PT-2009-3395 · Linux+1 · Linux Kernel+1

Publicado 2009-03-25 · Atualizado 2023-02-13 · CVE-2009-0787

Positive Technologies (AI Summary)

CVSS v2.0

4.9

Média

Vetor base

AV:L/AC:L/Au:N/C:C/I:N/A:N

Name of the Vulnerable Software and Affected Versions Linux kernel versions 2.6.28 through 2.6.28.8

Description The issue is related to the eCryptfs functionality in the Linux kernel. It involves the ecryptfs write metadata to contents function, which incorrectly sizes kernel memory when writing to an eCryptfs file header. This leads to an out-of-bounds read, allowing local users to access portions of kernel memory.

Recommendations For Linux kernel versions 2.6.28 through 2.6.28.8, update to version 2.6.28.9 or later to resolve the issue.

Correção

Enumeração de Fraquezas

CWE-189

Identificadores relacionados

CVE-2009-0787

RHSA-2009:0473

RHSA-2009_0473

Produtos afetados

Linux Kernel

Red Hat

Referências · 40

• https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A8319 · Nota
• http://osvdb.org/52860 · Nota
• https://exchange.xforce.ibmcloud.com/vulnerabilities/49355 · Nota
• http://secunia.com/advisories/35015 · Nota
• http://secunia.com/advisories/37471 · Nota
• http://kernel.org/pub/linux/kernel/v2.6/ChangeLog-2.6.28.9 · Aviso do Fabricante
• https://bdu.fstec.ru/vul/2015-05217 · Nota de Segurança
• http://securityfocus.com/bid/34216 · Correção
• https://bdu.fstec.ru/vul/2015-05213 · Nota de Segurança
• https://bdu.fstec.ru/vul/2015-05209 · Nota de Segurança
• https://bdu.fstec.ru/vul/2015-05215 · Nota de Segurança
• https://access.redhat.com/security/cve/CVE-2009-1337 · Nota
• http://securityfocus.com/archive/1/507985/100/0/threaded · Nota
• https://access.redhat.com/errata/RHSA-2009:0473 · Nota
• http://vupen.com/english/advisories/2009/0802 · Aviso do Fabricante