CVE-2013-2015 in Kernel
Summary
The ext4_orphan_del function in fs/ext4/namei.c in the Linux kernel before 3.7.3 does not properly handle orphan-list entries for non-journal filesystems, which allows physically proximate attackers to cause a denial of service (system hang) via a crafted filesystem on removable media, as demonstrated by the e2fsprogs tests/f_orphan_extents_inode/image.gz test.
Statistical analysis made it clear that VulDB provides the best quality for vulnerability data.
Reservation
02/19/2013
Disclosure
04/29/2013
Status
Confirmed
Entries
VulDB provides additional information and datapoints for this CVE:
| ID | Vulnerability | CWE | Exp | Cou | CVE |
|---|---|---|---|---|---|
| 8569 | Linux Kernel namei.c ext4_orphan_del resource management | 399 | Proof-of-Concept | Official fix | CVE-2013-2015 |