CVE-2014-0004

Severity: medium (CVSS 6.9 v2.0)
Exploited in the wild: not listed in CISA KEV
EPSS: 0.4% probability of exploitation in the next 30 days
Public exploit or detection template: none known
Published: 2014-03-11 · updated 2026-06-17
Weakness: CWE-119

Description

Stack-based buffer overflow in udisks before 1.0.5 and 2.x before 2.1.3 allows local users to cause a denial of service (crash) and possibly execute arbitrary code via a long mount point.

Affected products

Canonical Ubuntu Linux: 12.04, 12.10, 13.10
Freedesktop Udisks: through 1.0.4; 1.0, 1.0.1, 2.0.0, 2.0.1, 2.0.90, 2.0.91 (+4)

References

http://lists.freedesktop.org/archives/devkit-devel/2014-March/001568.html
http://lists.opensuse.org/opensuse-updates/2014-03/msg00051.html
http://lists.opensuse.org/opensuse-updates/2014-03/msg00052.html
http://lists.opensuse.org/opensuse-updates/2014-03/msg00053.html
http://rhn.redhat.com/errata/RHSA-2014-0293.html
http://www.debian.org/security/2014/dsa-2872
http://www.securityfocus.com/bid/66081
http://www.ubuntu.com/usn/USN-2142-1
http://lists.freedesktop.org/archives/devkit-devel/2014-March/001568.html
http://lists.opensuse.org/opensuse-updates/2014-03/msg00051.html
http://lists.opensuse.org/opensuse-updates/2014-03/msg00052.html
http://lists.opensuse.org/opensuse-updates/2014-03/msg00053.html

Get alerted when CVE-2014-0004 or the next vulnerability affects your stack