4.9

CVE-2008-5029

Exploit
The __scm_destroy function in net/core/scm.c in the Linux kernel 2.6.27.4, 2.6.26, and earlier makes indirect recursive calls to itself through calls to the fput function, which allows local users to cause a denial of service (panic) via vectors related to sending an SCM_RIGHTS message through a UNIX domain socket and closing file descriptors.
Daten sind bereitgestellt durch National Vulnerability Database (NVD)
LinuxLinux Kernel Version <= 2.6.27.4
LinuxLinux Kernel Version2.2.27
LinuxLinux Kernel Version2.4.36
LinuxLinux Kernel Version2.4.36.1
LinuxLinux Kernel Version2.4.36.2
LinuxLinux Kernel Version2.4.36.3
LinuxLinux Kernel Version2.4.36.4
LinuxLinux Kernel Version2.4.36.5
LinuxLinux Kernel Version2.4.36.6
LinuxLinux Kernel Version2.6
LinuxLinux Kernel Version2.6.18
LinuxLinux Kernel Version2.6.18 Updaterc1
LinuxLinux Kernel Version2.6.18 Updaterc2
LinuxLinux Kernel Version2.6.18 Updaterc3
LinuxLinux Kernel Version2.6.18 Updaterc4
LinuxLinux Kernel Version2.6.18 Updaterc5
LinuxLinux Kernel Version2.6.18 Updaterc6
LinuxLinux Kernel Version2.6.18 Updaterc7
LinuxLinux Kernel Version2.6.19.4
LinuxLinux Kernel Version2.6.19.5
LinuxLinux Kernel Version2.6.19.6
LinuxLinux Kernel Version2.6.19.7
LinuxLinux Kernel Version2.6.20.16
LinuxLinux Kernel Version2.6.20.17
LinuxLinux Kernel Version2.6.20.18
LinuxLinux Kernel Version2.6.20.19
LinuxLinux Kernel Version2.6.20.20
LinuxLinux Kernel Version2.6.20.21
LinuxLinux Kernel Version2.6.21.5
LinuxLinux Kernel Version2.6.21.6
LinuxLinux Kernel Version2.6.21.7
LinuxLinux Kernel Version2.6.22
LinuxLinux Kernel Version2.6.22.1
LinuxLinux Kernel Version2.6.22.2
LinuxLinux Kernel Version2.6.22.8
LinuxLinux Kernel Version2.6.22.9
LinuxLinux Kernel Version2.6.22.10
LinuxLinux Kernel Version2.6.22.11
LinuxLinux Kernel Version2.6.22.12
LinuxLinux Kernel Version2.6.22.13
LinuxLinux Kernel Version2.6.22.14
LinuxLinux Kernel Version2.6.22.15
LinuxLinux Kernel Version2.6.22.17
LinuxLinux Kernel Version2.6.22.18
LinuxLinux Kernel Version2.6.22.19
LinuxLinux Kernel Version2.6.22.20
LinuxLinux Kernel Version2.6.22.21
LinuxLinux Kernel Version2.6.22.22
LinuxLinux Kernel Version2.6.22_rc1
LinuxLinux Kernel Version2.6.22_rc7
LinuxLinux Kernel Version2.6.23
LinuxLinux Kernel Version2.6.23.8
LinuxLinux Kernel Version2.6.23.9
LinuxLinux Kernel Version2.6.23.10
LinuxLinux Kernel Version2.6.23.11
LinuxLinux Kernel Version2.6.23.12
LinuxLinux Kernel Version2.6.23.13
LinuxLinux Kernel Version2.6.23.15
LinuxLinux Kernel Version2.6.23.16
LinuxLinux Kernel Version2.6.23.17
LinuxLinux Kernel Version2.6.23_rc1
LinuxLinux Kernel Version2.6.24
LinuxLinux Kernel Version2.6.24.1
LinuxLinux Kernel Version2.6.24.2
LinuxLinux Kernel Version2.6.24.3
LinuxLinux Kernel Version2.6.24.4
LinuxLinux Kernel Version2.6.24.5
LinuxLinux Kernel Version2.6.24.6
LinuxLinux Kernel Version2.6.24.7
LinuxLinux Kernel Version2.6.24_rc1
LinuxLinux Kernel Version2.6.24_rc4
LinuxLinux Kernel Version2.6.24_rc5
LinuxLinux Kernel Version2.6.25
LinuxLinux Kernel Version2.6.25 Editionx86_64
LinuxLinux Kernel Version2.6.25.1
LinuxLinux Kernel Version2.6.25.1 Editionx86_64
LinuxLinux Kernel Version2.6.25.2
LinuxLinux Kernel Version2.6.25.2 Editionx86_64
LinuxLinux Kernel Version2.6.25.3
LinuxLinux Kernel Version2.6.25.3 Editionx86_64
LinuxLinux Kernel Version2.6.25.4
