CVE-2008-1669

2008-05-0800:00:00

ubuntu.com

6.9 Medium

CVSS2

Attack Vector

LOCAL

Attack Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

COMPLETE

Integrity Impact

COMPLETE

Availability Impact

COMPLETE

AV:L/AC:M/Au:N/C:C/I:C/A:C

0.0004 Low

EPSS

Percentile

10.1%

JSON

Linux kernel before 2.6.25.2 does not apply a certain protection mechanism
for fcntl functionality, which allows local users to (1) execute code in
parallel or (2) exploit a race condition to obtain “re-ordered access to
the descriptor table.”

Notes

Author	Note
kees	Message-Id: <[email protected]>

OSVersionArchitecturePackageVersionFilename
ubuntu8.04noarchlinux< 2.6.24-18.32UNKNOWN
ubuntu6.06noarchlinux-source-2.6.15< 2.6.15-52.67UNKNOWN
ubuntu7.04noarchlinux-source-2.6.20< 2.6.20-17.36UNKNOWN
ubuntu7.10noarchlinux-source-2.6.22< 2.6.22-15.54UNKNOWN

OS	Version	Architecture	Package	Version	Filename
ubuntu	8.04	noarch	linux	< 2.6.24-18.32	UNKNOWN
ubuntu	6.06	noarch	linux-source-2.6.15	< 2.6.15-52.67	UNKNOWN
ubuntu	7.04	noarch	linux-source-2.6.20	< 2.6.20-17.36	UNKNOWN
ubuntu	7.10	noarch	linux-source-2.6.22	< 2.6.22-15.54	UNKNOWN