CVE-2008-5029

Exploit

EPSS 0.5%
Veröffentlicht 10.11.2008 16:15:12
Zuletzt bearbeitet 16.06.2026 22:59:06
Erkennungen
Login

The __scm_destroy function in net/core/scm.c in the Linux kernel 2.6.27.4, 2.6.26, and earlier makes indirect recursive calls to itself through calls to the fput function, which allows local users to cause a denial of service (panic) via vectors related to sending an SCM_RIGHTS message through a UNIX domain socket and closing file descriptors.

Betroffene Produkte Warnungen 0 Metriken 2 CWE 0 Referenzen 39

NVD 114 VulnDex Vulnerability Enrichment 0

Daten sind bereitgestellt durch National Vulnerability Database (NVD)

Linux ≫ Linux Kernel Version <= 2.6.27.4

Linux ≫ Linux Kernel Version 2.2.27

Linux ≫ Linux Kernel Version 2.4.36

Linux ≫ Linux Kernel Version 2.4.36.1

Linux ≫ Linux Kernel Version 2.4.36.2

Linux ≫ Linux Kernel Version 2.4.36.3

Linux ≫ Linux Kernel Version 2.4.36.4

Linux ≫ Linux Kernel Version 2.4.36.5

Linux ≫ Linux Kernel Version 2.4.36.6

Linux ≫ Linux Kernel Version 2.6

Linux ≫ Linux Kernel Version 2.6.18

Linux ≫ Linux Kernel Version 2.6.18 Update rc1

Linux ≫ Linux Kernel Version 2.6.18 Update rc2

Linux ≫ Linux Kernel Version 2.6.18 Update rc3

Linux ≫ Linux Kernel Version 2.6.18 Update rc4

Linux ≫ Linux Kernel Version 2.6.18 Update rc5

Linux ≫ Linux Kernel Version 2.6.18 Update rc6

Linux ≫ Linux Kernel Version 2.6.18 Update rc7

Linux ≫ Linux Kernel Version 2.6.19.4

Linux ≫ Linux Kernel Version 2.6.19.5

Linux ≫ Linux Kernel Version 2.6.19.6

Linux ≫ Linux Kernel Version 2.6.19.7

Linux ≫ Linux Kernel Version 2.6.20.16

Linux ≫ Linux Kernel Version 2.6.20.17

Linux ≫ Linux Kernel Version 2.6.20.18

Linux ≫ Linux Kernel Version 2.6.20.19

Linux ≫ Linux Kernel Version 2.6.20.20

Linux ≫ Linux Kernel Version 2.6.20.21

Linux ≫ Linux Kernel Version 2.6.21.5

Linux ≫ Linux Kernel Version 2.6.21.6

Linux ≫ Linux Kernel Version 2.6.21.7

Linux ≫ Linux Kernel Version 2.6.22

Linux ≫ Linux Kernel Version 2.6.22.1

Linux ≫ Linux Kernel Version 2.6.22.2

Linux ≫ Linux Kernel Version 2.6.22.8

Linux ≫ Linux Kernel Version 2.6.22.9

Linux ≫ Linux Kernel Version 2.6.22.10

Linux ≫ Linux Kernel Version 2.6.22.11

Linux ≫ Linux Kernel Version 2.6.22.12

Linux ≫ Linux Kernel Version 2.6.22.13

Linux ≫ Linux Kernel Version 2.6.22.14

Linux ≫ Linux Kernel Version 2.6.22.15

Linux ≫ Linux Kernel Version 2.6.22.17

Linux ≫ Linux Kernel Version 2.6.22.18

Linux ≫ Linux Kernel Version 2.6.22.19

Linux ≫ Linux Kernel Version 2.6.22.20

Linux ≫ Linux Kernel Version 2.6.22.21

Linux ≫ Linux Kernel Version 2.6.22.22

Linux ≫ Linux Kernel Version 2.6.22_rc1

Linux ≫ Linux Kernel Version 2.6.22_rc7

Linux ≫ Linux Kernel Version 2.6.23

Linux ≫ Linux Kernel Version 2.6.23.8

Linux ≫ Linux Kernel Version 2.6.23.9

Linux ≫ Linux Kernel Version 2.6.23.10

Linux ≫ Linux Kernel Version 2.6.23.11

Linux ≫ Linux Kernel Version 2.6.23.12

Linux ≫ Linux Kernel Version 2.6.23.13

Linux ≫ Linux Kernel Version 2.6.23.15

Linux ≫ Linux Kernel Version 2.6.23.16

Linux ≫ Linux Kernel Version 2.6.23.17

Linux ≫ Linux Kernel Version 2.6.23_rc1

Linux ≫ Linux Kernel Version 2.6.24

Linux ≫ Linux Kernel Version 2.6.24.1

Linux ≫ Linux Kernel Version 2.6.24.2

Linux ≫ Linux Kernel Version 2.6.24.3

Linux ≫ Linux Kernel Version 2.6.24.4

Linux ≫ Linux Kernel Version 2.6.24.5

Linux ≫ Linux Kernel Version 2.6.24.6

Linux ≫ Linux Kernel Version 2.6.24.7

Linux ≫ Linux Kernel Version 2.6.24_rc1

Linux ≫ Linux Kernel Version 2.6.24_rc4

Linux ≫ Linux Kernel Version 2.6.24_rc5

Linux ≫ Linux Kernel Version 2.6.25

Linux ≫ Linux Kernel Version 2.6.25 Edition x86_64

Linux ≫ Linux Kernel Version 2.6.25.1

Linux ≫ Linux Kernel Version 2.6.25.1 Edition x86_64

Linux ≫ Linux Kernel Version 2.6.25.2

Linux ≫ Linux Kernel Version 2.6.25.2 Edition x86_64

Linux ≫ Linux Kernel Version 2.6.25.3

Linux ≫ Linux Kernel Version 2.6.25.3 Edition x86_64

