CVE-2006-4145 Information

Description

The Universal Disk Format (UDF) filesystem driver in Linux kernel 2.6.17 and earlier allows local users to cause a denial of service (hang and crash) via certain operations involving truncated files as demonstrated via the dd command.

Reference

http://lkml.org/lkml/2006/6/16/6 http://secunia.com/advisories/21515 http://secunia.com/advisories/21695 http://secunia.com/advisories/21711 http://secunia.com/advisories/21934 http://secunia.com/advisories/22093 http://secunia.com/advisories/22382 http://secunia.com/advisories/23474 http://secunia.com/advisories/27227 http://secunia.com/advisories/31229 http://secunia.com/advisories/31685 http://support.avaya.com/elmodocs2/security/ASA-2008-365.htm http://www.debian.org/security/2006/dsa-1184 http://www.mandriva.com/security/advisories?name=MDKSA-2006:182 http://www.mandriva.com/security/advisories?name=MDKSA-2007:025 http://www.novell.com/linux/security/advisories/2006_79_kernel.html http://www.novell.com/linux/security/advisories/2007_53_kernel.html http://www.redhat.com/support/errata/RHSA-2008-0665.html http://www.securityfocus.com/archive/1/444887/100/0/threaded http://www.securityfocus.com/bid/19562 http://www.ubuntu.com/usn/usn-346-1 http://www.vupen.com/english/advisories/2006/3308 https://issues.rpath.com/browse/RPL-611 https://oval.cisecurity.org/repository/search/definition/oval3Aorg.mitre.oval3Adef3A10796