5.5

CVE-2008-3275

Exploit
The (1) real_lookup and (2) __lookup_hash functions in fs/namei.c in the vfs implementation in the Linux kernel before 2.6.25.15 do not prevent creation of a child dentry for a deleted (aka S_DEAD) directory, which allows local users to cause a denial of service ("overflow" of the UBIFS orphan area) via a series of attempted file creations within deleted directories.
Daten sind bereitgestellt durch National Vulnerability Database (NVD)
Linux ≫ Linux Kernel Version < 2.6.25.15
Debian ≫ Debian Linux Version4.0
Canonical ≫ Ubuntu Linux Version6.06 SwEditionlts
Canonical ≫ Ubuntu Linux Version7.04
Canonical ≫ Ubuntu Linux Version7.10
Canonical ≫ Ubuntu Linux Version8.04 SwEditionlts
Suse ≫ Suse Linux Enterprise Desktop Version10 Updatesp1
Suse ≫ Suse Linux Enterprise Server Version10 Updatesp1
Zu dieser CVE wurde keine Warnung gefunden.
EPSS Metriken
Typ Quelle Score Percentile
EPSS FIRST.org 0.51% 0.393
CVSS Metriken
Quelle Base Score Exploit Score Impact Score Vector String
nvd@nist.gov 5.5 1.8 3.6
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H
nvd@nist.gov 4.9 3.9 6.9
AV:L/AC:L/Au:N/C:N/I:N/A:C
CWE-120 Buffer Copy without Checking Size of Input ('Classic Buffer Overflow')

The product copies an input buffer to an output buffer without verifying that the size of the input buffer is less than the size of the output buffer.

http://secunia.com/advisories/33280
Broken Link
http://www.redhat.com/support/errata/RHSA-2008-0787.html
Broken Link
http://secunia.com/advisories/33201
Broken Link
http://www.redhat.com/support/errata/RHSA-2008-0973.html
Broken Link
http://secunia.com/advisories/32023
Broken Link
http://www.redhat.com/support/errata/RHSA-2008-0885.html
Broken Link
http://secunia.com/advisories/31551
Broken Link
http://www.debian.org/security/2008/dsa-1630
Patch
Third Party Advisory
http://lists.opensuse.org/opensuse-security-announce/2008-10/msg00001.html
Third Party Advisory
Mailing List
http://lists.opensuse.org/opensuse-security-announce/2008-10/msg00003.html
Third Party Advisory
Mailing List
http://secunia.com/advisories/31836
Broken Link
http://secunia.com/advisories/32104
Broken Link
http://www.mandriva.com/security/advisories?name=MDVSA-2008:220
Broken Link
http://secunia.com/advisories/31614
Broken Link
https://usn.ubuntu.com/637-1/
Third Party Advisory
http://secunia.com/advisories/31881
Broken Link
http://secunia.com/advisories/32190
Broken Link
http://www.debian.org/security/2008/dsa-1636
Patch
Third Party Advisory
http://www.redhat.com/support/errata/RHSA-2008-0857.html
Broken Link
http://git.kernel.org/?p=linux/kernel/git/torvalds/linux-2.6.git%3Ba=commit%3Bh=d70b67c8bc72ee23b55381bd6a884f4796692f77
http://kernel.org/pub/linux/kernel/v2.6/ChangeLog-2.6.25.15
Broken Link
http://lkml.org/lkml/2008/7/2/83
Third Party Advisory
Exploit
Mailing List
http://secunia.com/advisories/32344
Broken Link
http://secunia.com/advisories/33556
Broken Link
http://www.redhat.com/support/errata/RHSA-2009-0014.html
Broken Link
http://www.securityfocus.com/bid/30647
Patch
Third Party Advisory
VDB Entry
http://www.securitytracker.com/id?1020739
Third Party Advisory
VDB Entry
http://www.vupen.com/english/advisories/2008/2430
Broken Link
https://bugzilla.redhat.com/show_bug.cgi?id=457858
Patch
Third Party Advisory
Issue Tracking
https://exchange.xforce.ibmcloud.com/vulnerabilities/44410
Third Party Advisory
VDB Entry
https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A10744
Third Party Advisory
https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A6551
Third Party Advisory