PT-2009-5205 · Linux+1 · Linux Kernel+1

Eugene Teo

+1

·

Publicado

2009-08-18

·

Atualizado

2018-10-10

·

CVE-2009-2847

CVSS v2.0

4.9

Média

VetorAV:L/AC:L/Au:N/C:C/I:N/A:N
Name of the Vulnerable Software and Affected Versions Linux kernel versions 2.4 through 2.4.37 Linux kernel versions 2.6 before 2.6.31-rc5
Description The issue allows local users to obtain sensitive information from the kernel stack via the sigaltstack function due to the do sigaltstack function in kernel/signal.c not clearing certain padding bytes from a structure when running on 64-bit systems.
Recommendations For Linux kernel versions 2.4 through 2.4.37, consider upgrading to a version outside of this range to mitigate the risk. For Linux kernel versions 2.6 before 2.6.31-rc5, update to version 2.6.31-rc5 or later to resolve the issue.

Exploit

Correção

Encontrou algum problema na descrição? Tem algo a acrescentar? Fique à vontade para nos escrever 👾
dbugs@ptsecurity.com

Identificadores relacionados

CVE-2009-2847
DSA-1872-1
DSA-1928-1
RHSA-2009:1239
RHSA-2009:1243
RHSA-2009:1438
RHSA-2009:1466
RHSA-2009_1243
RHSA-2009_1438

Produtos afetados

Linux Kernel
Red Hat