Vulnerability-Lookup

BDU:2015-03640 (CVE-2004-2731)

Vulnerability from fstec – Published: 2015-04-28 – Updated: 2016-11-28 – View on bdu.fstec.ru Fixed

Title

Уязвимости операционной системы Debian GNU/Linux, позволяющие удаленному злоумышленнику нарушить доступность защищаемой информации

Summary

Множественные уязвимости пакета kernel-pcmcia-modules-2.4.27-4-k7-smp операционной системы Debian GNU/Linux, эксплуатация которых может привести к нарушению доступности защищаемой информации. Эксплуатация уязвимостей может быть осуществлена удаленно

Severity

7.8 (High) CVSS 2.0


                      
                        AV:N/AC:L/Au:N/C:N/I:N/A:C

Status

Confirmed by the vendor

Exploitation

Data structure manipulation

Incidents

Being clarified

Remediation

Being clarified

CWE

CWE-189 - Ошибки, возникающие при обработке чисел

Aliases

CVE-2004-2731, CVE-2006-4814, CVE-2006-5753, CVE-2006-5823, CVE-2006-6053, CVE-2006-6054, CVE-2006-6106, CVE-2007-1353, CVE-2007-1592, CVE-2007-2172, CVE-2007-2525, CVE-2007-3848, CVE-2007-4308, CVE-2007-4311, CVE-2007-5093, CVE-2007-6063, CVE-2007-6151, CVE-2007-6206, CVE-2007-6694, CVE-2008-0007, DSA-1503, ID:1402392

References

21 references

URL
http://www.debian.org/security/dsa-1503/
http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2006-5823
http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2008-0007
http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2007-1592
http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2007-3848
http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2004-2731
http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2007-6206
http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2007-6063
http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2007-6151
http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2006-6106
http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2007-2172
http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2007-4308
http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2007-5093
http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2007-4311
http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2006-6054
http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2006-6053
http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2007-2525
http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2006-5753
http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2007-6694
http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2006-4814
http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2007-1353

Impacted products

1 product from 1 vendor

Vendors

Сообщество свободного программного обеспечения

Products

Debian GNU/Linux

Versions

до 3.1 (Debian GNU/Linux)

