CVEvulnerability

CVE-2014-9420

4.9 MEDIUM Published 2014-12-26 Modified 2026-06-17 Official page ↗
Status
Modified
Published
2014-12-26
Last modified
2026-06-17
Assigner
[email protected]
CVSS 2.0 ([email protected])
4.9 MEDIUM — AV:L/AC:L/Au:N/C:N/I:N/A:C
Weaknesses
CWE-399

Description

The rock_continue function in fs/isofs/rock.c in the Linux kernel through 3.18.1 does not restrict the number of Rock Ridge continuation entries, which allows local users to cause a denial of service (infinite loop, and system crash or hang) via a crafted iso9660 image.

Affected configurations

• linux linux kernel (<= 3.18.1)

Related

Weakness · not in database (1)

References