CVE - CVE-2012-5375

CVE-ID
CVE-2012-5375	Learn more at National Vulnerability Database (NVD) • CVSS Severity Rating • Fix Information • Vulnerable Software Versions • SCAP Mappings • CPE Information
Description
The CRC32C feature in the Btrfs implementation in the Linux kernel before 3.8-rc1 allows local users to cause a denial of service (prevention of file creation) by leveraging the ability to write to a directory important to the victim, and creating a file with a crafted name that is associated with a specific CRC32C hash value.
References
Note: References are provided for the convenience of the reader to help distinguish between vulnerabilities. The list is not intended to be complete.
CONFIRM:http://git.kernel.org/?p=linux/kernel/git/torvalds/linux-2.6.git;a=commit;h=9c52057c698fb96f8f07e7a4bcf4801a092bda89 CONFIRM:http://www.kernel.org/pub/linux/kernel/v3.x/testing/patch-3.8-rc1.bz2 CONFIRM:https://github.com/torvalds/linux/commit/9c52057c698fb96f8f07e7a4bcf4801a092bda89 MISC:http://crypto.junod.info/2012/12/13/hash-dos-and-btrfs/ MLIST:[oss-security] 20121213 CVE-2012-5374 CVE-2012-5375 Btrfs CRC32C denial of service issues URL:http://openwall.com/lists/oss-security/2012/12/13/20 UBUNTU:USN-1944-1 URL:http://www.ubuntu.com/usn/USN-1944-1 UBUNTU:USN-1945-1 URL:http://www.ubuntu.com/usn/USN-1945-1 UBUNTU:USN-1946-1 URL:http://www.ubuntu.com/usn/USN-1946-1 UBUNTU:USN-1947-1 URL:http://www.ubuntu.com/usn/USN-1947-1 UBUNTU:USN-2017-1 URL:http://www.ubuntu.com/usn/USN-2017-1
Assigning CNA
MITRE Corporation
Date Record Created
20121010	Disclaimer: The record creation date may reflect when the CVE ID was allocated or reserved, and does not necessarily indicate when this vulnerability was discovered, shared with the affected vendor, publicly disclosed, or updated in CVE.
Phase (Legacy)
Assigned (20121010)
Votes (Legacy)

Comments (Legacy)

Proposed (Legacy)
N/A
This is an record on the CVE List, which provides common identifiers for publicly known cybersecurity vulnerabilities.
Search CVE Using Keywords: You can also search by reference using the CVE Reference Maps.
For More Information: CVE Request Web Form (select "Other" from dropdown)