crafted reiserfs filesystem image local DoS (reboot)
Bug #276350 reported by
David Maciejak
Affects | Status | Importance | Assigned to | Milestone | |
---|---|---|---|---|---|
Linux |
Confirmed
|
High
|
|||
linux (Ubuntu) |
Confirmed
|
Wishlist
|
Unassigned |
Bug Description
Binary package hint: linux-image-
lsb_release -rd
Description: Ubuntu 8.04.1
Release: 8.04
uname -a
Linux desktop 2.6.24-19-generic #1 SMP Wed Aug 20 22:56:21 UTC 2008 i686 GNU/Linux
Hi,
I am playing around with some filesystems, got some weird results I would like to share with you.
Just uncompress the reiserfs_
"mount reiserfs_
Regards,
David Maciejak
Fortinet's FortiGuard Global Security Research Team
Changed in linux: | |
status: | Unknown → Confirmed |
Changed in linux (Ubuntu): | |
importance: | Undecided → Wishlist |
Changed in linux: | |
importance: | Unknown → High |
To post a comment you must log in.
Another point, kern.log seems ok:
Sep 30 16:22:37 koma-desktop kernel: [ 95.120581] loop: module loaded
Sep 30 16:22:38 koma-desktop kernel: [ 95.775658] ReiserFS: loop0: found reiserfs format "3.6" with standard journal
Sep 30 16:22:38 koma-desktop kernel: [ 95.775665] ReiserFS: loop0: using ordered data mode
Sep 30 16:22:38 koma-desktop kernel: [ 95.817492] ReiserFS: loop0: journal params: device loop0, size 8125, journal first block 66, max trans len 256, max batch 225, max commit age 30, max trans age 30
Sep 30 16:22:38 koma-desktop kernel: [ 95.817898] ReiserFS: loop0: checking transaction log (loop0)
Sep 30 16:22:41 koma-desktop kernel: [ 97.088523] ReiserFS: loop0: Using r5 hash to sort names