarecombine
- agent/tags
- agent/event
- collector/security-tracker-debian
- source/Debian
- package-manager/redhat
- vendor/linux
- canonical/linux linux kernel
- version/linux linux kernel/3.16.3
- version/linux linux kernel/3.16.0
- version/linux linux kernel/3.16.1
- version/linux linux kernel/3.16.2
- package-manager/debian