PT-2008-3223 · Linux · Linux Kernel

Publicado 2008-05-02 · Atualizado 2018-10-11 · CVE-2008-1675

Positive Technologies (AI Summary)

CVSS v2.0

7.2

Alta

Vetor base

AV:L/AC:L/Au:N/C:C/I:C/A:C

Name of the Vulnerable Software and Affected Versions Linux kernel versions prior to 2.6.25.1

Description The issue is related to the bdx ioctl priv function in the tehuti driver, which does not properly check certain information related to register size. This has an unspecified impact and can be exploited through local attack vectors, likely related to reading or writing kernel memory.

Recommendations For Linux kernel versions prior to 2.6.25.1, update to version 2.6.25.1 or later to resolve the issue. As a temporary workaround, consider restricting access to the tehuti driver to minimize the risk of exploitation.

Exploit

Correção

Enumeração de Fraquezas

CWE-399

Identificadores relacionados

CVE-2008-1675

Produtos afetados

Linux Kernel

Referências · 22

• 🔥 http://marc.info/?l=linux-kernel&m=120949582428998&w=2 · Exploit
• 🔥 http://marc.info/?l=linux-kernel&m=120949204619718&w=2 · Exploit
• 🔥 http://marc.info/?l=linux-kernel&m=120949204519706&w=2 · Exploit
• http://securityfocus.com/bid/29014 · Nota
• https://issues.rpath.com/browse/RPL-2501 · Nota
• https://redhat.com/archives/fedora-package-announce/2008-May/msg00232.html · Aviso do Fabricante
• http://secunia.com/advisories/30044 · Aviso do Fabricante
• http://mandriva.com/security/advisories?name=MDVSA-2008:109 · Aviso do Fabricante
• https://usn.ubuntu.com/614-1 · Aviso do Fabricante
• https://nvd.nist.gov/vuln/detail/CVE-2008-1675 · Nota de Segurança
• http://securityfocus.com/archive/1/491566/100/0/threaded · Nota
• http://wiki.rpath.com/Advisories:rPSA-2008-0157 · Nota
• http://mandriva.com/security/advisories?name=MDVSA-2008:167 · Aviso do Fabricante
• http://securitytracker.com/id?1019960 · Nota
• http://kernel.org/pub/linux/kernel/v2.6/ChangeLog-2.6.25.1 · Nota