Lucene search

[email protected]NVD:CVE-2008-2137

HistoryMay 29, 2008 - 4:32 p.m.

CVE-2008-2137

2008-05-2916:32:00

CWE-264

[email protected]

web.nvd.nist.gov

4.4 Medium

CVSS2

Attack Vector

LOCAL

Attack Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

PARTIAL

AV:L/AC:M/Au:N/C:P/I:P/A:P

5.9 Medium

AI Score

Confidence

Low

0.0004 Low

EPSS

Percentile

5.1%

JSON

The (1) sparc_mmap_check function in arch/sparc/kernel/sys_sparc.c and the (2) sparc64_mmap_check function in arch/sparc64/kernel/sys_sparc.c, in the Linux kernel 2.4 before 2.4.36.5 and 2.6 before 2.6.25.3, omit some virtual-address range (aka span) checks when the mmap MAP_FIXED bit is not set, which allows local users to cause a denial of service (panic) via unspecified mmap calls.

Affected configurations

NVD

Node

debiandebian_linuxMatch4.0sparc

linuxlinux_kernelMatch2.6.0

linuxlinux_kernelMatch2.6.1

linuxlinux_kernelMatch2.6.2

linuxlinux_kernelMatch2.6.3

linuxlinux_kernelMatch2.6.4

linuxlinux_kernelMatch2.6.5

linuxlinux_kernelMatch2.6.6

linuxlinux_kernelMatch2.6.7

linuxlinux_kernelMatch2.6.8

linuxlinux_kernelMatch2.6.9

linuxlinux_kernelMatch2.6.10

linuxlinux_kernelMatch2.6.11

linuxlinux_kernelMatch2.6.11.4

linuxlinux_kernelMatch2.6.11.5

linuxlinux_kernelMatch2.6.11.6

linuxlinux_kernelMatch2.6.11.7

linuxlinux_kernelMatch2.6.11.8

linuxlinux_kernelMatch2.6.11.11

linuxlinux_kernelMatch2.6.11.12

linuxlinux_kernelMatch2.6.12

linuxlinux_kernelMatch2.6.12.1

linuxlinux_kernelMatch2.6.12.2

linuxlinux_kernelMatch2.6.12.3

linuxlinux_kernelMatch2.6.12.4

linuxlinux_kernelMatch2.6.12.5

linuxlinux_kernelMatch2.6.12.6

linuxlinux_kernelMatch2.6.12.12

linuxlinux_kernelMatch2.6.12.22

linuxlinux_kernelMatch2.6.13

linuxlinux_kernelMatch2.6.13.1

linuxlinux_kernelMatch2.6.13.2

linuxlinux_kernelMatch2.6.13.3

linuxlinux_kernelMatch2.6.13.4

linuxlinux_kernelMatch2.6.14

linuxlinux_kernelMatch2.6.14.1

linuxlinux_kernelMatch2.6.14.2

linuxlinux_kernelMatch2.6.14.3

linuxlinux_kernelMatch2.6.14.4

linuxlinux_kernelMatch2.6.14.5

linuxlinux_kernelMatch2.6.15

linuxlinux_kernelMatch2.6.15.1

linuxlinux_kernelMatch2.6.15.2

linuxlinux_kernelMatch2.6.15.3

linuxlinux_kernelMatch2.6.15.4

linuxlinux_kernelMatch2.6.15.5

linuxlinux_kernelMatch2.6.15.11

linuxlinux_kernelMatch2.6.16

linuxlinux_kernelMatch2.6.16.13

linuxlinux_kernelMatch2.6.16.27

linuxlinux_kernelMatch2.6.17

linuxlinux_kernelMatch2.6.17.1

linuxlinux_kernelMatch2.6.17.2

linuxlinux_kernelMatch2.6.17.3

linuxlinux_kernelMatch2.6.17.5

linuxlinux_kernelMatch2.6.17.6

linuxlinux_kernelMatch2.6.17.7

linuxlinux_kernelMatch2.6.17.8

linuxlinux_kernelMatch2.6.17.10

linuxlinux_kernelMatch2.6.17.11

