CVE-2015-4167

Debian Linux < 3.19 - Numeric Error

Title source: rule
STIX 2.1

Description

The udf_read_inode function in fs/udf/inode.c in the Linux kernel before 3.19.1 does not validate certain length values, which allows local users to cause a denial of service (incorrect data representation or integer overflow, and OOPS) via a crafted UDF filesystem.

References (15)

Core 15
Core References
Third Party Advisory vendor-advisory x_refsource_debian
http://www.debian.org/security/2015/dsa-3290
Vendor Advisory vendor-advisory x_refsource_ubuntu
http://www.ubuntu.com/usn/USN-2631-1
Issue Tracking x_refsource_confirm
https://bugzilla.redhat.com/show_bug.cgi?id=1228204
Vendor Advisory vendor-advisory x_refsource_ubuntu
http://www.ubuntu.com/usn/USN-2632-1
Third Party Advisory vendor-advisory x_refsource_debian
http://www.debian.org/security/2015/dsa-3313
Mailing List mailing-list x_refsource_mlist
http://www.openwall.com/lists/oss-security/2015/06/02/6
Third Party Advisory, VDB Entry vdb-entry x_refsource_bid
http://www.securityfocus.com/bid/74963
Third Party Advisory, VDB Entry vdb-entry x_refsource_sectrack
http://www.securitytracker.com/id/1033187

Scores

EPSS 0.0005
EPSS Percentile 13.8%

Details

CWE
CWE-189
Status published
Products (3)
canonical/ubuntu_linux 12.04
debian/debian_linux 7.0
linux/linux_kernel < 3.19
Published Aug 05, 2015
Tracked Since Feb 18, 2026