CVE-2015-8872: Medium severity ubuntu vulnerability
The setfat function in fat.c in dosfstools before 4.0 might allow attackers to corrupt a FAT12 filesystem or cause a denial of service (invalid memory read and crash) by writing an odd number of clusters to the third to last entry on a FAT12 filesystem, which triggers an "off-by-two error."
Affected Software
Remediation
Patch Available
Event History
Frequently Asked Questions
What is the severity of CVE-2015-8872?
CVE-2015-8872 is considered a high severity vulnerability due to its potential to cause filesystem corruption and denial of service.
How do I fix CVE-2015-8872?
To fix CVE-2015-8872, upgrade to dosfstools version 4.0 or later.
What systems are affected by CVE-2015-8872?
CVE-2015-8872 affects dosfstools versions up to 3.0.28 on Ubuntu Linux 12.04, 14.04, 15.10, 16.04, and openSUSE 13.2 and 42.1.
What type of attack can be executed using CVE-2015-8872?
CVE-2015-8872 can allow attackers to corrupt a FAT12 filesystem or cause a denial-of-service condition through invalid memory access.
What is the technical detail behind CVE-2015-8872?
CVE-2015-8872 involves an off-by-two error triggered when writing an odd number of clusters to the third to last entry on a FAT12 filesystem.