Lucene search

[email protected]CVE-2008-2137

HistoryMay 29, 2008 - 4:32 p.m.

CVE-2008-2137

2008-05-2916:32:00

CWE-264

[email protected]

web.nvd.nist.gov

cve-2008-2137

linux kernel

denial of service

mmap

span checks

nvd

security vulnerability

4.4 Medium

CVSS2

Attack Vector

LOCAL

Attack Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

PARTIAL

AV:L/AC:M/Au:N/C:P/I:P/A:P

5.8 Medium

AI Score

Confidence

Low

0.0004 Low

EPSS

Percentile

5.1%

JSON

The (1) sparc_mmap_check function in arch/sparc/kernel/sys_sparc.c and the (2) sparc64_mmap_check function in arch/sparc64/kernel/sys_sparc.c, in the Linux kernel 2.4 before 2.4.36.5 and 2.6 before 2.6.25.3, omit some virtual-address range (aka span) checks when the mmap MAP_FIXED bit is not set, which allows local users to cause a denial of service (panic) via unspecified mmap calls.

Affected configurations

NVD

Node

debiandebian_linuxMatch4.0sparc

linuxlinux_kernelMatch2.6.0

linuxlinux_kernelMatch2.6.1

linuxlinux_kernelMatch2.6.2

linuxlinux_kernelMatch2.6.3

linuxlinux_kernelMatch2.6.4

linuxlinux_kernelMatch2.6.5

linuxlinux_kernelMatch2.6.6

linuxlinux_kernelMatch2.6.7

linuxlinux_kernelMatch2.6.8

linuxlinux_kernelMatch2.6.9

linuxlinux_kernelMatch2.6.10

linuxlinux_kernelMatch2.6.11

linuxlinux_kernelMatch2.6.11.4

linuxlinux_kernelMatch2.6.11.5

linuxlinux_kernelMatch2.6.11.6

linuxlinux_kernelMatch2.6.11.7

linuxlinux_kernelMatch2.6.11.8

linuxlinux_kernelMatch2.6.11.11

linuxlinux_kernelMatch2.6.11.12

linuxlinux_kernelMatch2.6.12

linuxlinux_kernelMatch2.6.12.1

linuxlinux_kernelMatch2.6.12.2

linuxlinux_kernelMatch2.6.12.3

linuxlinux_kernelMatch2.6.12.4

linuxlinux_kernelMatch2.6.12.5

linuxlinux_kernelMatch2.6.12.6

linuxlinux_kernelMatch2.6.12.12

linuxlinux_kernelMatch2.6.12.22

linuxlinux_kernelMatch2.6.13

linuxlinux_kernelMatch2.6.13.1

linuxlinux_kernelMatch2.6.13.2

linuxlinux_kernelMatch2.6.13.3

linuxlinux_kernelMatch2.6.13.4

linuxlinux_kernelMatch2.6.14

linuxlinux_kernelMatch2.6.14.1

linuxlinux_kernelMatch2.6.14.2

linuxlinux_kernelMatch2.6.14.3

linuxlinux_kernelMatch2.6.14.4

linuxlinux_kernelMatch2.6.14.5

linuxlinux_kernelMatch2.6.15

linuxlinux_kernelMatch2.6.15.1

linuxlinux_kernelMatch2.6.15.2

linuxlinux_kernelMatch2.6.15.3

linuxlinux_kernelMatch2.6.15.4

linuxlinux_kernelMatch2.6.15.5

linuxlinux_kernelMatch2.6.15.11

linuxlinux_kernelMatch2.6.16

linuxlinux_kernelMatch2.6.16.13

linuxlinux_kernelMatch2.6.16.27

linuxlinux_kernelMatch2.6.17

linuxlinux_kernelMatch2.6.17.1

linuxlinux_kernelMatch2.6.17.2

linuxlinux_kernelMatch2.6.17.3

linuxlinux_kernelMatch2.6.17.5

linuxlinux_kernelMatch2.6.17.6

linuxlinux_kernelMatch2.6.17.7

linuxlinux_kernelMatch2.6.17.8

linuxlinux_kernelMatch2.6.17.10

