What is CVE-2014-9728?

CVE-2014-9728 is a vulnerability in Linux Kernel, classified under Improper Restriction of Operations within the Bounds of a Memory Buffer. Published 2015-08-31.

Is CVE-2014-9728 known to be exploited?

2 public proof-of-concept repositories are indexed. Not currently listed in the CISA KEV catalog.

Buffer overflow in Linux Kernel

CVE-2014-9728

The UDF filesystem implementation in the Linux kernel before 3.18.2 does not validate certain lengths, which allows local users to cause a denial of service (buffer over-read and system crash) via a crafted filesystem image, related to fs/udf/inode.c and fs/udf/symlink.c.

Vulnerability class: Buffer Overflow

EPSS: 0.005 (36.9th percentile) — read the EPSS interpretation.

Affected products

Linux Linux_kernel
N/a — versions n/a

Weakness classification (CWE)

CWE-119 — Improper Restriction of Operations within the Bounds of a Memory Buffer

Public proof-of-concept exploits

References

secalert@redhat.com (x_refsource_CONFIRM)
secalert@redhat.com (x_refsource_CONFIRM)
secalert@redhat.com (mailing-list, x_refsource_MLIST)
secalert@redhat.com (x_refsource_CONFIRM)
secalert@redhat.com (vendor-advisory, x_refsource_SUSE)
secalert@redhat.com (vendor-advisory, x_refsource_SUSE)
secalert@redhat.com (x_refsource_CONFIRM)
secalert@redhat.com (x_refsource_CONFIRM)
secalert@redhat.com (vdb-entry, x_refsource_BID)
secalert@redhat.com (vendor-advisory, x_refsource_SUSE)

Frequently asked questions

What is CVE-2014-9728?: CVE-2014-9728 is a vulnerability in Linux Kernel, classified under Improper Restriction of Operations within the Bounds of a Memory Buffer. Published 2015-08-31.
Is CVE-2014-9728 known to be exploited?: 2 public proof-of-concept repositories are indexed. Not currently listed in the CISA KEV catalog.