7.8

CVE-2008-4934

The hfsplus_block_allocate function in fs/hfsplus/bitmap.c in the Linux kernel before 2.6.28-rc1 does not check a certain return value from the read_mapping_page function before calling kmap, which allows attackers to cause a denial of service (system crash) via a crafted hfsplus filesystem image.
Daten sind bereitgestellt durch National Vulnerability Database (NVD)
Linux ≫ Linux Kernel Version < 2.6.28
Debian ≫ Debian Linux Version4.0
Canonical ≫ Ubuntu Linux Version6.06 SwEditionlts
Canonical ≫ Ubuntu Linux Version7.10
Canonical ≫ Ubuntu Linux Version8.04 SwEditionlts
Canonical ≫ Ubuntu Linux Version8.10
Zu dieser CVE wurde keine Warnung gefunden.
EPSS Metriken
Typ Quelle Score Percentile
EPSS FIRST.org 3.29% 0.869
CVSS Metriken
Quelle Base Score Exploit Score Impact Score Vector String
nvd@nist.gov 7.8 10 6.9
AV:N/AC:L/Au:N/C:N/I:N/A:C
CWE-20 Improper Input Validation

The product receives input or data, but it does not validate or incorrectly validates that the input has the properties that are required to process the data safely and correctly.

http://secunia.com/advisories/32918
Third Party Advisory
http://www.ubuntu.com/usn/usn-679-1
Third Party Advisory
http://secunia.com/advisories/33556
Third Party Advisory
http://www.redhat.com/support/errata/RHSA-2009-0014.html
Patch
Third Party Advisory
http://secunia.com/advisories/32998
Third Party Advisory
http://secunia.com/advisories/33180
Third Party Advisory
http://www.debian.org/security/2008/dsa-1681
Third Party Advisory
http://www.debian.org/security/2008/dsa-1687
Third Party Advisory
http://kernel.org/pub/linux/kernel/v2.6/testing/ChangeLog-2.6.28-rc1
Vendor Advisory
http://rhn.redhat.com/errata/RHSA-2009-0264.html
Third Party Advisory
http://secunia.com/advisories/32510
Third Party Advisory
http://secunia.com/advisories/33858
Third Party Advisory
http://www.mandriva.com/security/advisories?name=MDVSA-2008:234
Third Party Advisory
http://www.openwall.com/lists/oss-security/2008/11/03/2
Third Party Advisory
Mailing List
http://git.kernel.org/?p=linux/kernel/git/stable/linux-2.6.27.y.git%3Ba=commit%3Bh=649f1ee6c705aab644035a7998d7b574193a598a
http://www.securityfocus.com/bid/32096
Patch
Third Party Advisory
VDB Entry
https://exchange.xforce.ibmcloud.com/vulnerabilities/46327
Third Party Advisory
VDB Entry
https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A11635
Third Party Advisory