High severity7.3NVD Advisory· Published Mar 30, 2016· Updated May 6, 2026
CVE-2015-8837
CVE-2015-8837
Description
Stack-based buffer overflow in the isofs_real_readdir function in isofs.c in FuseISO 20070708 allows remote attackers to cause a denial of service (application crash) or possibly execute arbitrary code via a long pathname in an ISO file.
Affected products
5cpe:2.3:o:debian:debian_linux:7.0:*:*:*:*:*:*:*+ 1 more
- cpe:2.3:o:debian:debian_linux:7.0:*:*:*:*:*:*:*
- cpe:2.3:o:debian:debian_linux:8.0:*:*:*:*:*:*:*
cpe:2.3:o:fedoraproject:fedora:16:*:*:*:*:*:*:*+ 1 more
- cpe:2.3:o:fedoraproject:fedora:16:*:*:*:*:*:*:*
- cpe:2.3:o:fedoraproject:fedora:17:*:*:*:*:*:*:*
Patches
0No patches discovered yet.
Vulnerability mechanics
AI mechanics synthesis has not run for this CVE yet.
References
6- bugzilla.redhat.com/show_bug.cginvdExploitIssue TrackingPatch
- www.debian.org/security/2016/dsa-3551nvdThird Party Advisory
- bugzilla.redhat.com/show_bug.cginvdIssue Tracking
- www.openwall.com/lists/oss-security/2015/02/06/7nvd
- www.openwall.com/lists/oss-security/2015/02/23/9nvd
- security.gentoo.org/glsa/202007-20nvd
News mentions
0No linked articles in our index yet.