Lucene search
Ubuntu.comUB:CVE-2009-2584HistoryJul 23, 2009 - 12:00 a.m.
CVE-2009-2584
2009-07-2300:00:00
ubuntu.com
ubuntu.com
12
CVSS2
7.2
Attack Vector
LOCAL
Attack Complexity
LOW
Authentication
NONE
Confidentiality Impact
COMPLETE
Integrity Impact
COMPLETE
Availability Impact
COMPLETE
AV:L/AC:L/Au:N/C:C/I:C/A:C
EPSS
0
Percentile
9.8%
Off-by-one error in the options_write function in
drivers/misc/sgi-gru/gruprocfs.c in the SGI GRU driver in the Linux kernel
2.6.30.2 and earlier on ia64 and x86 platforms might allow local users to
overwrite arbitrary memory locations and gain privileges via a crafted
count argument, which triggers a stack-based buffer overflow.
Notes
| Author | Note |
|---|---|
| mdeslaur | may only be vulnerable on particular SGI hardware PoC: http://grsecurity.net/~spender/exploit_demo.c |
Related
prion
prion
Stack overflow
2009-07-23 20:30:00
nvd
nvd
CVE-2009-2584
2009-07-23 20:30:00
redhatcve
redhatcve
CVE-2009-2584
2015-10-30 09:39:01
cve
cve
CVE-2009-2584
2009-07-23 20:30:00
cvelist
cvelist
CVE-2009-2584
2009-07-23 20:00:00
openvas
openvas
Ubuntu: Security Advisory (USN-852-1)
2022-08-26 00:00:00
nessus
nessus
ubuntu
ubuntu
Linux kernel vulnerabilities
2009-10-22 00:00:00
CVSS2
7.2
Attack Vector
LOCAL
Attack Complexity
LOW
Authentication
NONE
Confidentiality Impact
COMPLETE
Integrity Impact
COMPLETE
Availability Impact
COMPLETE
AV:L/AC:L/Au:N/C:C/I:C/A:C
EPSS
0
Percentile
9.8%
Related for UB:CVE-2009-2584