Hide Forgot
Linux kernel built with support to VFAT file system is vulnerable to a buffer overflow flaw which happens when converting UTF8 character string to UTF16 via function: utf8s_to_utf16s. A local user able to mount, or with access to, a FAT file system with the "utf8=1" option could use this flaw to crash the system or, potentially, to escalate their privileges. Upstream fix: -> https://git.kernel.org/linus/0720a06a7518c9d0c0125bd5d1f3b6264c55c3dd Reference: -> http://www.openwall.com/lists/oss-security/2013/02/26/5 -> http://www.exploit-db.com/exploits/23248/
Statement: This issue does not affect the version of Linux kernel as shipped with Red Hat Enterprise Linux 5. This issue did affect the version of Linux kernel as shipped with Red Hat Enterprise Linux 6 and Red Hat Enterprise MRG 2.
This issue has been addressed in following products: MRG for RHEL-6 v.2 Via RHSA-2013:0566 https://rhn.redhat.com/errata/RHSA-2013-0566.html
This issue has been addressed in following products: Red Hat Enterprise Linux 6 Via RHSA-2013:0744 https://rhn.redhat.com/errata/RHSA-2013-0744.html
This issue has been addressed in following products: Red Hat Enterprise Linux 6.3 EUS - Server Only Via RHSA-2013:0928 https://rhn.redhat.com/errata/RHSA-2013-0928.html
This issue has been addressed in following products: Red Hat Enterprise Linux 6.2 EUS - Server Only Via RHSA-2013:1026 https://rhn.redhat.com/errata/RHSA-2013-1026.html