CVSS2
Attack Vector
NETWORK
Attack Complexity
LOW
Authentication
NONE
Confidentiality Impact
NONE
Integrity Impact
NONE
Availability Impact
COMPLETE
AV:N/AC:L/Au:N/C:N/I:N/A:C
EPSS
Percentile
87.2%
Off-by-one error in the build_unc_path_to_root function in
fs/cifs/connect.c in the Linux kernel before 3.9.6 allows remote attackers
to cause a denial of service (memory corruption and system crash) via a DFS
share mount operation that triggers use of an unexpected DFS referral name
length.
Author | Note |
---|---|
jdstrand | per Debian, introduced in 3.8 |