4.7

CVE-2014-6410

Exploit

The __udf_read_inode function in fs/udf/inode.c in the Linux kernel through 3.16.3 does not restrict the amount of ICB indirection, which allows physically proximate attackers to cause a denial of service (infinite loop or stack consumption) via a UDF filesystem with a crafted inode.

Data is provided by the National Vulnerability Database (NVD)
LinuxLinux Kernel Version <= 3.16.3
LinuxLinux Kernel Version3.16.0
LinuxLinux Kernel Version3.16.1
LinuxLinux Kernel Version3.16.2
Zu dieser CVE wurde keine CISA KEV oder CERT.AT-Warnung gefunden.
EPSS Metriken
Type Source Score Percentile
EPSS FIRST.org 0.07% 0.211
CVSS Metriken
Source Base Score Exploit Score Impact Score Vector string
nvd@nist.gov 4.7 3.4 6.9
AV:L/AC:M/Au:N/C:N/I:N/A:C