PT-2008-3221 · Linux+1 · Linux Kernel+1

Alexander Viro · Publicado 2008-05-07 · Atualizado 2018-10-30 · CVE-2008-1669

Positive Technologies (AI Summary)

CVSS v2.0

6.9

Média

Vetor base

AV:L/AC:M/Au:N/C:C/I:C/A:C

Name of the Vulnerable Software and Affected Versions Linux kernel versions prior to 2.6.25.2

Description The issue allows local users to execute code in parallel or exploit a race condition to obtain re-ordered access to the descriptor table due to the lack of a certain protection mechanism for fcntl functionality.

Recommendations For versions prior to 2.6.25.2, update to version 2.6.25.2 or later to resolve the issue.

Correção

Code Injection

Race Condition

Enumeração de Fraquezas

CWE-94

CWE-362

Identificadores relacionados

CVE-2008-1669

DSA-1575-1

RHSA-2008:0211

RHSA-2008:0233

RHSA-2008:0237

RHSA-2008_0233

RHSA-2008_0237

Produtos afetados

Linux Kernel

Red Hat

Referências · 167

• https://bdu.fstec.ru/vul/2015-03627 · Nota de Segurança
• https://bdu.fstec.ru/vul/2015-03591 · Nota de Segurança
• https://bdu.fstec.ru/vul/2015-03590 · Nota de Segurança
• https://redhat.com/archives/fedora-package-announce/2008-May/msg00294.html · Aviso do Fabricante
• https://bdu.fstec.ru/vul/2015-03617 · Nota de Segurança
• https://bdu.fstec.ru/vul/2015-03384 · Nota de Segurança
• http://redhat.com/support/errata/RHSA-2008-0233.html · Aviso do Fabricante
• https://access.redhat.com/security/cve/CVE-2008-1669 · Nota
• https://bdu.fstec.ru/vul/2015-03602 · Nota de Segurança
• http://kernel.org/pub/linux/kernel/v2.6/ChangeLog-2.6.25.2 · Nota
• https://bdu.fstec.ru/vul/2015-03609 · Nota de Segurança
• http://mandriva.com/security/advisories?name=MDVSA-2008:105 · Aviso do Fabricante
• http://secunia.com/advisories/30982 · Nota
• http://kernel.org/pub/linux/kernel/v2.4/ChangeLog-2.4.36.4 · Nota
• https://bdu.fstec.ru/vul/2015-03621 · Nota de Segurança