3.6

CVE-2009-0834

The audit_syscall_entry function in the Linux kernel 2.6.28.7 and earlier on the x86_64 platform does not properly handle (1) a 32-bit process making a 64-bit syscall or (2) a 64-bit process making a 32-bit syscall, which allows local users to bypass certain syscall audit configurations via crafted syscalls, a related issue to CVE-2009-0342 and CVE-2009-0343.

Data is provided by the National Vulnerability Database (NVD)
Linux ≫ Linux Kernel Version <= 2.6.28.7
Debian ≫ Debian Linux Version4.0
Debian ≫ Debian Linux Version5.0
Canonical ≫ Ubuntu Linux Version7.10
Canonical ≫ Ubuntu Linux Version8.04 SwEdition-
Canonical ≫ Ubuntu Linux Version8.10
Redhat ≫ Enterprise Linux Eus Version4.7
Redhat ≫ Enterprise Linux Eus Version5.3
Opensuse ≫ Opensuse Version10.3
Opensuse ≫ Opensuse Version11.0
Suse ≫ Linux Enterprise Desktop Version10 Updatesp2
Suse ≫ Linux Enterprise Server Version10 Updatesp2
Zu dieser CVE wurde keine CISA KEV oder CERT.AT-Warnung gefunden.
EPSS Metriken
Type Source Score Percentile
EPSS FIRST.org 0.06% 0.169
CVSS Metriken
Source Base Score Exploit Score Impact Score Vector string
nvd@nist.gov 3.6 3.9 4.9
AV:L/AC:L/Au:N/C:P/I:P/A:N
http://www.securityfocus.com/bid/33951
Third Party Advisory
VDB Entry
http://www.securitytracker.com/id?1022153
Third Party Advisory
VDB Entry
https://bugzilla.redhat.com/show_bug.cgi?id=487990
Patch
Third Party Advisory
Issue Tracking