CVE-2011-4330
Priority
Low
Description
Stack-based buffer overflow in the hfs_mac2asc function in fs/hfs/trans.c
in the Linux kernel 2.6 allows local users to cause a denial of service
(crash) and possibly execute arbitrary code via an HFS image with a crafted
len field.
in the Linux kernel 2.6 allows local users to cause a denial of service
(crash) and possibly execute arbitrary code via an HFS image with a crafted
len field.
Ubuntu-Description
Clement Lecigne discovered a bug in the HFS file system bounds checking.
When a malformed HFS file system is mounted a local user could crash the
system or gain root privileges.
When a malformed HFS file system is mounted a local user could crash the
system or gain root privileges.
References
http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2011-4330
http://www.openwall.com/lists/oss-security/2011/11/21/5
https://lkml.org/lkml/2011/11/9/303
http://www.ubuntu.com/usn/usn-1286-1
http://www.ubuntu.com/usn/usn-1291-1
http://www.ubuntu.com/usn/usn-1292-1
http://www.ubuntu.com/usn/usn-1293-1
http://www.ubuntu.com/usn/usn-1302-1
http://www.ubuntu.com/usn/usn-1301-1
http://www.ubuntu.com/usn/usn-1303-1
http://www.ubuntu.com/usn/usn-1299-1
http://www.ubuntu.com/usn/usn-1304-1
http://www.ubuntu.com/usn/usn-1300-1
http://www.ubuntu.com/usn/usn-1311-1
http://www.ubuntu.com/usn/usn-1312-1
http://www.ubuntu.com/usn/usn-1322-1
http://www.ubuntu.com/usn/usn-1330-1
http://www.ubuntu.com/usn/usn-1340-1
http://www.ubuntu.com/usn/usn-1336-1
http://www.openwall.com/lists/oss-security/2011/11/21/5
https://lkml.org/lkml/2011/11/9/303
http://www.ubuntu.com/usn/usn-1286-1
http://www.ubuntu.com/usn/usn-1291-1
http://www.ubuntu.com/usn/usn-1292-1
http://www.ubuntu.com/usn/usn-1293-1
http://www.ubuntu.com/usn/usn-1302-1
http://www.ubuntu.com/usn/usn-1301-1
http://www.ubuntu.com/usn/usn-1303-1
http://www.ubuntu.com/usn/usn-1299-1
http://www.ubuntu.com/usn/usn-1304-1
http://www.ubuntu.com/usn/usn-1300-1
http://www.ubuntu.com/usn/usn-1311-1
http://www.ubuntu.com/usn/usn-1312-1
http://www.ubuntu.com/usn/usn-1322-1
http://www.ubuntu.com/usn/usn-1330-1
http://www.ubuntu.com/usn/usn-1340-1
http://www.ubuntu.com/usn/usn-1336-1
Package
| Upstream: | released (3.2~rc2) |
| Ubuntu 10.04 LTS (Lucid Lynx): | DNE |
| Ubuntu 12.04 LTS (Precise Pangolin): | not-affected (3.2.0-1600.1) |
| Ubuntu 12.10 (Quantal Quetzal): | not-affected (3.2.0-1602.5) |
| Ubuntu 13.04 (Raring Ringtail): | DNE |
| Ubuntu 13.10 (Saucy Salamander): | DNE |
Package
| Upstream: | released (3.2~rc2) |
| Ubuntu 10.04 LTS (Lucid Lynx): | released (2.6.32-341.41) |
| Ubuntu 12.04 LTS (Precise Pangolin): | DNE |
| Ubuntu 12.10 (Quantal Quetzal): | DNE |
| Ubuntu 13.04 (Raring Ringtail): | DNE |
| Ubuntu 13.10 (Saucy Salamander): | DNE |
