PT-2009-5087 · Linux+1 · Linux Kernel+1

Eugene Teo

+1

·

Publicado

2009-08-28

·

Atualizado

2017-09-19

·

CVE-2009-2695

CVSS v2.0

7.2

Alta

VetorAV:L/AC:L/Au:N/C:C/I:C/A:C
Name of the Vulnerable Software and Affected Versions Linux kernel versions prior to 2.6.31-rc7
Description The issue allows local users to gain privileges by exploiting NULL pointer dereference vulnerabilities. This is related to the default configuration of the allow unconfined mmap low boolean in SELinux, an error that causes allow unconfined mmap low to be ignored, lack of a requirement for the CAP SYS RAWIO capability for certain mmap operations, and interaction between the mmap min addr protection mechanism and certain application programs.
Recommendations For Linux kernel versions prior to 2.6.31-rc7, update to version 2.6.31-rc7 or later to resolve the issue. As a temporary workaround, consider restricting the use of mmap operations that target low memory addresses to minimize the risk of exploitation. Additionally, review and adjust the configuration of the allow unconfined mmap low boolean in SELinux to ensure it is properly set.

Exploit

Correção

Buffer Overflow

Encontrou algum problema na descrição? Tem algo a acrescentar? Fique à vontade para nos escrever 👾

Enumeração de Fraquezas

Identificadores relacionados

CVE-2009-2695
DSA-1915-1
DSA-2005-1
RHSA-2009:1540
RHSA-2009:1548
RHSA-2009:1587
RHSA-2009:1672
RHSA-2009_1548

Produtos afetados

Linux Kernel
Red Hat