Product types

Operating system

Mitigations

Проблема может быть решена обновлением операционной системы до следующих версий пакетов в зависимости от архитектуры: Debian GNU/Linux 3.1: ppc: mips-tools - 2.4.27-10.sarge4.040815-3 kernel-image-2.4.27-powerpc-small - 2.4.27-10sarge6 kernel-image-2.4.27-powerpc-smp - 2.4.27-10sarge6 kernel-image-2.4.27-nubus - 2.4.27-10sarge6 kernel-image-2.4.27-powerpc - 2.4.27-10sarge6 kernel-patch-2.4.27-powerpc - 2.4.27-10sarge6 kernel-patch-2.4.27-nubus - 2.4.27-10sarge6 kernel-headers-2.4.27-powerpc - 2.4.27-10sarge6 kernel-build-2.4.27-apus - 2.4.27-10sarge6 kernel-headers-2.4.27-nubus - 2.4.27-10sarge6 kernel-patch-2.4.27-apus - 2.4.27-10sarge6 kernel-image-2.4.27-apus - 2.4.27-10sarge6 kernel-headers-2.4.27-apus - 2.4.27-10sarge6 kernel-build-2.4.27-powerpc-smp - 2.4.27-10sarge6 kernel-build-2.4.27-nubus - 2.4.27-10sarge6 kernel-build-2.4.27-powerpc - 2.4.27-10sarge6 kernel-build-2.4.27-powerpc-small - 2.4.27-10sarge6 s390x: kernel-image-2.4.27-4-s390-tape - 2.4.27-2sarge6 kernel-image-2.4.27-4-s390x - 2.4.27-2sarge6 kernel-headers-2.4.27-4 - 2.4.27-2sarge6 kernel-headers-2.4-s390 - 2.4.27-1sarge2 kernel-image-2.4-s390x - 2.4.27-1sarge2 mips-tools - 2.4.27-10.sarge4.040815-3 kernel-image-2.4.27-4-s390 - 2.4.27-2sarge6 kernel-image-2.4-s390 - 2.4.27-1sarge2 m68k: kernel-image-2.4.27-amiga - 2.4.27-3sarge6 kernel-image-2.4.27-mac - 2.4.27-3sarge6 kernel-image-2.4.27-mvme16x - 2.4.27-3sarge6 kernel-image-2.4.27-mvme147 - 2.4.27-3sarge6 kernel-image-2.4.27-bvme6000 - 2.4.27-3sarge6 mips-tools - 2.4.27-10.sarge4.040815-3 kernel-image-2.4.27-atari - 2.4.27-3sarge6 kernel-image-2.4.27-q40 - 2.4.27-3sarge6 i686: kernel-image-2.4-k7 - 101sarge2 i2c-2.4.27-4-386 - 2.9.1-1sarge2 kernel-pcmcia-modules-2.4.27-4-k7-smp - 2.4.27-10sarge6 kernel-pcmcia-modules-2.4.27-4-k7 - 2.4.27-10sarge6 kernel-headers-2.4-686 - 101sarge2 i2c-2.4.27-4-k7 - 2.9.1-1sarge2 kernel-image-2.4.27-speakup - 2.4.27-1.1sarge5 kernel-headers-2.4-386 - 101sarge2 hostap-modules-2.6.8-4-686 - 0.3.7-1sarge3 kernel-image-2.4-k7-smp - 101sarge2 mips-tools - 2.4.27-10.sarge4.040815-3 kernel-headers-2.4.27-4-386 - 2.4.27-10sarge6 pcmcia-modules-2.4.27-4-586tsc - 3.2.5+2sarge2 lm-sensors-2.4.27-4-k6 - 2.9.1-1sarge4 kernel-image-2.4.27-4-k7-smp - 2.4.27-10sarge6 kernel-pcmcia-modules-2.4-686 - 101sarge2 kernel-image-2.4.27-4-686 - 2.4.27-10sarge6 pcmcia-modules-2.4.27-4-k6 - 3.2.5+2sarge2 lm-sensors-2.4.27-4-386 - 2.9.1-1sarge4 kernel-headers-2.4-k7-smp - 101sarge2 kernel-image-2.4-586tsc - 101sarge2 lm-sensors-2.4.27-4-686-smp - 2.9.1-1sarge4 libsensors3 - 2.9.1-1sarge4 kernel-headers-2.4.27-4-586tsc - 2.4.27-10sarge6 kernel-headers-2.4.27-4 - 2.4.27-10sarge6 kernel-image-2.4-686 - 101sarge2 kernel-image-2.4-386 - 101sarge2 kernel-headers-2.4-k6 - 101sarge2 kernel-pcmcia-modules-2.4-686-smp - 101sarge2 kernel-pcmcia-modules-2.4-386 - 101sarge2 i2c-2.4.27-4-k7-smp - 2.9.1-1sarge2 i2c-2.4.27-4-686-smp - 2.9.1-1sarge2 i2c-2.4.27-4-686 - 2.9.1-1sarge2 kernel-headers-2.4-586tsc - 101sarge2 hostap-modules-2.6.8-4-686-smp - 0.3.7-1sarge3 hostap-modules-2.4.27-4-k7 - 0.3.7-1sarge3 kernel-headers-2.4-686-smp - 101sarge2 i2c-2.4.27-4-k6 - 2.9.1-1sarge2 kernel-pcmcia-modules-2.4.27-4-686-smp - 2.4.27-10sarge6 hostap-modules-2.4.27-4-586tsc - 0.3.7-1sarge3 hostap-modules-2.4.27-4-686-smp - 0.3.7-1sarge3 kernel-headers-2.4.27-4-686-smp - 2.4.27-10sarge6 kernel-pcmcia-modules-2.4.27-4-586tsc - 2.4.27-10sarge6 kernel-pcmcia-modules-2.4-k7-smp - 101sarge2 kernel-headers-2.4.27-speakup - 2.4.27-1.1sarge5 lm-sensors-2.4.27-4-686 - 2.9.1-1sarge4 hostap-modules-2.4.27-4-386 - 0.3.7-1sarge3 kernel-image-2.4.27-4-k7 - 2.4.27-10sarge6 hostap-modules-2.6.8-4-k7 - 0.3.7-1sarge3 kernel-image-2.4.27-4-686-smp - 2.4.27-10sarge6 hostap-modules-2.6.8-4-k7-smp - 0.3.7-1sarge3 pcmcia-modules-2.4.27-4-k7 - 3.2.5+2sarge2 kernel-headers-2.4.27-4-k6 - 2.4.27-10sarge6 hostap-modules-2.4.27-4-k6 - 0.3.7-1sarge3 hostap-modules-2.6.8-4-386 - 0.3.7-1sarge3 kernel-pcmcia-modules-2.4-k7 - 101sarge2 pcmcia-modules-2.4.27-4-k7-smp - 3.2.5+2sarge2 kernel-headers-2.4.27-4-686 - 2.4.27-10sarge6 pcmcia-modules-2.4.27-4-686 - 3.2.5+2sarge2 lm-sensors-2.4.27-4-k7-smp - 2.9.1-1sarge4 kernel-pcmcia-modules-2.4.27-4-686 - 2.4.27-10sarge6 libsensors-dev - 2.9.1-1sarge4 kernel-pcmcia-modules-2.4-586tsc - 101sarge2 kernel-headers-2.4.27-4-k7 - 2.4.27-10sarge6 kernel-image-2.4.27-4-k6 - 2.4.27-10sarge6 kernel-headers-2.4-k7 - 101sarge2 kernel-pcmcia-modules-2.4-k6 - 101sarge2 kernel-build-2.4.27-4 - 