|
Message-ID: <alpine.LFD.2.10.1412171629460.26456@wniryva.cad.erqung.pbz> Date: Wed, 17 Dec 2014 16:32:56 +0530 (IST) From: P J P <ppandit@...hat.com> To: oss security list <oss-security@...ts.openwall.com> Subject: CVE Request Linux kernel: fs: isofs: infinite loop in CE records -----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 Hello, Linux kernel built with the iso9660 file system(CONFIG_ISO9660_FS) support is vulnerable to an infinite recursion loop flaw, which could lead to a crash or render a system unresponsive/unusable after a while. This occurs while mounting an iso9660 image. An unprivileged user/process could use this flaw to crash the system resulting in DoS. Upstream fix: - ------------- -> https://git.kernel.org/linus/f54e18f1b831c92f6512d2eedb224cd63d607d3d Thank you. - -- Prasad J Pandit / Red Hat Product Security Team 47AF CE69 3A90 54AA 9045 1053 DD13 3D32 FE5B 041F -----BEGIN PGP SIGNATURE----- Version: GnuPG v1 iQIcBAEBAgAGBQJUkWLgAAoJEN0TPTL+WwQfix4QAJRmIb2nQCwivn0N/0N8kadv K/Wr2pyM7FqAAvr3HvIq6ec/L3SaSIt6OyPcybI2EbfwhPdHcnDEUII6Iwui5BeU Uo83ulQvtmMQlpgBfDaC/gMtThAD0/PQT3ErGdyxG+oMGj2MqgOnCJ0Cc/aAxaoP TLACDCmZAeTnvVtE1m00gjbaq1xjkaupBHKq3W8lX25W0NeoUNMZUDk2M7BB3CdR 5HFcPdLvWhTT7PMvxdSf0s1lNqvbNG0cWrCpjQ26ZRNc1VFNI40AjPYvgttW4fCg IojYQV9AIb/vmV5pMyk+Y2fO28WOdxbFlJACzWy/VUYs1Gx0o8BcR9ZllvEf7q0W XzIG00b+nTA6MhZ83rddpzK4CfLG3GqK2+Us/E1tl6+WuYNHH4rD8WD+1THsebdC 9KkVb+tgvWerYfZ0U5hSKGg2xH+miqeVfvuG2EkODXrfVogGtH9a7qcd06wjo6Uh 3x5m0CfKIUrytkQxf6Fv51nXl4fBBMQmvZ0Yj/YI/xFtYSjGPAejdz9M9GfjmIYn qKLaq7VC6g3h+tw6RLf7SzIJuhhuTnoKD4exiD2a3hXCnH1hJO/J2cXipNOi4EkE r0sVnHo5S3htNVPvwVmgu7PKdoX19wSzUs1gUJFZ2ZMozypolGhZ0n/QMSPu3C/H /4B7cF/dWfBaxILa6OCE =WHPo -----END PGP SIGNATURE-----
Powered by blists - more mailing lists
Please check out the Open Source Software Security Wiki, which is counterpart to this mailing list.
Confused about mailing lists and their use? Read about mailing lists on Wikipedia and check out these guidelines on proper formatting of your messages.