LinuxLinux Kernel Version2.6.25.4 Editionx86_64
LinuxLinux Kernel Version2.6.25.5
LinuxLinux Kernel Version2.6.25.5 Editionx86_64
LinuxLinux Kernel Version2.6.25.6
LinuxLinux Kernel Version2.6.25.6 Editionx86_64
LinuxLinux Kernel Version2.6.25.7
LinuxLinux Kernel Version2.6.25.7 Editionx86_64
LinuxLinux Kernel Version2.6.25.8
LinuxLinux Kernel Version2.6.25.8 Editionx86_64
LinuxLinux Kernel Version2.6.25.9
LinuxLinux Kernel Version2.6.25.9 Editionx86_64
LinuxLinux Kernel Version2.6.25.10
LinuxLinux Kernel Version2.6.25.10 Editionx86_64
LinuxLinux Kernel Version2.6.25.11
LinuxLinux Kernel Version2.6.25.11 Editionx86_64
LinuxLinux Kernel Version2.6.25.12
LinuxLinux Kernel Version2.6.25.12 Editionx86_64
LinuxLinux Kernel Version2.6.25.13
LinuxLinux Kernel Version2.6.25.14
LinuxLinux Kernel Version2.6.25.15
LinuxLinux Kernel Version2.6.25.16
LinuxLinux Kernel Version2.6.25.17
LinuxLinux Kernel Version2.6.26
LinuxLinux Kernel Version2.6.26 Updaterc4
LinuxLinux Kernel Version2.6.26.1
LinuxLinux Kernel Version2.6.26.2
LinuxLinux Kernel Version2.6.26.3
LinuxLinux Kernel Version2.6.26.4
LinuxLinux Kernel Version2.6.26.5
LinuxLinux Kernel Version2.6.27
LinuxLinux Kernel Version2.6.27.1
LinuxLinux Kernel Version2.6.27.2
LinuxLinux Kernel Version2.6.27.3
Zu dieser CVE wurde keine Warnung gefunden.
EPSS Metriken
Typ Quelle Score Percentile
EPSS FIRST.org 0.5% 0.39
CVSS Metriken
Quelle Base Score Exploit Score Impact Score Vector String
NIST 4.9 3.9 6.9
AV:L/AC:L/Au:N/C:N/I:N/A:C
Es wurden noch keine Informationen zu CWE veröffentlicht.
http://secunia.com/advisories/32918
http://www.ubuntu.com/usn/usn-679-1
http://secunia.com/advisories/33586
http://www.redhat.com/support/errata/RHSA-2009-0009.html
http://secunia.com/advisories/33556
http://www.redhat.com/support/errata/RHSA-2009-0014.html
http://lists.opensuse.org/opensuse-security-announce/2008-12/msg00001.html
http://secunia.com/advisories/32998
http://secunia.com/advisories/33180
http://www.debian.org/security/2008/dsa-1681
http://www.debian.org/security/2008/dsa-1687
http://lists.opensuse.org/opensuse-security-announce/2009-01/msg00006.html
http://lists.opensuse.org/opensuse-security-announce/2009-01/msg00010.html
http://secunia.com/advisories/33641
http://secunia.com/advisories/33704
http://www.mandriva.com/security/advisories?name=MDVSA-2008:234
http://archives.neohapsis.com/archives/bugtraq/2009-01/0006.html
http://darkircop.org/unix.c
Exploit
http://kernel.org/pub/linux/kernel/v2.4/ChangeLog-2.4.36.9
http://marc.info/?l=linux-netdev&m=122593044330973&w=2
http://secunia.com/advisories/33623
http://securityreason.com/securityalert/4573
http://www.openwall.com/lists/oss-security/2008/11/06/1
http://www.redhat.com/support/errata/RHSA-2009-0225.html
http://www.securityfocus.com/archive/1/499700/100/0/threaded
http://www.securityfocus.com/archive/1/499744/100/0/threaded
http://www.securityfocus.com/archive/1/512019/100/0/threaded
http://www.securityfocus.com/bid/32154
Patch
http://www.securityfocus.com/bid/33079
http://www.securitytracker.com/id?1021292
http://www.securitytracker.com/id?1021511
https://bugzilla.redhat.com/show_bug.cgi?id=470201
https://exchange.xforce.ibmcloud.com/vulnerabilities/46538
https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A11694
https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A9558
https://rhn.redhat.com/errata/RHSA-2009-1550.html