4.9

CVE-2008-3535

Exploit
Off-by-one error in the iov_iter_advance function in mm/filemap.c in the Linux kernel before 2.6.27-rc2 allows local users to cause a denial of service (system crash) via a certain sequence of file I/O operations with readv and writev, as demonstrated by testcases/kernel/fs/ftest/ftest03 from the Linux Test Project.
Daten sind bereitgestellt durch National Vulnerability Database (NVD)
Linux ≫ Linux Kernel Version < 2.6.27
Linux ≫ Linux Kernel Version2.6.27 Update-
Linux ≫ Linux Kernel Version2.6.27 Updaterc1
Debian ≫ Debian Linux Version4.0
Canonical ≫ Ubuntu Linux Version6.06
Canonical ≫ Ubuntu Linux Version7.10
Canonical ≫ Ubuntu Linux Version8.04 SwEdition-
Zu dieser CVE wurde keine Warnung gefunden.
EPSS Metriken
Typ Quelle Score Percentile
EPSS FIRST.org 0.53% 0.406
CVSS Metriken
Quelle Base Score Exploit Score Impact Score Vector String
nvd@nist.gov 4.9 3.9 6.9
AV:L/AC:L/Au:N/C:N/I:N/A:C
CWE-193 Off-by-one Error

A product calculates or uses an incorrect maximum or minimum value that is 1 more, or 1 less, than the correct value.

http://secunia.com/advisories/32393
Third Party Advisory
http://www.ubuntu.com/usn/usn-659-1
Third Party Advisory
http://secunia.com/advisories/31881
Third Party Advisory
http://secunia.com/advisories/32190
Third Party Advisory
http://www.debian.org/security/2008/dsa-1636
Third Party Advisory
http://www.redhat.com/support/errata/RHSA-2008-0857.html
Third Party Advisory
http://mirror.celinuxforum.org/gitstat/commit-detail.php?commit=94ad374a0751f40d25e22e036c37f7263569d24c
Broken Link
http://www.kernel.org/pub/linux/kernel/v2.6/testing/ChangeLog-2.6.27-rc2
Broken Link
http://www.lkml.org/lkml/2008/7/30/446
Third Party Advisory
Exploit
http://www.securityfocus.com/bid/31132
Third Party Advisory
VDB Entry
https://exchange.xforce.ibmcloud.com/vulnerabilities/44492
Third Party Advisory
VDB Entry