2.4.27-10sarge6 kernel-image-2.4-k6 - 101sarge2 hostap-modules-2.4.27-4-686 - 0.3.7-1sarge3 lm-sensors-2.4.27-4-k7 - 2.9.1-1sarge4 kernel-pcmcia-modules-2.4.27-4-386 - 2.4.27-10sarge6 lm-sensors-2.4.27-4-586tsc - 2.9.1-1sarge4 mindi-kernel - 2.4.27-2sarge5 kernel-pcmcia-modules-2.4.27-4-k6 - 2.4.27-10sarge6 i2c-2.4.27-4-586tsc - 2.9.1-1sarge2 pcmcia-modules-2.4.27-4-686-smp - 3.2.5+2sarge2 kernel-image-2.4-686-smp - 101sarge2 lm-sensors - 2.9.1-1sarge4 kernel-image-2.4.27-4-386 - 2.4.27-10sarge6 sensord - 2.9.1-1sarge4 kernel-headers-2.4.27-4-k7-smp - 2.4.27-10sarge6 hostap-modules-2.4.27-4-k7-smp - 0.3.7-1sarge3 pcmcia-modules-2.4.27-4-386 - 3.2.5+2sarge2 kernel-image-2.4.27-4-586tsc - 2.4.27-10sarge6 hppa: mips-tools - 2.4.27-10.sarge4.040815-3 sparc: kernel-image-2.4-sparc64-smp - 42sarge3 kernel-image-2.4-sparc32-smp - 42sarge3 kernel-image-2.4-sparc32 - 42sarge3 kernel-image-2.4-sparc64 - 42sarge3 kernel-image-2.4.27-4-sparc32-smp - 2.4.27-9sarge6 kernel-headers-2.4.27-4-sparc32 - 2.4.27-9sarge6 kernel-headers-2.4.27-4-sparc64 - 2.4.27-9sarge6 kernel-headers-2.4.27-4-sparc64-smp - 2.4.27-9sarge6 kernel-headers-2.4.27-4 - 2.4.27-9sarge6 kernel-headers-2.4-sparc64-smp - 42sarge3 kernel-headers-2.4.27-4-sparc32-smp - 2.4.27-9sarge6 kernel-image-2.4.27-4-sparc32 - 2.4.27-9sarge6 kernel-headers-2.4-sparc32-smp - 42sarge3 kernel-headers-2.4-sparc64 - 42sarge3 mips-tools - 2.4.27-10.sarge4.040815-3 kernel-build-2.4.27-4 - 2.4.27-9sarge6 kernel-image-2.4.27-4-sparc64 - 2.4.27-9sarge6 kernel-headers-2.4-sparc32 - 42sarge3 kernel-image-2.4.27-4-sparc64-smp - 2.4.27-9sarge6 x86-64: mips-tools - 2.4.27-10.sarge4.040815-3 alpha: kernel-headers-2.4-generic - 101sarge3 kernel-headers-2.4.27-4-generic - 2.4.27-10sarge6 kernel-image-2.4.27-4-smp - 2.4.27-10sarge6 kernel-build-2.4.27-4 - 2.4.27-10sarge6 mips-tools - 2.4.27-10.sarge4.040815-3 kernel-image-2.4-generic - 101sarge3 kernel-headers-2.4.27-4-smp - 2.4.27-10sarge6 kernel-image-2.4-smp - 101sarge3 kernel-headers-2.4-smp - 101sarge3 kernel-image-2.4.27-4-generic - 2.4.27-10sarge6 kernel-headers-2.4.27-4 - 2.4.27-10sarge6 ia64: kernel-image-2.4-mckinley-smp - 2.4.27-10sarge6 kernel-image-2.4.27-4-mckinley-smp - 2.4.27-10sarge6 kernel-headers-2.4.27-4-itanium - 2.4.27-10sarge6 kernel-image-2.4.27-4-mckinley - 2.4.27-10sarge6 kernel-image-2.4.27-4-itanium - 2.4.27-10sarge6 kernel-headers-2.4.27-4-mckinley - 2.4.27-10sarge6 kernel-image-2.4-itanium-smp - 2.4.27-10sarge6 mips-tools - 2.4.27-10.sarge4.040815-3 kernel-headers-2.4.27-4-itanium-smp - 2.4.27-10sarge6 kernel-image-2.4-mckinley - 2.4.27-10sarge6 kernel-headers-2.4.27-4-mckinley-smp - 2.4.27-10sarge6 kernel-image-2.4.27-4-itanium-smp - 2.4.27-10sarge6 kernel-image-2.4-itanium - 2.4.27-10sarge6 kernel-headers-2.4.27-4 - 2.4.27-10sarge6 kernel-build-2.4.27-4 - 2.4.27-10sarge6 mips: kernel-image-2.4.27-r5k-ip22 - 2.4.27-10.sarge4.040815-3 kernel-headers-2.4.27 - 2.4.27-10.sarge4.040815-3 kernel-image-2.4.27-sb1-swarm-bn - 2.4.27-10.sarge4.040815-3 mips-tools - 2.4.27-10.sarge4.040815-3 kernel-image-2.4.27-r4k-ip22 - 2.4.27-10.sarge4.040815-3 noarch: i2c-source - 2.9.1-1sarge2 kernel-doc-2.4.27-speakup - 2.4.27-1.1sarge5 systemimager-server - 3.2.3-6sarge5 kernel-patch-debian-2.4.27 - 2.4.27-10sarge6 kernel-patch-2.4-lm-sensors - 2.9.1-1sarge4 kernel-tree-2.4.27 - 2.4.27-10sarge6 kernel-source-2.4.27 - 2.4.27-10sarge6 systemimager-client - 3.2.3-6sarge5 systemimager-server-flamethrowerd - 3.2.3-6sarge5 systemimager-boot-ia64-standard - 3.2.3-6sarge5 kernel-patch-2.4-i2c - 2.9.1-1sarge2 kernel-doc-2.4.27 - 2.4.27-10sarge6 systemimager-doc - 3.2.3-6sarge5 lm-sensors-source - 2.9.1-1sarge4 systemimager-boot-i386-standard - 3.2.3-6sarge5 systemimager-common - 3.2.3-6sarge5 mipsel: kernel-image-2.4.27-r5k-lasat - 2.4.27-10.sarge4.040815-3 kernel-image-2.4.27-r5k-cobalt - 2.4.27-10.sarge4.040815-3 kernel-headers-2.4.27 - 2.4.27-10.sarge4.040815-3 kernel-image-2.4.27-xxs1500 - 2.4.27-10.sarge4.040815-3 mips-tools - 2.4.27-10.sarge4.040815-3 kernel-image-2.4.27-r4k-kn04 - 2.4.27-10.sarge4.040815-3 kernel-image-2.4.27-r3k-kn02 - 2.4.27-10.sarge4.040815-3 kernel-image-2.4.27-sb1-swarm-bn - 2.4.27-10.sarge4.040815-3 arm: kernel-image-2.4.27-bast - 2.4.27-2sarge6 kernel-image-2.4.27-lart - 2.4.27-2sarge6 kernel-build-2.4.27 - 2.4.27-2sarge6 kernel-image-2.4.27-riscpc - 2.4.27-2sarge6 kernel-headers-2.4.27 - 2.4.27-2sarge6 mips-tools - 2.4.27-10.sarge4.040815-3 kernel-image-2.4.27-netwinder - 2.4.27-2sarge6 kernel-image-2.4.27-riscstation - 2.4.27-2sarge

