NetSight
IP …
medium4.7

CVE-2014-6410

The __udf_read_inode function in fs/udf/inode.c in the Linux kernel through 3.16.3 does not restrict the amount of ICB indirection, which allows physically pro…

Impact

The __udf_read_inode function in fs/udf/inode.c in the Linux kernel through 3.16.3 does not restrict the amount of ICB indirection, which allows physically proximate attackers to cause a denial of service (infinite loop or stack consumption) via a UDF filesystem with a crafted inode.

Affected products

VendorProductAffected versions
LinuxLinux Kernel
through 3.16.3
Versions 3.16.0, 3.16.1, 3.16.2

Weakness classification

CWE-399

References