Lucene search

[email protected]NVD:CVE-2008-5029

HistoryNov 10, 2008 - 4:15 p.m.

CVE-2008-5029

2008-11-1016:15:12

[email protected]

web.nvd.nist.gov

4.9 Medium

CVSS2

Attack Vector

LOCAL

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

NONE

Integrity Impact

NONE

Availability Impact

COMPLETE

AV:L/AC:L/Au:N/C:N/I:N/A:C

5.6 Medium

AI Score

Confidence

High

0.0004 Low

EPSS

Percentile

10.1%

JSON

The __scm_destroy function in net/core/scm.c in the Linux kernel 2.6.27.4, 2.6.26, and earlier makes indirect recursive calls to itself through calls to the fput function, which allows local users to cause a denial of service (panic) via vectors related to sending an SCM_RIGHTS message through a UNIX domain socket and closing file descriptors.

Affected configurations

NVD

Node

linuxlinux_kernelRange≤2.6.27.4

linuxlinux_kernelMatch2.2.27

linuxlinux_kernelMatch2.4.36

linuxlinux_kernelMatch2.4.36.1

linuxlinux_kernelMatch2.4.36.2

linuxlinux_kernelMatch2.4.36.3

linuxlinux_kernelMatch2.4.36.4

linuxlinux_kernelMatch2.4.36.5

linuxlinux_kernelMatch2.4.36.6

linuxlinux_kernelMatch2.6

linuxlinux_kernelMatch2.6.18

linuxlinux_kernelMatch2.6.18rc1

linuxlinux_kernelMatch2.6.18rc2

linuxlinux_kernelMatch2.6.18rc3

linuxlinux_kernelMatch2.6.18rc4

linuxlinux_kernelMatch2.6.18rc5

linuxlinux_kernelMatch2.6.18rc6

linuxlinux_kernelMatch2.6.18rc7

linuxlinux_kernelMatch2.6.19.4

linuxlinux_kernelMatch2.6.19.5

linuxlinux_kernelMatch2.6.19.6

linuxlinux_kernelMatch2.6.19.7

linuxlinux_kernelMatch2.6.20.16

linuxlinux_kernelMatch2.6.20.17

linuxlinux_kernelMatch2.6.20.18

linuxlinux_kernelMatch2.6.20.19

linuxlinux_kernelMatch2.6.20.20

linuxlinux_kernelMatch2.6.20.21

linuxlinux_kernelMatch2.6.21.5

linuxlinux_kernelMatch2.6.21.6

linuxlinux_kernelMatch2.6.21.7

linuxlinux_kernelMatch2.6.22

linuxlinux_kernelMatch2.6.22.1

linuxlinux_kernelMatch2.6.22.2

linuxlinux_kernelMatch2.6.22.8

linuxlinux_kernelMatch2.6.22.9

linuxlinux_kernelMatch2.6.22.10

linuxlinux_kernelMatch2.6.22.11

linuxlinux_kernelMatch2.6.22.12

linuxlinux_kernelMatch2.6.22.13

linuxlinux_kernelMatch2.6.22.14

linuxlinux_kernelMatch2.6.22.15

linuxlinux_kernelMatch2.6.22.17

linuxlinux_kernelMatch2.6.22.18

linuxlinux_kernelMatch2.6.22.19

linuxlinux_kernelMatch2.6.22.20

linuxlinux_kernelMatch2.6.22.21

linuxlinux_kernelMatch2.6.22.22

linuxlinux_kernelMatch2.6.22_rc1

linuxlinux_kernelMatch2.6.22_rc7

linuxlinux_kernelMatch2.6.23

linuxlinux_kernelMatch2.6.23.8

linuxlinux_kernelMatch2.6.23.9

linuxlinux_kernelMatch2.6.23.10

linuxlinux_kernelMatch2.6.23.11

linuxlinux_kernelMatch2.6.23.12

linuxlinux_kernelMatch2.6.23.13

linuxlinux_kernelMatch2.6.23.15

linuxlinux_kernelMatch2.6.23.16

linuxlinux_kernelMatch2.6.23.17

linuxlinux_kernelMatch2.6.23_rc1

linuxlinux_kernelMatch2.6.24

linuxlinux_kernelMatch2.6.24.1

linuxlinux_kernelMatch2.6.24.2

linuxlinux_kernelMatch2.6.24.3

linuxlinux_kernelMatch2.6.24.4

linuxlinux_kernelMatch2.6.24.5

linuxlinux_kernelMatch2.6.24.6

linuxlinux_kernelMatch2.6.24.7

linuxlinux_kernelMatch2.6.24_rc1

linuxlinux_kernelMatch2.6.24_rc4

linuxlinux_kernelMatch2.6.24_rc5

linuxlinux_kernelMatch2.6.25

linuxlinux_kernelMatch2.6.25x86_64

linuxlinux_kernelMatch2.6.25.1

linuxlinux_kernelMatch2.6.25.1x86_64

linuxlinux_kernelMatch2.6.25.2

