CVE-2012-3400

Priority
Low
Description
Heap-based buffer overflow in the udf_load_logicalvol function in
fs/udf/super.c in the Linux kernel before 3.4.5 allows remote attackers to
cause a denial of service (system crash) or possibly have unspecified other
impact via a crafted UDF filesystem.
Ubuntu-Description
Some errors where discovered in the Linux kernel's UDF file system, which
is used to mount some CD-ROMs and DVDs. An unprivileged local user could
use these flaws to crash the system.
References
http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2012-3400
http://www.openwall.com/lists/oss-security/2012/07/03/1
http://www.ubuntu.com/usn/usn-1529-1
http://www.ubuntu.com/usn/usn-1533-1
http://www.ubuntu.com/usn/usn-1532-1
http://www.ubuntu.com/usn/usn-1514-1
http://www.ubuntu.com/usn/usn-1539-1
http://www.ubuntu.com/usn/usn-1556-1
http://www.ubuntu.com/usn/usn-1557-1
http://www.ubuntu.com/usn/usn-1562-1
http://www.ubuntu.com/usn/usn-1555-1
Bugs
https://launchpad.net/bugs/1024497
Notes
jdstrand> linux-armadaxp is maintained by OEM
Package
Source: linux-armadaxp (LP Ubuntu Debian)
Upstream:released (3.5~rc5)
Ubuntu 10.04 LTS (Lucid Lynx):DNE
Ubuntu 12.04 LTS (Precise Pangolin):released (3.2.0-1606.9)
Ubuntu 12.10 (Quantal Quetzal):not-affected (3.2.0-1606.9)
Ubuntu 13.04 (Raring Ringtail):DNE
Ubuntu 13.10 (Saucy Salamander):DNE
Package
Source: linux-ec2 (LP Ubuntu Debian)
Upstream:released (3.5~rc5)
Ubuntu 10.04 LTS (Lucid Lynx):released (2.6.32-347.53)
Ubuntu 12.04 LTS (Precise Pangolin):DNE
Ubuntu 12.10 (Quantal Quetzal):DNE
Ubuntu 13.04 (Raring Ringtail):DNE
Ubuntu 13.10 (Saucy Salamander):DNE
Package
Source: linux-lts-backport-oneiric (LP Ubuntu Debian)
Upstream:released (3.5~rc5)
Ubuntu 10.04 LTS (Lucid Lynx):released (3.0.0-24.40~lucid1)
Ubuntu 12.04 LTS (Precise Pangolin):DNE
Ubuntu 12.10 (Quantal Quetzal):DNE
Ubuntu 13.04 (Raring Ringtail):DNE
Ubuntu 13.10 (Saucy Salamander):DNE
Package
Source: linux-linaro-shared (LP Ubuntu Debian)
Upstream:released (3.5~rc5)
Ubuntu 10.04 LTS (Lucid Lynx):DNE
Ubuntu 12.04 LTS (Precise Pangolin):ignored (abandoned)
Ubuntu 12.10 (Quantal Quetzal):ignored (abandoned)
Ubuntu 13.04 (Raring Ringtail):DNE
Ubuntu 13.10 (Saucy Salamander):DNE
Package
Source: linux-linaro-vexpress (LP Ubuntu Debian)
Upstream:released (3.5~rc5)
Ubuntu 10.04 LTS (Lucid Lynx):DNE
Ubuntu 12.04 LTS (Precise Pangolin):ignored (abandoned)
Ubuntu 12.10 (Quantal Quetzal):ignored (abandoned)
Ubuntu 13.04 (Raring Ringtail):DNE
Ubuntu 13.10 (Saucy Salamander):DNE
Package
Source: linux-qcm-msm (LP Ubuntu Debian)
Upstream:released (3.5~rc5)
Ubuntu 10.04 LTS (Lucid Lynx):ignored (abandoned)
Ubuntu 12.04 LTS (Precise Pangolin):ignored (abandoned)
Ubuntu 12.10 (Quantal Quetzal):ignored (abandoned)
Ubuntu 13.04 (Raring Ringtail):DNE
Ubuntu 13.10 (Saucy Salamander):DNE
Package
Source: linux-lts-backport-natty (LP Ubuntu Debian)
Upstream:released (3.5~rc5)