Linux ≫ Linux Kernel Version 2.6.25.4

Linux ≫ Linux Kernel Version 2.6.25.4 Edition x86_64

Linux ≫ Linux Kernel Version 2.6.25.5

Linux ≫ Linux Kernel Version 2.6.25.5 Edition x86_64

Linux ≫ Linux Kernel Version 2.6.25.6

Linux ≫ Linux Kernel Version 2.6.25.6 Edition x86_64

Linux ≫ Linux Kernel Version 2.6.25.7

Linux ≫ Linux Kernel Version 2.6.25.7 Edition x86_64

Linux ≫ Linux Kernel Version 2.6.25.8

Linux ≫ Linux Kernel Version 2.6.25.8 Edition x86_64

Linux ≫ Linux Kernel Version 2.6.25.9

Linux ≫ Linux Kernel Version 2.6.25.9 Edition x86_64

Linux ≫ Linux Kernel Version 2.6.25.10

Linux ≫ Linux Kernel Version 2.6.25.10 Edition x86_64

Linux ≫ Linux Kernel Version 2.6.25.11

Linux ≫ Linux Kernel Version 2.6.25.11 Edition x86_64

Linux ≫ Linux Kernel Version 2.6.25.12

Linux ≫ Linux Kernel Version 2.6.25.12 Edition x86_64

Linux ≫ Linux Kernel Version 2.6.25.13

Linux ≫ Linux Kernel Version 2.6.25.14

Linux ≫ Linux Kernel Version 2.6.25.15

Linux ≫ Linux Kernel Version 2.6.25.16

Linux ≫ Linux Kernel Version 2.6.25.17

Linux ≫ Linux Kernel Version 2.6.26

Linux ≫ Linux Kernel Version 2.6.26 Update rc4

Linux ≫ Linux Kernel Version 2.6.26.1

Linux ≫ Linux Kernel Version 2.6.26.2

Linux ≫ Linux Kernel Version 2.6.26.3

Linux ≫ Linux Kernel Version 2.6.26.4

Linux ≫ Linux Kernel Version 2.6.26.5

Linux ≫ Linux Kernel Version 2.6.27

Linux ≫ Linux Kernel Version 2.6.27.1

Linux ≫ Linux Kernel Version 2.6.27.2

Linux ≫ Linux Kernel Version 2.6.27.3

Zu dieser CVE wurde keine Warnung gefunden.

EPSS Metriken
Typ	Quelle	Score	Percentile
EPSS	FIRST.org	0.5%	0.39

CVSS Metriken
Quelle	Base Score	Exploit Score	Impact Score	Vector String
NIST	4.9	3.9	6.9	AV:L/AC:L/Au:N/C:N/I:N/A:C

Es wurden noch keine Informationen zu CWE veröffentlicht.

http://secunia.com/advisories/32918

http://www.ubuntu.com/usn/usn-679-1

http://secunia.com/advisories/33586

http://www.redhat.com/support/errata/RHSA-2009-0009.html

http://secunia.com/advisories/33556

http://www.redhat.com/support/errata/RHSA-2009-0014.html

http://lists.opensuse.org/opensuse-security-announce/2008-12/msg00001.html

http://secunia.com/advisories/32998

http://secunia.com/advisories/33180

http://www.debian.org/security/2008/dsa-1681

http://www.debian.org/security/2008/dsa-1687

http://lists.opensuse.org/opensuse-security-announce/2009-01/msg00006.html

http://lists.opensuse.org/opensuse-security-announce/2009-01/msg00010.html

http://secunia.com/advisories/33641

http://secunia.com/advisories/33704

http://www.mandriva.com/security/advisories?name=MDVSA-2008:234

http://archives.neohapsis.com/archives/bugtraq/2009-01/0006.html

http://darkircop.org/unix.c

Exploit

http://kernel.org/pub/linux/kernel/v2.4/ChangeLog-2.4.36.9

http://marc.info/?l=linux-netdev&m=122593044330973&w=2

http://secunia.com/advisories/33623

http://securityreason.com/securityalert/4573

http://www.openwall.com/lists/oss-security/2008/11/06/1

http://www.redhat.com/support/errata/RHSA-2009-0225.html

http://www.securityfocus.com/archive/1/499700/100/0/threaded

http://www.securityfocus.com/archive/1/499744/100/0/threaded

http://www.securityfocus.com/archive/1/512019/100/0/threaded

http://www.securityfocus.com/bid/32154

Patch

http://www.securityfocus.com/bid/33079

http://www.securitytracker.com/id?1021292

http://www.securitytracker.com/id?1021511

https://bugzilla.redhat.com/show_bug.cgi?id=470201

https://exchange.xforce.ibmcloud.com/vulnerabilities/46538

https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A11694

https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A9558

https://rhn.redhat.com/errata/RHSA-2009-1550.html

https://nvd.nist.gov/vuln/detail/CVE-2008-5029

CVE Source (NVD)

https://cveawg.mitre.org/api/cve/CVE-2008-5029

CVE Source (JSON)

https://euvd.enisa.europa.eu/vulnerability/CVE-2008-5029

EUVD

Team-orientierte Vulnerability Management Plattform

Features der Plattform

CVE-2008-5029