linuxlinux_kernelMatch2.6.17.12

linuxlinux_kernelMatch2.6.17.13

linuxlinux_kernelMatch2.6.17.14

linuxlinux_kernelMatch2.6.18

linuxlinux_kernelMatch2.6.18.1

linuxlinux_kernelMatch2.6.18.3

linuxlinux_kernelMatch2.6.18.4

linuxlinux_kernelMatch2.6.19

linuxlinux_kernelMatch2.6.19.1

linuxlinux_kernelMatch2.6.19.2

linuxlinux_kernelMatch2.6.20

linuxlinux_kernelMatch2.6.20.1

linuxlinux_kernelMatch2.6.20.2

linuxlinux_kernelMatch2.6.20.3

linuxlinux_kernelMatch2.6.20.4

linuxlinux_kernelMatch2.6.20.5

linuxlinux_kernelMatch2.6.20.8

linuxlinux_kernelMatch2.6.20.9

linuxlinux_kernelMatch2.6.20.11

linuxlinux_kernelMatch2.6.20.13

linuxlinux_kernelMatch2.6.20.15

linuxlinux_kernelMatch2.6.21

linuxlinux_kernelMatch2.6.21.1

linuxlinux_kernelMatch2.6.21.2

linuxlinux_kernelMatch2.6.21.4

linuxlinux_kernelMatch2.6.21.6

linuxlinux_kernelMatch2.6.21.7

linuxlinux_kernelMatch2.6.22

linuxlinux_kernelMatch2.6.22.3

linuxlinux_kernelMatch2.6.22.4

linuxlinux_kernelMatch2.6.22.5

linuxlinux_kernelMatch2.6.22.6

linuxlinux_kernelMatch2.6.22.7

linuxlinux_kernelMatch2.6.22.8

linuxlinux_kernelMatch2.6.22.11

linuxlinux_kernelMatch2.6.22.12

linuxlinux_kernelMatch2.6.22.13

linuxlinux_kernelMatch2.6.22.14

linuxlinux_kernelMatch2.6.22.15

linuxlinux_kernelMatch2.6.22.16

linuxlinux_kernelMatch2.6.22.17

linuxlinux_kernelMatch2.6.23

linuxlinux_kernelMatch2.6.23.1

linuxlinux_kernelMatch2.6.23.2

linuxlinux_kernelMatch2.6.23.3

linuxlinux_kernelMatch2.6.23.4

linuxlinux_kernelMatch2.6.23.5

linuxlinux_kernelMatch2.6.23.6

linuxlinux_kernelMatch2.6.23.7

linuxlinux_kernelMatch2.6.23.9

linuxlinux_kernelMatch2.6.23.14

linuxlinux_kernelMatch2.6.24.1

linuxlinux_kernelMatch2.6.24.2

linuxlinux_kernelMatch2.6.25

linuxlinux_kernelMatch2.6.25.1

linuxlinux_kernelMatch2.6.25.2

References

kerneltrap.org/mailarchive/git-commits-head/2008/5/8/1760604

secunia.com/advisories/30368

secunia.com/advisories/30499

secunia.com/advisories/31107

www.debian.org/security/2008/dsa-1588

www.kernel.org/pub/linux/kernel/v2.4/ChangeLog-2.4.36.5

www.kernel.org/pub/linux/kernel/v2.6/ChangeLog-2.6.25.3

www.securityfocus.com/bid/29397

www.securitytracker.com/id?1020119

www.ubuntu.com/usn/usn-625-1

www.vupen.com/english/advisories/2008/1716/references

exchange.xforce.ibmcloud.com/vulnerabilities/42681

4.4 Medium

CVSS2

Attack Vector

LOCAL

Attack Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

PARTIAL

AV:L/AC:M/Au:N/C:P/I:P/A:P

5.9 Medium

AI Score

Confidence

Low

0.0004 Low

EPSS

Percentile

5.1%

JSON

Related for NVD:CVE-2008-2137

ubuntucve2 seebug1 cve2 prion2 redhatcve2 cvelist2 nvd1 securityvulns2 osv1 debian2 openvas6 nessus2 ubuntu1