PT-2010-1247 · Linux · Linux Kernel

Publicado 2010-06-03 · Atualizado 2017-08-17 · CVE-2008-7256

Positive Technologies (AI Summary)

CVSS v2.0

1.2

Baixa

Vetor base

AV:L/AC:H/Au:N/C:N/I:N/A:P

Name of the Vulnerable Software and Affected Versions Linux kernel versions prior to 2.6.28-rc8

Description The issue is related to the handling of shmemfs objects by knfsd in the Linux kernel when strict overcommit is enabled and CONFIG SECURITY is disabled. This can lead to a denial of service due to a NULL pointer dereference and knfsd crash, or possibly have other unspecified impacts.

Recommendations For Linux kernel versions prior to 2.6.28-rc8, update to version 2.6.28-rc8 or later to resolve the issue.

Correção

Identificadores relacionados

CVE-2008-7256

RHSA-2010:0631

Produtos afetados

Linux Kernel

Referências · 7

• http://kernel.org/pub/linux/kernel/v2.6/testing/v2.6.28/ChangeLog-2.6.28-rc8 · Nota
• http://openwall.com/lists/oss-security/2010/05/27/1 · Nota
• https://exchange.xforce.ibmcloud.com/vulnerabilities/59224 · Nota
• http://git.kernel.org/?p=linux/kernel/git/torvalds/linux-2.6.git%3Ba=commit%3Bh=1b79cd04fab80be61dcd2732e2423aafde9a4c1c · Nota
• https://nvd.nist.gov/vuln/detail/CVE-2008-7256 · Nota de Segurança
• http://mandriva.com/security/advisories?name=MDVSA-2010:198 · Aviso do Fabricante
• https://bugzilla.redhat.com/show_bug.cgi?id=595970 · Nota