CVE-2014-5472

Published: Sep 1, 2014Modified: May 6, 2026

4.0

Vector

AV:L/AC:H/Au:N/C:N/I:N/A:C

Exploitability: 1.9 / Impact: 6.9

Source: NVD

Description

The parse_rock_ridge_inode_internal function in fs/isofs/rock.c in the Linux kernel through 3.16.1 allows local users to cause a denial of service (unkillable mount process) via a crafted iso9660 image with a self-referential CL entry.

Affected (2)

Products: Linux: Linux Kernel

Linux

1 product

Linux Kernel

Configuration A

2 vulnerable

Vulnerable Software	Affected Versions
Linux Linux Kernel	Up to 3.16.1
Linux Linux Kernel	Version 3.16.0

Related CWEs

CWE-20

Improper Input Validation

The product receives input or data, but it does not validate or incorrectly validates that the input has the properties that are required to process the data safely and correctly.

References (50)

http://git.kernel.org/?p=linux/kernel/git/torvalds/linux-2.6.git%3Ba=commit%3Bh=410dd3cf4c9b36f27ed4542ee18b1af5e68645a4

Source: cve@mitre.org

http://lists.opensuse.org/opensuse-security-announce/2014-10/msg00006.html

Source: cve@mitre.org

http://lists.opensuse.org/opensuse-security-announce/2014-10/msg00007.html

Source: cve@mitre.org

http://lists.opensuse.org/opensuse-security-announce/2015-03/msg00010.html

Source: cve@mitre.org

http://lists.opensuse.org/opensuse-security-announce/2015-03/msg00025.html

Source: cve@mitre.org

http://lists.opensuse.org/opensuse-security-announce/2015-04/msg00020.html

Source: cve@mitre.org

http://marc.info/?l=bugtraq&m=142722450701342&w=2

Source: cve@mitre.org

http://marc.info/?l=bugtraq&m=142722544401658&w=2

Source: cve@mitre.org

http://rhn.redhat.com/errata/RHSA-2014-1318.html

Source: cve@mitre.org

http://rhn.redhat.com/errata/RHSA-2015-0102.html

Source: cve@mitre.org

http://rhn.redhat.com/errata/RHSA-2015-0695.html

Source: cve@mitre.org

http://rhn.redhat.com/errata/RHSA-2015-0782.html

Source: cve@mitre.org

http://rhn.redhat.com/errata/RHSA-2015-0803.html

Source: cve@mitre.org

http://www.openwall.com/lists/oss-security/2014/08/27/1

Source: cve@mitre.org

http://www.securityfocus.com/bid/69428

Source: cve@mitre.org

http://www.ubuntu.com/usn/USN-2354-1

Source: cve@mitre.org

http://www.ubuntu.com/usn/USN-2355-1

Source: cve@mitre.org

http://www.ubuntu.com/usn/USN-2356-1

Source: cve@mitre.org

http://www.ubuntu.com/usn/USN-2357-1

Source: cve@mitre.org

http://www.ubuntu.com/usn/USN-2358-1

Source: cve@mitre.org

http://www.ubuntu.com/usn/USN-2359-1

Source: cve@mitre.org

https://bugzilla.redhat.com/show_bug.cgi?id=1134099

Source: cve@mitre.org

https://code.google.com/p/google-security-research/issues/detail?id=88

Source: cve@mitre.org

https://exchange.xforce.ibmcloud.com/vulnerabilities/95556

Source: cve@mitre.org

https://github.com/torvalds/linux/commit/410dd3cf4c9b36f27ed4542ee18b1af5e68645a4

Source: cve@mitre.org

ExploitPatch

http://git.kernel.org/?p=linux/kernel/git/torvalds/linux-2.6.git%3Ba=commit%3Bh=410dd3cf4c9b36f27ed4542ee18b1af5e68645a4