National Cyber Awareness System

Vulnerability Summary for CVE-2012-5375

Overview

The CRC32C feature in the Btrfs implementation in the Linux kernel before 3.8-rc1 allows local users to cause a denial of service (prevention of file creation) by leveraging the ability to write to a directory important to the victim, and creating a file with a crafted name that is associated with a specific CRC32C hash value.

Impact

CVSS Severity (version 2.0):

CVSS Version 2 Metrics:

References to Advisories, Solutions, and Tools

By selecting these links, you will be leaving NIST webspace. We have provided these links to other web sites because they may have information that would be of interest to you. No inferences should be drawn on account of other sites being referenced, or not, from this page. There may be other web sites that are more appropriate for your purpose. NIST does not necessarily endorse the views expressed, or concur with the facts presented on these sites. Further, NIST does not endorse any commercial products that may be mentioned on these sites. Please address comments about this page to nvd@nist.gov.

External Source: CONFIRM

Name: https://github.com/torvalds/linux/commit/9c52057c698fb96f8f07e7a4bcf4801a092bda89

Type: Patch Information; Exploit

Hyperlink:https://github.com/torvalds/linux/commit/9c52057c698fb96f8f07e7a4bcf4801a092bda89

External Source: CONFIRM

Name: http://www.kernel.org/pub/linux/kernel/v3.x/testing/patch-3.8-rc1.bz2

Type: Patch Information

Hyperlink:http://www.kernel.org/pub/linux/kernel/v3.x/testing/patch-3.8-rc1.bz2

External Source: CONFIRM

Name: http://git.kernel.org/?p=linux/kernel/git/torvalds/linux-2.6.git;a=commit;h=9c52057c698fb96f8f07e7a4bcf4801a092bda89

Type: Patch Information

Hyperlink:http://git.kernel.org/?p=linux/kernel/git/torvalds/linux-2.6.git;a=commit;h=9c52057c698fb96f8f07e7a4bcf4801a092bda89

External Source: MLIST

Name: [oss-security] 20121213 CVE-2012-5374 CVE-2012-5375 Btrfs CRC32C denial of service issues

Hyperlink:http://openwall.com/lists/oss-security/2012/12/13/20

External Source: MISC

Name: http://crypto.junod.info/2012/12/13/hash-dos-and-btrfs/

Hyperlink:http://crypto.junod.info/2012/12/13/hash-dos-and-btrfs/