linuxlinux_kernelMatch2.6.25.2x86_64

linuxlinux_kernelMatch2.6.25.3

linuxlinux_kernelMatch2.6.25.3x86_64

linuxlinux_kernelMatch2.6.25.4

linuxlinux_kernelMatch2.6.25.4x86_64

linuxlinux_kernelMatch2.6.25.5

linuxlinux_kernelMatch2.6.25.5x86_64

linuxlinux_kernelMatch2.6.25.6

linuxlinux_kernelMatch2.6.25.6x86_64

linuxlinux_kernelMatch2.6.25.7

linuxlinux_kernelMatch2.6.25.7x86_64

linuxlinux_kernelMatch2.6.25.8

linuxlinux_kernelMatch2.6.25.8x86_64

linuxlinux_kernelMatch2.6.25.9

linuxlinux_kernelMatch2.6.25.9x86_64

linuxlinux_kernelMatch2.6.25.10

linuxlinux_kernelMatch2.6.25.10x86_64

linuxlinux_kernelMatch2.6.25.11

linuxlinux_kernelMatch2.6.25.11x86_64

linuxlinux_kernelMatch2.6.25.12

linuxlinux_kernelMatch2.6.25.12x86_64

linuxlinux_kernelMatch2.6.25.13

linuxlinux_kernelMatch2.6.25.14

linuxlinux_kernelMatch2.6.25.15

linuxlinux_kernelMatch2.6.25.16

linuxlinux_kernelMatch2.6.25.17

linuxlinux_kernelMatch2.6.26

linuxlinux_kernelMatch2.6.26rc4

linuxlinux_kernelMatch2.6.26.1

linuxlinux_kernelMatch2.6.26.2

linuxlinux_kernelMatch2.6.26.3

linuxlinux_kernelMatch2.6.26.4

linuxlinux_kernelMatch2.6.26.5

linuxlinux_kernelMatch2.6.27

linuxlinux_kernelMatch2.6.27.1

linuxlinux_kernelMatch2.6.27.2

linuxlinux_kernelMatch2.6.27.3

References

archives.neohapsis.com/archives/bugtraq/2009-01/0006.html

darkircop.org/unix.c

kernel.org/pub/linux/kernel/v2.4/ChangeLog-2.4.36.9

lists.opensuse.org/opensuse-security-announce/2008-12/msg00001.html

lists.opensuse.org/opensuse-security-announce/2009-01/msg00006.html

lists.opensuse.org/opensuse-security-announce/2009-01/msg00010.html

marc.info/?l=linux-netdev&m=122593044330973&w=2

secunia.com/advisories/32918

secunia.com/advisories/32998

secunia.com/advisories/33180

secunia.com/advisories/33556

secunia.com/advisories/33586

secunia.com/advisories/33623

secunia.com/advisories/33641

secunia.com/advisories/33704

securityreason.com/securityalert/4573

www.debian.org/security/2008/dsa-1681

www.debian.org/security/2008/dsa-1687

www.mandriva.com/security/advisories?name=MDVSA-2008:234

www.openwall.com/lists/oss-security/2008/11/06/1

www.redhat.com/support/errata/RHSA-2009-0009.html

www.redhat.com/support/errata/RHSA-2009-0014.html

www.redhat.com/support/errata/RHSA-2009-0225.html

www.securityfocus.com/archive/1/499700/100/0/threaded

www.securityfocus.com/archive/1/499744/100/0/threaded

www.securityfocus.com/archive/1/512019/100/0/threaded

www.securityfocus.com/bid/32154

www.securityfocus.com/bid/33079

www.securitytracker.com/id?1021292

www.securitytracker.com/id?1021511

www.ubuntu.com/usn/usn-679-1

bugzilla.redhat.com/show_bug.cgi?id=470201

exchange.xforce.ibmcloud.com/vulnerabilities/46538

oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A11694

oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A9558

rhn.redhat.com/errata/RHSA-2009-1550.html

4.9 Medium

CVSS2

Attack Vector

LOCAL

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

NONE

Integrity Impact

NONE

Availability Impact

COMPLETE

AV:L/AC:L/Au:N/C:N/I:N/A:C

5.6 Medium

AI Score

Confidence

High

0.0004 Low

EPSS

Percentile

10.1%

JSON

Related for NVD:CVE-2008-5029

cvelist2 cve2 prion2 seebug1 securityvulns3 ubuntucve2 veracode1 nvd1 openvas39 nessus22 redhat5 suse4 centos2 oraclelinux3 debian2 vmware1 ubuntu1 osv2