4.9
CVE-2008-2372
- EPSS 0.39%
- Veröffentlicht 02.07.2008 16:41:00
- Zuletzt bearbeitet 16.06.2026 22:53:39
- CVE-Watchlists
- Unerledigt
LoginThe Linux kernel 2.6.24 and 2.6.25 before 2.6.25.9 allows local users to cause a denial of service (memory consumption) via a large number of calls to the get_user_pages function, which lacks a ZERO_PAGE optimization and results in allocation of "useless newly zeroed pages."
Daten sind bereitgestellt durch National Vulnerability Database (NVD)
Linux ≫ Linux Kernel Version2.6.24
Linux ≫ Linux Kernel Version2.6.25
Linux ≫ Linux Kernel Version2.6.25.1
Linux ≫ Linux Kernel Version2.6.25.2
Linux ≫ Linux Kernel Version2.6.25.3
Linux ≫ Linux Kernel Version2.6.25.4
Linux ≫ Linux Kernel Version2.6.25.5
Linux ≫ Linux Kernel Version2.6.25.6
Linux ≫ Linux Kernel Version2.6.25.7
Linux ≫ Linux Kernel Version2.6.25.8
| Typ | Quelle | Score | Percentile |
|---|---|---|---|
| EPSS | FIRST.org | 0.39% | 0.303 |
| Quelle | Base Score | Exploit Score | Impact Score | Vector String |
|---|---|---|---|---|
| NIST | 4.9 | 3.9 | 6.9 |
AV:L/AC:L/Au:N/C:N/I:N/A:C
|
CWE-20 Improper Input Validation
The product receives input or data, but it does not validate or incorrectly validates that the input has the properties that are required to process the data safely and correctly.
http://secunia.com/advisories/32485
http://www.redhat.com/support/errata/RHSA-2008-0957.html
http://secunia.com/advisories/31628
http://www.redhat.com/support/errata/RHSA-2008-0585.html
http://lists.opensuse.org/opensuse-security-announce/2008-07/msg00007.html
http://lists.opensuse.org/opensuse-security-announce/2008-07/msg00012.html
http://secunia.com/advisories/30982
http://lists.opensuse.org/opensuse-security-announce/2008-07/msg00009.html
http://secunia.com/advisories/30901
http://secunia.com/advisories/31202
http://wiki.rpath.com/wiki/Advisories:rPSA-2008-0207
https://issues.rpath.com/browse/RPL-2629
http://git.kernel.org/?p=linux/kernel/git/torvalds/linux-2.6.git%3Ba=commit%3Bh=89f5b7da2a6bad2e84670422ab8192382a5aeb9f
http://kernel.org/pub/linux/kernel/v2.6/ChangeLog-2.6.25.9
http://new-ubuntu-news.blogspot.com/2008/06/re-pending-stable-kernel-security_25.html
http://secunia.com/advisories/32393
http://www.ubuntu.com/usn/usn-659-1
http://www.ussg.iu.edu/hypermail/linux/kernel/0804.3/3203.html
https://exchange.xforce.ibmcloud.com/vulnerabilities/43550
https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A9383