PT-2009-3395 · Linux+1 · Linux Kernel+1
Published
2009-03-25
·
Updated
2023-02-13
·
CVE-2009-0787
CVSS v2.0
4.9
Medium
| Vector | AV:L/AC:L/Au:N/C:C/I:N/A:N |
Name of the Vulnerable Software and Affected Versions
Linux kernel versions 2.6.28 through 2.6.28.8
Description
The issue is related to the eCryptfs functionality in the Linux kernel. It involves the ecryptfs write metadata to contents function, which incorrectly sizes kernel memory when writing to an eCryptfs file header. This leads to an out-of-bounds read, allowing local users to access portions of kernel memory.
Recommendations
For Linux kernel versions 2.6.28 through 2.6.28.8, update to version 2.6.28.9 or later to resolve the issue.
Fix
Found an issue in the description? Have something to add? Feel free to write us 👾
Weakness Enumeration
Related Identifiers
Affected Products
Linux Kernel
Red Hat