CVE-2014-5472

CVSS v2.0 4 (Medium)

EPSS 0.04 % (11^th)

Affected Products 1

Advisories 21

The parse_rock_ridge_inode_internal function in fs/isofs/rock.c in the Linux kernel through 3.16.1 allows local users to cause a denial of service (unkillable mount process) via a crafted iso9660 image with a self-referential CL entry.

Weaknesses

CWE-20: Improper Input Validation

CVE Status: PUBLISHED
CNA: MITRE
Published Date: 2014-09-01 01:55:28
(10 years ago)
Updated Date: 2023-11-07 02:20:50
(10 months ago)

Affected Products

Linux

Linux Kernel

Configuration #1

		CPE23	From	Up To
	Linux Kernel 3.16.1 and prior versions	cpe:2.3:o:linux:linux_kernel		<= 3.16.1
	Linux Kernel 3.16.0	cpe:2.3:o:linux:linux_kernel:3.16.0