Stack-based buffer overflow in udisks before 1.0.5 and 2.x before 2.1.3 allows local users to cause a denial of service (crash) and possibly execute arbitrary code via a long mount point.

Updated udisks2 packages fixes security vulnerability :

A flaw was found in the way udisks and udisks2 handled long path names. A malicious, local user could use this flaw to create a specially crafted directory structure that could lead to arbitrary code execution with the privileges of the udisks daemon (root) (CVE-2014-0004).

udisks2 was updated to fix a buffer overflow in mount path parsing. If users have the possibility to create very long mount points, such as with FUSE, they could cause udisksd to crash, or even to run arbitrary code as root with specially crafted mount paths. (bnc#865854, CVE-2014-0004)

udisks was updated to fix a buffer overflow in mount path parsing.

If users have the possibility to create very long mount points, such as with FUSE, they could cause udisksd to crash, or even to run arbitrary code as root with specially crafted mount paths.
(bnc#865854, CVE-2014-0004)

The remote host is affected by the vulnerability described in GLSA-201405-01 (udisks: Arbitrary code execution)

    A stack-based buffer overflow can be triggered when udisks is given a       long path name as a mount point.
  Impact :

    A local attacker could possibly execute arbitrary code with the       privileges of the process or cause a Denial of Service condition.
  Workaround :

    There is no known workaround at this time.

fix CVE-2014-0004

Note that Tenable Network Security has extracted the preceding description block directly from the Fedora security advisory. Tenable has attempted to automatically clean and format it as much as possible without introducing additional issues.

Fix CVE-2014-0004: stack-based buffer overflow when handling long path names

Note that Tenable Network Security has extracted the preceding description block directly from the Fedora security advisory. Tenable has attempted to automatically clean and format it as much as possible without introducing additional issues.

Updated udisks packages fixes security vulnerability :

A flaw was found in the way udisks and udisks2 handled long path names. A malicious, local user could use this flaw to create a specially crafted directory structure that could lead to arbitrary code execution with the privileges of the udisks daemon (root) (CVE-2014-0004).

A stack-based buffer overflow flaw was found in the way udisks handled files with long path names. A malicious, local user could use this flaw to create a specially crafted directory structure that, when processed by the udisks daemon, could lead to arbitrary code execution with the privileges of the udisks daemon (root). (CVE-2014-0004)

Updated udisks packages that fix one security issue are now available for Red Hat Enterprise Linux 6.

The Red Hat Security Response Team has rated this update as having Important security impact. A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available from the CVE link in the References section.

The udisks package provides a daemon, a D-Bus API, and command line utilities for managing disks and storage devices.

A stack-based buffer overflow flaw was found in the way udisks handled files with long path names. A malicious, local user could use this flaw to create a specially crafted directory structure that, when processed by the udisks daemon, could lead to arbitrary code execution with the privileges of the udisks daemon (root). (CVE-2014-0004)

This issue was discovered by Florian Weimer of the Red Hat Product Security Team.

All udisks users are advised to upgrade to these updated packages, which contain a backported patch to correct this issue.

The remote Oracle Linux 6 host has packages installed that are affected by a vulnerability as referenced in the ELSA-2014-0293 advisory.

    [1.0.1-7.el6_5]
    - Make sure doc subpackage is noarch

    [1.0.1-6.el6_5]
    - Put devel-docs in a separate package (related: rhbz#1070145) .

    [1.0.1-5.el6_5]
    - Related: rhbz#1070145.

Tenable has extracted the preceding description block directly from the Oracle Linux security advisory.

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

New udisks and udisks2 packages are available for Slackware 14.0, 14.1, and -current to fix a security issue.

Florian Weimer discovered that UDisks incorrectly handled certain long path names. A local attacker could use this issue to cause udisks to crash, resulting in a denial of service, or possibly execute arbitrary code. The default compiler options for affected releases should reduce the vulnerability to a denial of service.

Note that Tenable Network Security has extracted the preceding description block directly from the Ubuntu security advisory. Tenable has attempted to automatically clean and format it as much as possible without introducing additional issues.

Florian Weimer discovered a buffer overflow in udisks's mount path parsing code which may result in privilege escalation.

ID	Name	Product	Family	Severity
82341	Mandriva Linux Security Advisory : udisks2 (MDVSA-2015:088)	Nessus	Mandriva Local Security Checks	medium
75298	openSUSE Security Update : udisks2 (openSUSE-SU-2014:0388-1)	Nessus	SuSE Local Security Checks	medium
75297	openSUSE Security Update : udisks (openSUSE-SU-2014:0389-1)	Nessus	SuSE Local Security Checks	medium
73849	GLSA-201405-01 : udisks: Arbitrary code execution	Nessus	Gentoo Local Security Checks	medium
73423	Fedora 19 : udisks-1.0.4-12.fc19 (2014-3839)	Nessus	Fedora Local Security Checks	medium
73257	Fedora 20 : udisks-1.0.4-13.fc20 (2014-3818)	Nessus	Fedora Local Security Checks	medium
73110	Fedora 19 : udisks2-2.1.2-2.fc19 (2014-3714)	Nessus	Fedora Local Security Checks	medium
73068	Mandriva Linux Security Advisory : udisks (MDVSA-2014:064)	Nessus	Mandriva Local Security Checks	medium
73043	Fedora 20 : udisks2-2.1.2-2.fc20 (2014-3723)	Nessus	Fedora Local Security Checks	medium
73014	Scientific Linux Security Update : udisks on SL6.x i386/x86_64 (20140313)	Nessus	Scientific Linux Local Security Checks	medium
73011	RHEL 6 : udisks (RHSA-2014:0293)	Nessus	Red Hat Local Security Checks	medium
73009	Oracle Linux 6 : udisks (ELSA-2014-0293)	Nessus	Oracle Linux Local Security Checks	high
72988	CentOS 6 : udisks (CESA-2014:0293)	Nessus	CentOS Local Security Checks	medium
72943	Slackware 14.0 / 14.1 / current : udisks, udisks2 (SSA:2014-070-01)	Nessus	Slackware Local Security Checks	medium
72925	Ubuntu 12.04 LTS / 12.10 / 13.10 : udisks, udisks2 vulnerability (USN-2142-1)	Nessus	Ubuntu Local Security Checks	medium
72912	Debian DSA-2872-1 : udisks - several vulnerabilities	Nessus	Debian Local Security Checks	medium

Detections

Analytics

CVE-2014-0004

critical

Tenable Plugins

medium

medium

medium

medium

medium

medium

medium

medium

medium

medium

medium

high

medium

medium

medium

medium