5.5

CVE-2021-47478

isofs: Fix out of bound access for corrupted isofs image

In the Linux kernel, the following vulnerability has been resolved:

isofs: Fix out of bound access for corrupted isofs image

When isofs image is suitably corrupted isofs_read_inode() can read data
beyond the end of buffer. Sanity-check the directory entry length before
using it.
Daten sind bereitgestellt durch National Vulnerability Database (NVD)
Linux ≫ Linux Kernel Version < 4.4.292
Linux ≫ Linux Kernel Version >= 4.5 < 4.9.290
Linux ≫ Linux Kernel Version >= 4.10 < 4.14.255
Linux ≫ Linux Kernel Version >= 4.15 < 4.19.217
Linux ≫ Linux Kernel Version >= 4.20 < 5.4.159
Linux ≫ Linux Kernel Version >= 5.5 < 5.10.79
Linux ≫ Linux Kernel Version >= 5.11 < 5.14.18
Linux ≫ Linux Kernel Version >= 5.15 < 5.15.2
VulnDex Vulnerability Enrichment
Diese Information steht angemeldeten Benutzern zur Verfügung. Login Login
Zu dieser CVE wurde keine Warnung gefunden.
EPSS Metriken
Typ Quelle Score Percentile
EPSS FIRST.org 0.23% 0.139
CVSS Metriken
Quelle Base Score Exploit Score Impact Score Vector String
134c704f-9b21-4f2e-91b3-4a467353bcc0 5.5 1.8 3.6
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N
CWE-125 Out-of-bounds Read

The product reads data past the end, or before the beginning, of the intended buffer.

https://git.kernel.org/stable/c/156ce5bb6cc43a80a743810199defb1dc3f55b7f
Patch
https://git.kernel.org/stable/c/6e80e9314f8bb52d9eabe1907698718ff01120f5
Patch
https://git.kernel.org/stable/c/86d4aedcbc69c0f84551fb70f953c24e396de2d7
Patch
https://git.kernel.org/stable/c/9ec33a9b8790c212cc926a88c5e2105f97f3f57e
Patch
https://git.kernel.org/stable/c/afbd40f425227e661d991757e11cc4db024e761f
Patch
https://git.kernel.org/stable/c/b0ddff8d68f2e43857a84dce54c3deab181c8ae1
Patch
https://git.kernel.org/stable/c/b2fa1f52d22c5455217b294629346ad23a744945
Patch
https://git.kernel.org/stable/c/e7fb722586a2936b37bdff096c095c30ca06404d
Patch
https://git.kernel.org/stable/c/e96a1866b40570b5950cda8602c2819189c62a48
Patch