Ubuntu 10.04 LTS (Lucid Lynx):released (2.6.38-15.66~lucid1)
Ubuntu 12.04 LTS (Precise Pangolin):DNE
Ubuntu 12.10 (Quantal Quetzal):DNE
Ubuntu 13.04 (Raring Ringtail):DNE
Ubuntu 13.10 (Saucy Salamander):DNE
Package
Source: linux-lts-quantal (LP Ubuntu Debian)
Upstream:DNE
Ubuntu 10.04 LTS (Lucid Lynx):DNE
Ubuntu 12.04 LTS (Precise Pangolin):not-affected
Ubuntu 12.10 (Quantal Quetzal):DNE
Ubuntu 13.04 (Raring Ringtail):DNE
Ubuntu 13.10 (Saucy Salamander):DNE
Patches:
Package
Source: linux-mvl-dove (LP Ubuntu Debian)
Upstream:released (3.5~rc5)
Ubuntu 10.04 LTS (Lucid Lynx):ignored (reached end-of-life)
Ubuntu 12.04 LTS (Precise Pangolin):DNE
Ubuntu 12.10 (Quantal Quetzal):DNE
Ubuntu 13.04 (Raring Ringtail):DNE
Ubuntu 13.10 (Saucy Salamander):DNE
Package
Source: linux-lts-backport-maverick (LP Ubuntu Debian)
Upstream:released (3.5~rc5)
Ubuntu 10.04 LTS (Lucid Lynx):ignored (reached end-of-life)
Ubuntu 12.04 LTS (Precise Pangolin):DNE
Ubuntu 12.10 (Quantal Quetzal):DNE
Ubuntu 13.04 (Raring Ringtail):DNE
Ubuntu 13.10 (Saucy Salamander):DNE
Package
Source: linux (LP Ubuntu Debian)
Upstream:released (3.5~rc5)
Ubuntu 10.04 LTS (Lucid Lynx):released (2.6.32-42.96)
Ubuntu 12.04 LTS (Precise Pangolin):released (3.2.0-28.44)
Ubuntu 12.10 (Quantal Quetzal):not-affected (3.5.0-3.3)
Ubuntu 13.04 (Raring Ringtail):not-affected (3.5.0-3.3)
Ubuntu 13.10 (Saucy Salamander):not-affected (3.5.0-3.3)
Patches:
Introduced by 1da177e4c3f41524e886b7f1b8a0c1fc7321cac2Fixed by 1df2ae31c724e57be9d7ac00d78db8a5dabdd050
Introduced by 1da177e4c3f41524e886b7f1b8a0c1fc7321cac2Fixed by adee11b2085bee90bd8f4f52123ffb07882d6256
Package
Source: linux-ti-omap4 (LP Ubuntu Debian)
Upstream:released (3.5~rc5)
Ubuntu 10.04 LTS (Lucid Lynx):DNE
Ubuntu 12.04 LTS (Precise Pangolin):released (3.2.0-1417.23)
Ubuntu 12.10 (Quantal Quetzal):not-affected (3.5.0-3.3)
Ubuntu 13.04 (Raring Ringtail):not-affected (3.5.0-3.3)
Ubuntu 13.10 (Saucy Salamander):not-affected (3.5.0-3.3)
Package
Source: linux-linaro-omap (LP Ubuntu Debian)
Upstream:released (3.5~rc5)
Ubuntu 10.04 LTS (Lucid Lynx):DNE
Ubuntu 12.04 LTS (Precise Pangolin):ignored (abandoned)
Ubuntu 12.10 (Quantal Quetzal):ignored (abandoned)
Ubuntu 13.04 (Raring Ringtail):DNE
Ubuntu 13.10 (Saucy Salamander):DNE
Package
Source: linux-fsl-imx51 (LP Ubuntu Debian)
Upstream:released (3.5~rc5)
Ubuntu 10.04 LTS (Lucid Lynx):ignored (reached end-of-life, does not affect buildd)
Ubuntu 12.04 LTS (Precise Pangolin):DNE
Ubuntu 12.10 (Quantal Quetzal):DNE
Ubuntu 13.04 (Raring Ringtail):DNE
Ubuntu 13.10 (Saucy Salamander):DNE
Package
Source: linux-lts-raring (LP Ubuntu Debian)
Upstream:released (3.5~rc5)
Ubuntu 10.04 LTS (Lucid Lynx):DNE
Ubuntu 12.04 LTS (Precise Pangolin):not-affected
Ubuntu 12.10 (Quantal Quetzal):DNE
Ubuntu 13.04 (Raring Ringtail):DNE
Ubuntu 13.10 (Saucy Salamander):DNE
More Information

Valid XHTML 1.0 Strict

Updated: 2013-05-10 19:14:58 UTC (commit 6828)