Bug 103325

Summary:	Kernel: Local DoS through ISO fs (CAN-2005-2457)
Product:	Gentoo Security	Reporter:	Thierry Carrez (RETIRED) <koon>
Component:	Kernel	Assignee:	Gentoo Security <security>
Status:	RESOLVED DUPLICATE
Severity:	minor	CC:	security-kernel
Priority:	High
Version:	unspecified
Hardware:	All
OS:	Linux
Whiteboard:
Package list:		Runtime testing required:	---

Description Thierry Carrez (RETIRED) gentoo-dev

2005-08-22 05:12:53 UTC

From Ubuntu's latest :

Tim Yamin discovered that the driver for compressed ISO file systems
did not sufficiently validate the iput data. By tricking an user into
mounting a malicious CD-ROM with a specially crafted compressed ISO
file system, he could cause a kernel crash. (CAN-2005-2457)

Comment 1 Thierry Carrez (RETIRED) gentoo-dev

2005-08-22 05:23:41 UTC


*** This bug has been marked as a duplicate of 102582 ***