JSON

To clipboard

{
  "CVSS 2.0": "AV:N/AC:L/Au:N/C:N/I:N/A:C",
  "CVSS 3.0": null,
  "CVSS 4.0": null,
  "remediation_\u0418\u0434\u0435\u043d\u0442\u0438\u0444\u0438\u043a\u0430\u0442\u043e\u0440": null,
  "remediation_\u041d\u0430\u0438\u043c\u0435\u043d\u043e\u0432\u0430\u043d\u0438\u0435": null,
  "\u0412\u0435\u043d\u0434\u043e\u0440 \u041f\u041e": "\u0421\u043e\u043e\u0431\u0449\u0435\u0441\u0442\u0432\u043e \u0441\u0432\u043e\u0431\u043e\u0434\u043d\u043e\u0433\u043e \u043f\u0440\u043e\u0433\u0440\u0430\u043c\u043c\u043d\u043e\u0433\u043e \u043e\u0431\u0435\u0441\u043f\u0435\u0447\u0435\u043d\u0438\u044f",
  "\u0412\u0435\u0440\u0441\u0438\u044f \u041f\u041e": "\u0434\u043e 3.1 (Debian GNU/Linux)",
  "\u0412\u043e\u0437\u043c\u043e\u0436\u043d\u044b\u0435 \u043c\u0435\u0440\u044b \u043f\u043e \u0443\u0441\u0442\u0440\u0430\u043d\u0435\u043d\u0438\u044e": "\u041f\u0440\u043e\u0431\u043b\u0435\u043c\u0430 \u043c\u043e\u0436\u0435\u0442 \u0431\u044b\u0442\u044c \u0440\u0435\u0448\u0435\u043d\u0430 \u043e\u0431\u043d\u043e\u0432\u043b\u0435\u043d\u0438\u0435\u043c \u043e\u043f\u0435\u0440\u0430\u0446\u0438\u043e\u043d\u043d\u043e\u0439 \u0441\u0438\u0441\u0442\u0435\u043c\u044b \u0434\u043e \u0441\u043b\u0435\u0434\u0443\u044e\u0449\u0438\u0445 \u0432\u0435\u0440\u0441\u0438\u0439 \u043f\u0430\u043a\u0435\u0442\u043e\u0432 \u0432 \u0437\u0430\u0432\u0438\u0441\u0438\u043c\u043e\u0441\u0442\u0438 \u043e\u0442 \u0430\u0440\u0445\u0438\u0442\u0435\u043a\u0442\u0443\u0440\u044b:\nDebian GNU/Linux 3.1:\n\tppc:\n\t\tmips-tools - 2.4.27-10.sarge4.040815-3\n\t\tkernel-image-2.4.27-powerpc-small - 2.4.27-10sarge6\n\t\tkernel-image-2.4.27-powerpc-smp - 2.4.27-10sarge6\n\t\tkernel-image-2.4.27-nubus - 2.4.27-10sarge6\n\t\tkernel-image-2.4.27-powerpc - 2.4.27-10sarge6\n\t\tkernel-patch-2.4.27-powerpc - 2.4.27-10sarge6\n\t\tkernel-patch-2.4.27-nubus - 2.4.27-10sarge6\n\t\tkernel-headers-2.4.27-powerpc - 2.4.27-10sarge6\n\t\tkernel-build-2.4.27-apus - 2.4.27-10sarge6\n\t\tkernel-headers-2.4.27-nubus - 2.4.27-10sarge6\n\t\tkernel-patch-2.4.27-apus - 2.4.27-10sarge6\n\t\tkernel-image-2.4.27-apus - 2.4.27-10sarge6\n\t\tkernel-headers-2.4.27-apus - 2.4.27-10sarge6\n\t\tkernel-build-2.4.27-powerpc-smp - 2.4.27-10sarge6\n\t\tkernel-build-2.4.27-nubus - 2.4.27-10sarge6\n\t\tkernel-build-2.4.27-powerpc - 2.4.27-10sarge6\n\t\tkernel-build-2.4.27-powerpc-small - 2.4.27-10sarge6\n\ts390x:\n\t\tkernel-image-2.4.27-4-s390-tape - 2.4.27-2sarge6\n\t\tkernel-image-2.4.27-4-s390x - 2.4.27-2sarge6\n\t\tkernel-headers-2.4.27-4 - 2.4.27-2sarge6\n\t\tkernel-headers-2.4-s390 - 2.4.27-1sarge2\n\t\tkernel-image-2.4-s390x - 2.4.27-1sarge2\n\t\tmips-tools - 2.4.27-10.sarge4.040815-3\n\t\tkernel-image-2.4.27-4-s390 - 2.4.27-2sarge6\n\t\tkernel-image-2.4-s390 - 2.4.27-1sarge2\n\tm68k:\n\t\tkernel-image-2.4.27-amiga - 2.4.27-3sarge6\n\t\tkernel-image-2.4.27-mac - 2.4.27-3sarge6\n\t\tkernel-image-2.4.27-mvme16x - 2.4.27-3sarge6\n\t\tkernel-image-2.4.27-mvme147 - 2.4.27-3sarge6\n\t\tkernel-image-2.4.27-bvme6000 - 2.4.27-3sarge6\n\t\tmips-tools - 2.4.27-10.sarge4.040815-3\n\t\tkernel-image-2.4.27-atari - 2.4.27-3sarge6\n\t\tkernel-image-2.4.27-q40 - 2.4.27-3sarge6\n\ti686:\n\t\tkernel-image-2.4-k7 - 101sarge2\n\t\ti2c-2.4.27-4-386 - 2.9.1-1sarge2\n\t\tkernel-pcmcia-modules-2.4.27-4-k7-smp - 2.4.27-10sarge6\n\t\tkernel-pcmcia-modules-2.4.27-4-k7 - 2.4.27-10sarge6\n\t\tkernel-headers-2.4-686 - 101sarge2\n\t\ti2c-2.4.27-4-k7 - 2.9.1-1sarge2\n\t\tkernel-image-2.4.27-speakup - 2.4.27-1.1sarge5\n\t\tkernel-headers-2.4-386 - 101sarge2\n\t\thostap-modules-2.6.8-4-686 - 0.3.7-1sarge3\n\t\tkernel-image-2.4-k7-smp - 101sarge2\n\t\tmips-tools - 2.4.27-10.sarge4.040815-3\n\t\tkernel-headers-2.4.27-4-386 - 2.4.27-10sarge6\n\t\tpcmcia-modules-2.4.27-4-586tsc - 3.2.5+2sarge2\n\t\tlm-sensors-2.4.27-4-k6 - 2.9.1-1sarge4\n\t\tkernel-image-2.4.27-4-k7-smp - 2.4.27-10sarge6\n\t\tkernel-pcmcia-modules-2.4-686 - 101sarge2\n\t\tkernel-image-2.4.27-4-686 - 2.4.27-10sarge6\n\t\tpcmcia-modules-2.4.27-4-k6 - 3.2.5+2sarge2\n\t\tlm-sensors-2.4.27-4-386 - 2.9.1-1sarge4\n\t\tkernel-headers-2.4-k7-smp - 101sarge2\n\t\tkernel-image-2.4-586tsc - 101sarge2\n\t\tlm-sensors-2.4.27-4-686-smp - 2.9.1-1sarge4\n\t\tlibsensors3 - 2.9.1-1sarge4\n\t\tkernel-headers-2.4.27-4-586tsc - 2.4.27-10sarge6\n\t\tkernel-headers-2.4.27-4 - 2.4.27-10sarge6\n\t\tkernel-image-2.4-686 - 101sarge2\n\t\tkernel-image-2.4-386 - 101sarge2\n\t\tkernel-headers-2.4-k6 - 101sarge2\n\t\tkernel-pcmcia-modules-2.4-686-smp - 101sarge2\n\t\tkernel-pcmcia-modules-2.4-386 - 101sarge2\n\t\ti2c-2.4.27-4-k7-smp - 2.9.1-1sarge2\n\t\ti2c-2.4.27-4-686-smp - 2.9.1-1sarge2\n\t\ti2c-2.4.27-4-686 - 2.9.1-1sarge2\n\t\tkernel-headers-2.4-586tsc - 101sarge2\n\t\thostap-modules-2.6.8-4-686-smp - 0.3.7-1sarge3\n\t\thostap-modules-2.4.27-4-k7 - 0.3.7-1sarge3\n\t\tkernel-headers-2.4-686-smp - 101sarge2\n\t\ti2c-2.4.27-4-k6 - 2.9.1-1sarge2\n\t\tkernel-pcmcia-modules-2.4.27-4-686-smp - 2.4.27-10sarge6\n\t\thostap-modules-2.4.27-4-586tsc - 0.3.7-1sarge3\n\t\thostap-modules-2.4.27-4-686-smp - 0.3.7-1sarge3\n\t\tkernel-headers-2.4.27-4-686-smp - 2.4.27-10sarge6\n\t\tkernel-pcmcia-modules-2.4.27-4-586tsc - 2.4.27-10sarge6\n\t\tkernel-pcmcia-modules-2.4-k7-smp - 101sarge2\n\t\tkernel-headers-2.4.27-speakup - 2.4.27-1.1sarge5\n\t\tlm-sensors-2.4.27-4-686 - 2.9.1-1sarge4\n\t\thostap-modules-2.4.27-4-386 - 0.3.7-1sarge3\n\t\tkernel-image-2.4.27-4-k7 - 2.4.27-10sarge6\n\t\thostap-modules-2.6.8-4-k7 - 0.3.7-1sarge3\n\t\tkernel-image-2.4.27-4-686-smp - 2.4.27-10sarge6\n\t\thostap-modules-2.6.8-4-k7-smp - 0.3.7-1sarge3\n\t\tpcmcia-modules-2.4.27-4-k7 - 3.2.5+2sarge2\n\t\tkernel-headers-2.4.27-4-k6 - 2.4.27-10sarge6\n\t\thostap-modules-2.4.27-4-k6 - 0.3.7-1sarge3\n\t\thostap-modules-2.6.8-4-386 - 0.3.7-1sarge3\n\t\tkernel-pcmcia-modules-2.4-k7 - 101sarge2\n\t\tpcmcia-modules-2.4.27-4-k7-smp - 3.2.5+2sarge2\n\t\tkernel-headers-2.4.27-4-686 - 2.4.27-10sarge6\n\t\tpcmcia-modules-2.4.27-4-686 - 3.2.5+2sarge2\n\t\tlm-sensors-2.4.27-4-k7-smp - 2.9.1-1sarge4\n\t\tkernel-pcmcia-modules-2.4.27-4-686 - 2.4.27-10sarge6\n\t\tlibsensors-dev - 2.9.1-1sarge4\n\t\tkernel-pcmcia-modules-2.4-586tsc - 101sarge2\n\t\tkernel-headers-2.4.27-4-k7 - 2.4.27-10sarge6\n\t\tkernel-image-2.4.27-4-k6 - 2.4.27-10sarge6\n\t\tkernel-headers-2.4-k7 - 101sarge2\n\t\tkernel-pcmcia-modules-2.4-k6 - 101sarge2\n\t\tkernel-build-2.4.27-4 - 2.4.27-10sarge6\n\t\tkernel-image-2.4-k6 - 101sarge2\n\t\thostap-modules-2.4.27-4-686 - 0.3.7-1sarge3\n\t\tlm-sensors-2.4.27-4-k7 - 2.9.1-1sarge4\n\t\tkernel-pcmcia-modules-2.4.27-4-386 - 2.4.27-10sarge6\n\t\tlm-sensors-2.4.27-4-586tsc - 2.9.1-1sarge4\n\t\tmindi-kernel - 2.4.27-2sarge5\n\t\tkernel-pcmcia-modules-2.4.27-4-k6 - 2.4.27-10sarge6\n\t\ti2c-2.4.27-4-586tsc - 2.9.1-1sarge2\n\t\tpcmcia-modules-2.4.27-4-686-smp - 3.2.5+2sarge2\n\t\tkernel-image-2.4-686-smp - 101sarge2\n\t\tlm-sensors - 2.9.1-1sarge4\n\t\tkernel-image-2.4.27-4-386 - 2.4.27-10sarge6\n\t\tsensord - 2.9.1-1sarge4\n\t\tkernel-headers-2.4.27-4-k7-smp - 2.4.27-10sarge6\n\t\thostap-modules-2.4.27-4-k7-smp - 0.3.7-1sarge3\n\t\tpcmcia-modules-2.4.27-4-386 - 3.2.5+2sarge2\n\t\tkernel-image-2.4.27-4-586tsc - 2.4.27-10sarge6\n\thppa:\n\t\tmips-tools - 2.4.27-10.sarge4.040815-3\n\tsparc:\n\t\tkernel-image-2.4-sparc64-smp - 42sarge3\n\t\tkernel-image-2.4-sparc32-smp - 42sarge3\n\t\tkernel-image-2.4-sparc32 - 42sarge3\n\t\tkernel-image-2.4-sparc64 - 42sarge3\n\t\tkernel-image-2.4.27-4-sparc32-smp - 2.4.27-9sarge6\n\t\tkernel-headers-2.4.27-4-sparc32 - 2.4.27-9sarge6\n\t\tkernel-headers-2.4.27-4-sparc64 - 2.4.27-9sarge6\n\t\tkernel-headers-2.4.27-4-sparc64-smp - 2.4.27-9sarge6\n\t\tkernel-headers-2.4.27-4 - 2.4.27-9sarge6\n\t\tkernel-headers-2.4-sparc64-smp - 42sarge3\n\t\tkernel-headers-2.4.27-4-sparc32-smp - 2.4.27-9sarge6\n\t\tkernel-image-2.4.27-4-sparc32 - 2.4.27-9sarge6\n\t\tkernel-headers-2.4-sparc32-smp - 42sarge3\n\t\tkernel-headers-2.4-sparc64 - 42sarge3\n\t\tmips-tools - 2.4.27-10.sarge4.040815-3\n\t\tkernel-build-2.4.27-4 - 2.4.27-9sarge6\n\t\tkernel-image-2.4.27-4-sparc64 - 2.4.27-9sarge6\n\t\tkernel-headers-2.4-sparc32 - 42sarge3\n\t\tkernel-image-2.4.27-4-sparc64-smp - 2.4.27-9sarge6\n\tx86-64:\n\t\tmips-tools - 2.4.27-10.sarge4.040815-3\n\talpha:\n\t\tkernel-headers-2.4-generic - 101sarge3\n\t\tkernel-headers-2.4.27-4-generic - 2.4.27-10sarge6\n\t\tkernel-image-2.4.27-4-smp - 2.4.27-10sarge6\n\t\tkernel-build-2.4.27-4 - 2.4.27-10sarge6\n\t\tmips-tools - 2.4.27-10.sarge4.040815-3\n\t\tkernel-image-2.4-generic - 101sarge3\n\t\tkernel-headers-2.4.27-4-smp - 2.4.27-10sarge6\n\t\tkernel-image-2.4-smp - 101sarge3\n\t\tkernel-headers-2.4-smp - 101sarge3\n\t\tkernel-image-2.4.27-4-generic - 2.4.27-10sarge6\n\t\tkernel-headers-2.4.27-4 - 2.4.27-10sarge6\n\tia64:\n\t\tkernel-image-2.4-mckinley-smp - 2.4.27-10sarge6\n\t\tkernel-image-2.4.27-4-mckinley-smp - 2.4.27-10sarge6\n\t\tkernel-headers-2.4.27-4-itanium - 2.4.27-10sarge6\n\t\tkernel-image-2.4.27-4-mckinley - 2.4.27-10sarge6\n\t\tkernel-image-2.4.27-4-itanium - 2.4.27-10sarge6\n\t\tkernel-headers-2.4.27-4-mckinley - 2.4.27-10sarge6\n\t\tkernel-image-2.4-itanium-smp - 2.4.27-10sarge6\n\t\tmips-tools - 2.4.27-10.sarge4.040815-3\n\t\tkernel-headers-2.4.27-4-itanium-smp - 2.4.27-10sarge6\n\t\tkernel-image-2.4-mckinley - 2.4.27-10sarge6\n\t\tkernel-headers-2.4.27-4-mckinley-smp - 2.4.27-10sarge6\n\t\tkernel-image-2.4.27-4-itanium-smp - 2.4.27-10sarge6\n\t\tkernel-image-2.4-itanium - 2.4.27-10sarge6\n\t\tkernel-headers-2.4.27-4 - 2.4.27-10sarge6\n\t\tkernel-build-2.4.27-4 - 2.4.27-10sarge6\n\tmips:\n\t\tkernel-image-2.4.27-r5k-ip22 - 2.4.27-10.sarge4.040815-3\n\t\tkernel-headers-2.4.27 - 2.4.27-10.sarge4.040815-3\n\t\tkernel-image-2.4.27-sb1-swarm-bn - 2.4.27-10.sarge4.040815-3\n\t\tmips-tools - 