PT-2026-65465 · Xen · Xen

Syed Abdul

·

CVE-2026-62423

·

Publicado

2026-07-28

·

Atualizado

2026-07-28

CVSS v3.1

5.5

Média

VetorAV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H
[This CNA information record relates to multiple CVEs; the text explains which aspects/vulnerabilities correspond to which CVE.]
The directory and Rock Ridge / SUSP walk in libfsimage's iso9660 driver derives several lengths directly from attacker-controlled on-disk fields without validating them:
  • The directory loop itself assumes a good record length. This is CVE-2026-42494.
  • The calculation of the System Use area may underflow. This is CVE-2026-42495.
  • The Rock Ridge extension loop assumes a good (inner) record length. This is CVE-2026-62423.
  • The Rock Ridge NM record processing assumes a good entry length. This is CVE-2026-62424.
  • The Rock Ridge CE record processing assumes a good size and offset. This is CVE-2026-62425.

Correção

Encontrou algum problema na descrição? Tem algo a acrescentar? Fique à vontade para nos escrever 👾
dbugs@ptsecurity.com

Enumeração de Fraquezas

CWE-130

Identificadores relacionados

CVE-2026-62423

Produtos afetados

Xen