Package
| Upstream: | released (3.2~rc2) |
| Ubuntu 10.04 LTS (Lucid Lynx): | released (3.0.0-15.25~lucid1) |
| Ubuntu 12.04 LTS (Precise Pangolin): | DNE |
| Ubuntu 12.10 (Quantal Quetzal): | DNE |
| Ubuntu 13.04 (Raring Ringtail): | DNE |
| Ubuntu 13.10 (Saucy Salamander): | DNE |
Package
| Upstream: | released (3.2~rc2) |
| Ubuntu 10.04 LTS (Lucid Lynx): | released (2.6.38-13.53~lucid1) |
| Ubuntu 12.04 LTS (Precise Pangolin): | DNE |
| Ubuntu 12.10 (Quantal Quetzal): | DNE |
| Ubuntu 13.04 (Raring Ringtail): | DNE |
| Ubuntu 13.10 (Saucy Salamander): | DNE |
Package
| Upstream: | DNE |
| Ubuntu 10.04 LTS (Lucid Lynx): | DNE |
| Ubuntu 12.04 LTS (Precise Pangolin): | not-affected |
| Ubuntu 12.10 (Quantal Quetzal): | DNE |
| Ubuntu 13.04 (Raring Ringtail): | DNE |
| Ubuntu 13.10 (Saucy Salamander): | DNE |
Patches:
Package
| Upstream: | released (3.2~rc2) |
| Ubuntu 10.04 LTS (Lucid Lynx): | pending (2.6.32-221.39) |
| Ubuntu 12.04 LTS (Precise Pangolin): | DNE |
| Ubuntu 12.10 (Quantal Quetzal): | DNE |
| Ubuntu 13.04 (Raring Ringtail): | DNE |
| Ubuntu 13.10 (Saucy Salamander): | DNE |
Package
| Upstream: | released (3.2~rc2) |
| Ubuntu 10.04 LTS (Lucid Lynx): | released (2.6.35-31.63~lucid1) |
| Ubuntu 12.04 LTS (Precise Pangolin): | DNE |
| Ubuntu 12.10 (Quantal Quetzal): | DNE |
| Ubuntu 13.04 (Raring Ringtail): | DNE |
| Ubuntu 13.10 (Saucy Salamander): | DNE |
Package
| Upstream: | released (3.2~rc2) |
| Ubuntu 10.04 LTS (Lucid Lynx): | released (2.6.32-37.80) |
| Ubuntu 12.04 LTS (Precise Pangolin): | not-affected (3.2.0-1.1) |
| Ubuntu 12.10 (Quantal Quetzal): | not-affected (3.2.0-1.1) |
| Ubuntu 13.04 (Raring Ringtail): | not-affected (3.2.0-1.1) |
| Ubuntu 13.10 (Saucy Salamander): | not-affected (3.2.0-1.1) |
Patches:
| Upstream: | http://git.kernel.org/linus/bc5b8a9003132ae44559edd63a1623b7b99dfb68 |
Package
| Upstream: | released (3.2~rc2) |
| Ubuntu 10.04 LTS (Lucid Lynx): | DNE |
| Ubuntu 12.04 LTS (Precise Pangolin): | not-affected (3.2.0-1401.1) |
| Ubuntu 12.10 (Quantal Quetzal): | not-affected (3.2.0-1401.1) |
| Ubuntu 13.04 (Raring Ringtail): | not-affected (3.2.0-1401.1) |
| Ubuntu 13.10 (Saucy Salamander): | not-affected (3.2.0-1401.1) |
Package
| Upstream: | released (3.2~rc2) |
| Ubuntu 10.04 LTS (Lucid Lynx): | released (2.6.31-612.31) |
| Ubuntu 12.04 LTS (Precise Pangolin): | DNE |
| Ubuntu 12.10 (Quantal Quetzal): | DNE |
| Ubuntu 13.04 (Raring Ringtail): | DNE |
| Ubuntu 13.10 (Saucy Salamander): | DNE |
Package
| Upstream: | released (3.2~rc2) |
| Ubuntu 10.04 LTS (Lucid Lynx): | DNE |
| Ubuntu 12.04 LTS (Precise Pangolin): | not-affected |
| Ubuntu 12.10 (Quantal Quetzal): | DNE |
| Ubuntu 13.04 (Raring Ringtail): | DNE |
| Ubuntu 13.10 (Saucy Salamander): | DNE |