Lucene search
Ubuntu.comUB:CVE-2008-0010HistoryFeb 12, 2008 - 12:00 a.m.
CVE-2008-0010
2008-02-1200:00:00
ubuntu.com
ubuntu.com
12
CVSS2
2.1
Attack Vector
LOCAL
Attack Complexity
LOW
Authentication
NONE
Confidentiality Impact
PARTIAL
Integrity Impact
NONE
Availability Impact
NONE
AV:L/AC:L/Au:N/C:P/I:N/A:N
EPSS
0
Percentile
10.1%
The copy_from_user_mmap_sem function in fs/splice.c in the Linux kernel
2.6.22 through 2.6.24 does not validate a certain userspace pointer before
dereference, which allow local users to read from arbitrary kernel memory
locations.
Bugs
Notes
| Author | Note |
|---|---|
| jdstrand | dapper-gutsy not affected. Only 2.6.23 - 2.6.24. See: http://isec.pl/vulnerabilities/isec-0026-vmsplice_to_kernel.txt local root exploit on hardy (exploit code exists) amitk will upload 2.6.24.2 for hardy soon |
Related
nvd
nvd
CVE-2008-0010
2008-02-12 21:00:00
CVE-2008-0600
2008-02-12 21:00:00
cve
cve
CVE-2008-0010
2008-02-12 21:00:00
CVE-2008-0600
2008-02-12 21:00:00
redhatcve
redhatcve
CVE-2008-0010
2015-10-30 10:11:03
cvelist
cvelist
CVE-2008-0010
2008-02-12 20:00:00
CVE-2008-0600
2008-02-12 20:00:00
prion
prion
Null pointer dereference
2008-02-12 21:00:00
Null pointer dereference
2008-02-12 21:00:00
seebug
seebug
Linux Kernel copy_from_user_mmap_sem()函数内存访问漏洞
2008-02-22 00:00:00
osv
osv
linux-2.6 - privilege escalation
2008-02-11 00:00:00
slackware
slackware
[slackware-security] kernel exploit fix
2008-02-12 02:00:01
openvas
openvas
Debian Security Advisory DSA 1494-2 (linux-2.6)
2008-02-15 00:00:00
Debian Security Advisory DSA 1494-1 (linux-2.6)
2008-02-15 00:00:00
Debian: Security Advisory (DSA-1494-1)
2008-02-15 00:00:00
nessus
nessus
Fedora 7 : kernel-2.6.23.15-80.fc7 (2008-1422)
2008-02-12 00:00:00
Debian DSA-1494-2 : linux-2.6 - missing access checks
2008-02-12 00:00:00
Mandriva Linux Security Advisory : kernel (MDVSA-2008:043)
2009-04-23 00:00:00
ubuntucve
ubuntucve
CVE-2008-0600
2008-02-12 00:00:00
securityvulns
securityvulns
[Full-disclosure] [SECURITY] [DSA 1494-1] New linux-2.6 packages fix privilege escalation
2008-02-11 00:00:00
Linux kernel multiple security vulnerabilities
2008-02-12 00:00:00
debian
debian
[SECURITY] [DSA 1494-2] New linux-2.6 packages fix privilege escalation
2008-02-13 06:18:12
[SECURITY] [DSA 1494-1] New linux-2.6 packages fix privilege escalation
2008-02-11 13:58:39
fedora
fedora
[SECURITY] Fedora 7 Update: kernel-2.6.23.15-80.fc7
2008-02-11 22:38:35
[SECURITY] Fedora 8 Update: kernel-2.6.23.15-137.fc8
2008-02-11 22:39:28
CVSS2
2.1
Attack Vector
LOCAL
Attack Complexity
LOW
Authentication
NONE
Confidentiality Impact
PARTIAL
Integrity Impact
NONE
Availability Impact
NONE
AV:L/AC:L/Au:N/C:P/I:N/A:N
EPSS
0
Percentile
10.1%
Related for UB:CVE-2008-0010