PT-2008-2223 · Linux+1 · Linux Kernel+1

Jan Lieskovsky + 1 · Publicado 2008-06-25 · Atualizado 2017-09-29 · CVE-2008-0598

Positive Technologies (AI Summary)

CVSS v2.0

4.9

Média

Vetor base

AV:L/AC:L/Au:N/C:C/I:N/A:N

Name of the Vulnerable Software and Affected Versions Linux kernel versions 2.6.9 through 2.6.18

Description The issue allows local users to read uninitialized memory via unknown vectors involving a crafted binary. This is due to an unspecified vulnerability in the 32-bit and 64-bit emulation.

Recommendations For Linux kernel versions 2.6.9 through 2.6.18, update to a version that contains a fix for this issue.

Correção

Information Disclosure

Enumeração de Fraquezas

CWE-200

Identificadores relacionados

CVE-2008-0598

DSA-1630-1

RHSA-2008:0508

RHSA-2008:0519

RHSA-2008:0973

RHSA-2008_0508

RHSA-2008_0519

RHSA-2009:0009

Produtos afetados

Linux Kernel

Red Hat

Referências · 34

• http://git.kernel.org/?p=linux/kernel/git/torvalds/linux-2.6.git;a=commitdiff;h=3022d734a54cbd2b65eea9a024564821101b4a9a;hp=f0f4c3432e5e1087b3a8c0e6bd4113d3c37497ff · Nota
• http://lists.opensuse.org/opensuse-security-announce/2008-10/msg00000.html · Aviso do Fabricante
• http://lkml.org/lkml/2008/3/5/207 · Nota
• http://secunia.com/advisories/32104 · Nota
• https://access.redhat.com/security/cve/CVE-2008-1367 · Nota
• http://secunia.com/advisories/30849 · Nota
• http://secunia.com/advisories/33586 · Nota
• http://redhat.com/support/errata/RHSA-2008-0973.html · Aviso do Fabricante
• http://secunia.com/advisories/32103 · Nota
• https://access.redhat.com/errata/RHSA-2008:0508 · Nota
• http://rhn.redhat.com/errata/RHSA-2008-0508.html · Aviso do Fabricante
• https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A10721 · Nota
• http://secunia.com/advisories/30850 · Nota
• http://securitytracker.com/id?1020367 · Nota
• https://exchange.xforce.ibmcloud.com/vulnerabilities/43554 · Nota