Linux Kernel Buffer Overflow in hfs_cat_find_brec() Lets Local Users Deny Service
|
|
SecurityTracker Alert ID: 1021230
|
|
SecurityTracker URL: http://securitytracker.com/id?1021230
|
|
CVE Reference: CVE-2008-5025
(Links to External Site)
|
Date: Nov 14 2008
|
Impact: Denial of service via local system
|
Fix Available: Yes
Vendor Confirmed: Yes
|
Version(s): 2.6 prior to 2.6.27.6
|
Description: A vulnerability was reported in the Linux Kernel. A local user can cause denial of service conditions.
A local user can create a specially crafted HFS filesystem catalog name to trigger a buffer overflow in hfs_cat_find_brec() and corrupt the stack.
|
Impact: A local user can cause the target system to crash.
|
Solution: The vendor has issued a fix (2.6.27.6).
The vendor's advisory is available at:
http://kernel.org/pub/linux/kernel/v2.6/ChangeLog-2.6.27.6
|
Vendor URL: www.kernel.org/ (Links to External Site)
|
Cause: Boundary error
|
Underlying OS: Linux (Caldera/SCO), Linux (Conectiva), Linux (Debian), Linux (EnGarde), Linux (Gentoo), Linux (HP Secure OS), Linux (Immunix), Linux (Mandriva/Mandrake), Linux (Progeny Debian), Linux (Red Hat Enterprise), Linux (Red Hat Fedora), Linux (Red Hat Linux), Linux (SGI), Linux (Slackware), Linux (Sun), Linux (SuSE), Linux (Trustix), Linux (Turbo Linux), Linux (Ubuntu), Linux (Xandros)
|
|
Message History:
This archive entry has one or more follow-up message(s) listed below.
|
Source Message Contents
|
Date: Fri, 14 Nov 2008 08:29:11 -0500
Subject: Linux Kernel
|
http://kernel.org/pub/linux/kernel/v2.6/ChangeLog-2.6.27.6
CVE-2008-5025
|
|