linuxlinux_kernelMatch2.6.17.11

linuxlinux_kernelMatch2.6.17.12

linuxlinux_kernelMatch2.6.17.13

linuxlinux_kernelMatch2.6.17.14

linuxlinux_kernelMatch2.6.18

linuxlinux_kernelMatch2.6.18.1

linuxlinux_kernelMatch2.6.18.3

linuxlinux_kernelMatch2.6.18.4

linuxlinux_kernelMatch2.6.19

linuxlinux_kernelMatch2.6.19.1

linuxlinux_kernelMatch2.6.19.2

linuxlinux_kernelMatch2.6.20

linuxlinux_kernelMatch2.6.20.1

linuxlinux_kernelMatch2.6.20.2

linuxlinux_kernelMatch2.6.20.3

linuxlinux_kernelMatch2.6.20.4

linuxlinux_kernelMatch2.6.20.5

linuxlinux_kernelMatch2.6.20.8

linuxlinux_kernelMatch2.6.20.9

linuxlinux_kernelMatch2.6.20.11

linuxlinux_kernelMatch2.6.20.13

linuxlinux_kernelMatch2.6.20.15

linuxlinux_kernelMatch2.6.21

linuxlinux_kernelMatch2.6.21.1

linuxlinux_kernelMatch2.6.21.2

linuxlinux_kernelMatch2.6.21.4

linuxlinux_kernelMatch2.6.21.6

linuxlinux_kernelMatch2.6.21.7

linuxlinux_kernelMatch2.6.22

linuxlinux_kernelMatch2.6.22.3

linuxlinux_kernelMatch2.6.22.4

linuxlinux_kernelMatch2.6.22.5

linuxlinux_kernelMatch2.6.22.6

linuxlinux_kernelMatch2.6.22.7

linuxlinux_kernelMatch2.6.22.8

linuxlinux_kernelMatch2.6.22.11

linuxlinux_kernelMatch2.6.22.12

linuxlinux_kernelMatch2.6.22.13

linuxlinux_kernelMatch2.6.22.14

linuxlinux_kernelMatch2.6.22.15

linuxlinux_kernelMatch2.6.22.16

linuxlinux_kernelMatch2.6.22.17

linuxlinux_kernelMatch2.6.23

linuxlinux_kernelMatch2.6.23.1

linuxlinux_kernelMatch2.6.23.2

linuxlinux_kernelMatch2.6.23.3

linuxlinux_kernelMatch2.6.23.4

linuxlinux_kernelMatch2.6.23.5

linuxlinux_kernelMatch2.6.23.6

linuxlinux_kernelMatch2.6.23.7

linuxlinux_kernelMatch2.6.23.9

linuxlinux_kernelMatch2.6.23.14

linuxlinux_kernelMatch2.6.24.1

linuxlinux_kernelMatch2.6.24.2

linuxlinux_kernelMatch2.6.25

linuxlinux_kernelMatch2.6.25.1

linuxlinux_kernelMatch2.6.25.2

CPENameOperatorVersion
debian:debian_linuxdebian debian linuxeq4.0
linux:linux_kernellinux linux kerneleq2.6.0
linux:linux_kernellinux linux kerneleq2.6.1
linux:linux_kernellinux linux kerneleq2.6.2
linux:linux_kernellinux linux kerneleq2.6.3
linux:linux_kernellinux linux kerneleq2.6.4
linux:linux_kernellinux linux kerneleq2.6.5
linux:linux_kernellinux linux kerneleq2.6.6
linux:linux_kernellinux linux kerneleq2.6.7
linux:linux_kernellinux linux kerneleq2.6.8

CPE	Name	Operator	Version
debian:debian_linux	debian debian linux	eq	4.0
linux:linux_kernel	linux linux kernel	eq	2.6.0
linux:linux_kernel	linux linux kernel	eq	2.6.1
linux:linux_kernel	linux linux kernel	eq	2.6.2
linux:linux_kernel	linux linux kernel	eq	2.6.3
linux:linux_kernel	linux linux kernel	eq	2.6.4
linux:linux_kernel	linux linux kernel	eq	2.6.5
linux:linux_kernel	linux linux kernel	eq	2.6.6
linux:linux_kernel	linux linux kernel	eq	2.6.7
linux:linux_kernel	linux linux kernel	eq	2.6.8