2.4.27-10.sarge4.040815-3\n\t\tkernel-image-2.4.27-r4k-ip22 - 2.4.27-10.sarge4.040815-3\n\tnoarch:\n\t\ti2c-source - 2.9.1-1sarge2\n\t\tkernel-doc-2.4.27-speakup - 2.4.27-1.1sarge5\n\t\tsystemimager-server - 3.2.3-6sarge5\n\t\tkernel-patch-debian-2.4.27 - 2.4.27-10sarge6\n\t\tkernel-patch-2.4-lm-sensors - 2.9.1-1sarge4\n\t\tkernel-tree-2.4.27 - 2.4.27-10sarge6\n\t\tkernel-source-2.4.27 - 2.4.27-10sarge6\n\t\tsystemimager-client - 3.2.3-6sarge5\n\t\tsystemimager-server-flamethrowerd - 3.2.3-6sarge5\n\t\tsystemimager-boot-ia64-standard - 3.2.3-6sarge5\n\t\tkernel-patch-2.4-i2c - 2.9.1-1sarge2\n\t\tkernel-doc-2.4.27 - 2.4.27-10sarge6\n\t\tsystemimager-doc - 3.2.3-6sarge5\n\t\tlm-sensors-source - 2.9.1-1sarge4\n\t\tsystemimager-boot-i386-standard - 3.2.3-6sarge5\n\t\tsystemimager-common - 3.2.3-6sarge5\n\tmipsel:\n\t\tkernel-image-2.4.27-r5k-lasat - 2.4.27-10.sarge4.040815-3\n\t\tkernel-image-2.4.27-r5k-cobalt - 2.4.27-10.sarge4.040815-3\n\t\tkernel-headers-2.4.27 - 2.4.27-10.sarge4.040815-3\n\t\tkernel-image-2.4.27-xxs1500 - 2.4.27-10.sarge4.040815-3\n\t\tmips-tools - 2.4.27-10.sarge4.040815-3\n\t\tkernel-image-2.4.27-r4k-kn04 - 2.4.27-10.sarge4.040815-3\n\t\tkernel-image-2.4.27-r3k-kn02 - 2.4.27-10.sarge4.040815-3\n\t\tkernel-image-2.4.27-sb1-swarm-bn - 2.4.27-10.sarge4.040815-3\n\tarm:\n\t\tkernel-image-2.4.27-bast - 2.4.27-2sarge6\n\t\tkernel-image-2.4.27-lart - 2.4.27-2sarge6\n\t\tkernel-build-2.4.27 - 2.4.27-2sarge6\n\t\tkernel-image-2.4.27-riscpc - 2.4.27-2sarge6\n\t\tkernel-headers-2.4.27 - 2.4.27-2sarge6\n\t\tmips-tools - 2.4.27-10.sarge4.040815-3\n\t\tkernel-image-2.4.27-netwinder - 2.4.27-2sarge6\n\t\tkernel-image-2.4.27-riscstation - 2.4.27-2sarge",
  "\u0414\u0430\u0442\u0430 \u0432\u044b\u044f\u0432\u043b\u0435\u043d\u0438\u044f": null,
  "\u0414\u0430\u0442\u0430 \u043f\u043e\u0441\u043b\u0435\u0434\u043d\u0435\u0433\u043e \u043e\u0431\u043d\u043e\u0432\u043b\u0435\u043d\u0438\u044f": "28.11.2016",
  "\u0414\u0430\u0442\u0430 \u043f\u0443\u0431\u043b\u0438\u043a\u0430\u0446\u0438\u0438": "28.04.2015",
  "\u0418\u0434\u0435\u043d\u0442\u0438\u0444\u0438\u043a\u0430\u0442\u043e\u0440": "BDU:2015-03640",
  "\u0418\u0434\u0435\u043d\u0442\u0438\u0444\u0438\u043a\u0430\u0442\u043e\u0440\u044b \u0434\u0440\u0443\u0433\u0438\u0445 \u0441\u0438\u0441\u0442\u0435\u043c \u043e\u043f\u0438\u0441\u0430\u043d\u0438\u0439 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438": "CVE-2004-2731, CVE-2006-4814, CVE-2006-5753, CVE-2006-5823, CVE-2006-6053, CVE-2006-6054, CVE-2006-6106, CVE-2007-1353, CVE-2007-1592, CVE-2007-2172, CVE-2007-2525, CVE-2007-3848, CVE-2007-4308, CVE-2007-4311, CVE-2007-5093, CVE-2007-6063, CVE-2007-6151, CVE-2007-6206, CVE-2007-6694, CVE-2008-0007, DSA-1503, ID:1402392",
  "\u0418\u043d\u0444\u043e\u0440\u043c\u0430\u0446\u0438\u044f \u043e\u0431 \u0443\u0441\u0442\u0440\u0430\u043d\u0435\u043d\u0438\u0438": "\u0423\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c \u0443\u0441\u0442\u0440\u0430\u043d\u0435\u043d\u0430",
  "\u041a\u043b\u0430\u0441\u0441 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438": null,
  "\u041d\u0430\u0437\u0432\u0430\u043d\u0438\u0435 \u041f\u041e": "Debian GNU/Linux",
  "\u041d\u0430\u0438\u043c\u0435\u043d\u043e\u0432\u0430\u043d\u0438\u0435 \u041e\u0421 \u0438 \u0442\u0438\u043f \u0430\u043f\u043f\u0430\u0440\u0430\u0442\u043d\u043e\u0439 \u043f\u043b\u0430\u0442\u0444\u043e\u0440\u043c\u044b": null,
  "\u041d\u0430\u0438\u043c\u0435\u043d\u043e\u0432\u0430\u043d\u0438\u0435 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438": "\u0423\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438 \u043e\u043f\u0435\u0440\u0430\u0446\u0438\u043e\u043d\u043d\u043e\u0439 \u0441\u0438\u0441\u0442\u0435\u043c\u044b Debian\u00a0GNU/Linux, \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u044e\u0449\u0438\u0435 \u0443\u0434\u0430\u043b\u0435\u043d\u043d\u043e\u043c\u0443 \u0437\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a\u0443 \u043d\u0430\u0440\u0443\u0448\u0438\u0442\u044c \u0434\u043e\u0441\u0442\u0443\u043f\u043d\u043e\u0441\u0442\u044c \u0437\u0430\u0449\u0438\u0449\u0430\u0435\u043c\u043e\u0439 \u0438\u043d\u0444\u043e\u0440\u043c\u0430\u0446\u0438\u0438",
  "\u041d\u0430\u043b\u0438\u0447\u0438\u0435 \u044d\u043a\u0441\u043f\u043b\u043e\u0439\u0442\u0430": "\u0414\u0430\u043d\u043d\u044b\u0435 \u0443\u0442\u043e\u0447\u043d\u044f\u044e\u0442\u0441\u044f",
  "\u041e\u043f\u0438\u0441\u0430\u043d\u0438\u0435 \u043e\u0448\u0438\u0431\u043a\u0438 CWE": "\u041e\u0448\u0438\u0431\u043a\u0438, \u0432\u043e\u0437\u043d\u0438\u043a\u0430\u044e\u0449\u0438\u0435 \u043f\u0440\u0438 \u043e\u0431\u0440\u0430\u0431\u043e\u0442\u043a\u0435 \u0447\u0438\u0441\u0435\u043b (CWE-189)",
