| Vulnerability Name: | CVE-2014-7283 (CCN-96836) | ||||||||||||
| Assigned: | 2014-10-01 | ||||||||||||
| Published: | 2014-10-01 | ||||||||||||
| Updated: | 2020-08-06 | ||||||||||||
| Summary: | The xfs_da3_fixhashpath function in fs/xfs/xfs_da_btree.c in the xfs implementation in the Linux kernel before 3.14.2 does not properly compare btree hash values, which allows local users to cause a denial of service (filesystem corruption, and OOPS or panic) via operations on directories that have hash collisions, as demonstrated by rmdir operations. | ||||||||||||
| CVSS v3 Severity: | 6.2 Medium (CCN CVSS v3.1 Vector: CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H)
| ||||||||||||
| CVSS v2 Severity: | 4.9 Medium (CVSS v2 Vector: AV:L/AC:L/Au:N/C:N/I:N/A:C) 3.7 Low (Temporal CVSS v2 Vector: AV:L/AC:L/Au:N/C:N/I:N/A:C/E:U/RL:OF/RC:C)
3.7 Low (CCN Temporal CVSS v2 Vector: AV:L/AC:L/Au:N/C:N/I:N/A:C/E:U/RL:OF/RC:C)
| ||||||||||||
| Vulnerability Type: | CWE-399 | ||||||||||||
| Vulnerability Consequences: | Denial of Service | ||||||||||||
| References: | Source: MITRE Type: CNA CVE-2014-7283 Source: CONFIRM Type: Exploit, Patch, Vendor Advisory http://git.kernel.org/?p=linux/kernel/git/torvalds/linux-2.6.git;a=commit;h=c88547a8119e3b581318ab65e9b72f27f23e641d Source: MLIST Type: Exploit, Third Party Advisory [xfs] 20140327 xfs errors while unlinking filenames with hash collisions Source: CCN Type: RHSA-2014-1943 Moderate: kernel-rt security, bug fix, and enhancement update Source: REDHAT Type: Third Party Advisory RHSA-2014:1943 Source: CCN Type: oss-security Mailing List, Wed, 1 Oct 2014 23:25:25 -0400 (EDT) Re: xfs directory hash ordering bug / Linux kernel Source: CCN Type: IBM Security Bulletin 1021943 PowerKVM Kernel Vulnerabilities - Multiple CVEs Source: CONFIRM Type: Release Notes, Vendor Advisory http://www.kernel.org/pub/linux/kernel/v3.x/ChangeLog-3.14.2 Source: MLIST Type: Mailing List, Third Party Advisory [oss-security] 20141002 xfs directory hash ordering bug Source: BID Type: Third Party Advisory, VDB Entry 70261 Source: CCN Type: BID-70261 Linux Kernel 'xfs_da_btree.c' Local Denial of Service Vulnerability Source: CCN Type: Red Hat Bugzilla Bug 1148777 (CVE-2014-7283) CVE-2014-7283 kernel: xfs: directory hash ordering denial of service Source: CONFIRM Type: Exploit, Issue Tracking, Patch, Third Party Advisory https://bugzilla.redhat.com/show_bug.cgi?id=1148777 Source: XF Type: UNKNOWN linux-kernel-cve20147283-dos(96836) Source: CCN Type: Linux Kernel GIT Repository xfs: fix directory hash ordering bug Source: CONFIRM Type: Exploit, Patch, Third Party Advisory https://github.com/torvalds/linux/commit/c88547a8119e3b581318ab65e9b72f27f23e641d Source: CCN Type: WhiteSource Vulnerability Database CVE-2014-7283 | ||||||||||||
| Vulnerable Configuration: | Configuration 1: Configuration 2: Configuration CCN 1:  Denotes that component is vulnerable | ||||||||||||
| Oval Definitions | |||||||||||||
| |||||||||||||
| BACK | |||||||||||||