PT-2009-4347 · Linux+1 · Linux Kernel+1

Solar Designer

·

Publicado

2009-09-15

·

Atualizado

2017-09-29

·

CVE-2009-1883

CVSS v2.0

4.4

Média

VetorAV:L/AC:M/Au:N/C:P/I:P/A:P
Name of the Vulnerable Software and Affected Versions: Linux kernel version 2.6.9
Description: The issue concerns the z90crypt unlocked ioctl function in the z90crypt driver, which fails to perform a capability check for the Z90QUIESCE operation. This allows local users with euid 0 privileges to cause a driver outage.
Recommendations: For Linux kernel version 2.6.9, consider disabling the z90crypt driver or restricting its use to prevent exploitation until a fix is available.

Correção

Encontrou algum problema na descrição? Tem algo a acrescentar? Fique à vontade para nos escrever 👾
dbugs@ptsecurity.com

Enumeração de Fraquezas

CWE-264

Identificadores relacionados

CVE-2009-1883
DSA-1929-1
RHSA-2009:1438
RHSA-2009_1438

Produtos afetados

Linux Kernel
Red Hat