  "\u041e\u043f\u0438\u0441\u0430\u043d\u0438\u0435 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438": "\u041c\u043d\u043e\u0436\u0435\u0441\u0442\u0432\u0435\u043d\u043d\u044b\u0435 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438 \u043f\u0430\u043a\u0435\u0442\u0430 kernel-pcmcia-modules-2.4.27-4-k7-smp \u043e\u043f\u0435\u0440\u0430\u0446\u0438\u043e\u043d\u043d\u043e\u0439 \u0441\u0438\u0441\u0442\u0435\u043c\u044b Debian\u00a0GNU/Linux, \u044d\u043a\u0441\u043f\u043b\u0443\u0430\u0442\u0430\u0446\u0438\u044f \u043a\u043e\u0442\u043e\u0440\u044b\u0445 \u043c\u043e\u0436\u0435\u0442 \u043f\u0440\u0438\u0432\u0435\u0441\u0442\u0438 \u043a \u043d\u0430\u0440\u0443\u0448\u0435\u043d\u0438\u044e \u0434\u043e\u0441\u0442\u0443\u043f\u043d\u043e\u0441\u0442\u0438  \u0437\u0430\u0449\u0438\u0449\u0430\u0435\u043c\u043e\u0439 \u0438\u043d\u0444\u043e\u0440\u043c\u0430\u0446\u0438\u0438. \u042d\u043a\u0441\u043f\u043b\u0443\u0430\u0442\u0430\u0446\u0438\u044f \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0435\u0439 \u043c\u043e\u0436\u0435\u0442 \u0431\u044b\u0442\u044c \u043e\u0441\u0443\u0449\u0435\u0441\u0442\u0432\u043b\u0435\u043d\u0430 \u0443\u0434\u0430\u043b\u0435\u043d\u043d\u043e",
  "\u041f\u043e\u0441\u043b\u0435\u0434\u0441\u0442\u0432\u0438\u044f \u044d\u043a\u0441\u043f\u043b\u0443\u0430\u0442\u0430\u0446\u0438\u0438 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438": null,
  "\u041f\u0440\u043e\u0447\u0430\u044f \u0438\u043d\u0444\u043e\u0440\u043c\u0430\u0446\u0438\u044f": null,
  "\u0421\u0432\u044f\u0437\u044c \u0441 \u0438\u043d\u0446\u0438\u0434\u0435\u043d\u0442\u0430\u043c\u0438 \u0418\u0411": "\u0414\u0430\u043d\u043d\u044b\u0435 \u0443\u0442\u043e\u0447\u043d\u044f\u044e\u0442\u0441\u044f",
  "\u0421\u043e\u0441\u0442\u043e\u044f\u043d\u0438\u0435 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438": "\u041e\u043f\u0443\u0431\u043b\u0438\u043a\u043e\u0432\u0430\u043d\u0430",
  "\u0421\u043f\u043e\u0441\u043e\u0431 \u0443\u0441\u0442\u0440\u0430\u043d\u0435\u043d\u0438\u044f": "\u0414\u0430\u043d\u043d\u044b\u0435 \u0443\u0442\u043e\u0447\u043d\u044f\u044e\u0442\u0441\u044f",
  "\u0421\u043f\u043e\u0441\u043e\u0431 \u044d\u043a\u0441\u043f\u043b\u0443\u0430\u0442\u0430\u0446\u0438\u0438": "\u041c\u0430\u043d\u0438\u043f\u0443\u043b\u0438\u0440\u043e\u0432\u0430\u043d\u0438\u0435 \u0441\u0442\u0440\u0443\u043a\u0442\u0443\u0440\u0430\u043c\u0438 \u0434\u0430\u043d\u043d\u044b\u0445",
  "\u0421\u0441\u044b\u043b\u043a\u0438 \u043d\u0430 \u0438\u0441\u0442\u043e\u0447\u043d\u0438\u043a\u0438": "http://www.debian.org/security/dsa-1503/\nhttp://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2006-5823\nhttp://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2008-0007\nhttp://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2007-1592\nhttp://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2007-3848\nhttp://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2004-2731\nhttp://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2007-6206\nhttp://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2007-6063\nhttp://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2007-6151\nhttp://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2006-6106\nhttp://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2007-2172\nhttp://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2007-4308\nhttp://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2007-5093\nhttp://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2007-4311\nhttp://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2006-6054\nhttp://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2006-6053\nhttp://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2007-2525\nhttp://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2006-5753\nhttp://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2007-6694\nhttp://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2006-4814\nhttp://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2007-1353",
  "\u0421\u0442\u0430\u0442\u0443\u0441 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438": "\u041f\u043e\u0434\u0442\u0432\u0435\u0440\u0436\u0434\u0435\u043d\u0430 \u043f\u0440\u043e\u0438\u0437\u0432\u043e\u0434\u0438\u0442\u0435\u043b\u0435\u043c",
  "\u0422\u0438\u043f \u041f\u041e": "\u041e\u043f\u0435\u0440\u0430\u0446\u0438\u043e\u043d\u043d\u0430\u044f \u0441\u0438\u0441\u0442\u0435\u043c\u0430",
  "\u0422\u0438\u043f \u043e\u0448\u0438\u0431\u043a\u0438 CWE": "CWE-189",
  "\u0423\u0440\u043e\u0432\u0435\u043d\u044c \u043e\u043f\u0430\u0441\u043d\u043e\u0441\u0442\u0438 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438": "\u0412\u044b\u0441\u043e\u043a\u0438\u0439 \u0443\u0440\u043e\u0432\u0435\u043d\u044c \u043e\u043f\u0430\u0441\u043d\u043e\u0441\u0442\u0438 (\u0431\u0430\u0437\u043e\u0432\u0430\u044f \u043e\u0446\u0435\u043d\u043a\u0430 CVSS 2.0 \u0441\u043e\u0441\u0442\u0430\u0432\u043b\u044f\u0435\u0442 7,8)"
}

