CVE-2015-8374

CVSS v3.0 4 (Medium)

CVSS v2.0 2.1 (Low)

EPSS 0.14 % (51^th)

Affected Products 1

Advisories 17

fs/btrfs/inode.c in the Linux kernel before 4.3.3 mishandles compressed inline extents, which allows local users to obtain sensitive pre-truncation information from a file via a clone action.

Weaknesses

CWE-200: Exposure of Sensitive Information to an Unauthorized Actor

CVE Status: PUBLISHED
CNA: MITRE
Published Date: 2015-12-28 11:59:05
(8 years ago)
Updated Date: 2018-01-05 02:30:20
(6 years ago)

Affected Products

Linux

Linux Kernel

Configuration #1

		CPE23	From	Up To
	Linux Kernel 4.3.2 and prior versions	cpe:2.3:o:linux:linux_kernel		<= 4.3.2