CVE-2007-2525 (GCVE-0-2007-2525)

Vulnerability from cvelistv5 – Published: 2007-05-08 23:00 – Updated: 2024-08-07 13:42

Summary

Memory leak in the PPP over Ethernet (PPPoE) socket implementation in the Linux kernel before 2.6.21-git8 allows local users to cause a denial of service (memory consumption) by creating a socket using connect, and releasing it before the PPPIOCGCHAN ioctl is initialized.

Severity

No CVSS data available.

CWE

Assigner

mitre mitre root

References

30 references

URL	Tags
http://kernel.org/pub/linux/kernel/v2.6/snapshots…	x_refsource_CONFIRM
http://www.vupen.com/english/advisories/2007/1703	vdb-entryx_refsource_VUPEN
http://secunia.com/advisories/27227	third-party-advisoryx_refsource_SECUNIA
http://secunia.com/advisories/26664	third-party-advisoryx_refsource_SECUNIA
http://www.novell.com/linux/security/advisories/2…	vendor-advisoryx_refsource_SUSE
http://www.novell.com/linux/security/advisories/2…	vendor-advisoryx_refsource_SUSE
http://secunia.com/advisories/26289	third-party-advisoryx_refsource_SECUNIA
http://www.securityfocus.com/bid/23870	vdb-entryx_refsource_BID
https://oval.cisecurity.org/repository/search/def…	vdb-entrysignaturex_refsource_OVAL
http://secunia.com/advisories/25838	third-party-advisoryx_refsource_SECUNIA
http://www.mandriva.com/security/advisories?name=…	vendor-advisoryx_refsource_MANDRIVA
http://www.ubuntu.com/usn/usn-510-1	vendor-advisoryx_refsource_UBUNTU
http://www.debian.org/security/2008/dsa-1504	vendor-advisoryx_refsource_DEBIAN
http://www.debian.org/security/2007/dsa-1356	vendor-advisoryx_refsource_DEBIAN
http://www.mandriva.com/security/advisories?name=…	vendor-advisoryx_refsource_MANDRIVA
http://secunia.com/advisories/26620	third-party-advisoryx_refsource_SECUNIA
http://www.ubuntu.com/usn/usn-489-1	vendor-advisoryx_refsource_UBUNTU
https://exchange.xforce.ibmcloud.com/vulnerabilit…	vdb-entryx_refsource_XF
http://www.mandriva.com/security/advisories?name=…	vendor-advisoryx_refsource_MANDRIVA
http://secunia.com/advisories/25163	third-party-advisoryx_refsource_SECUNIA
http://www.debian.org/security/2008/dsa-1503	vendor-advisoryx_refsource_DEBIAN
http://support.avaya.com/elmodocs2/security/ASA-2…	x_refsource_CONFIRM
http://secunia.com/advisories/29058	third-party-advisoryx_refsource_SECUNIA
https://rhn.redhat.com/errata/RHSA-2007-0376.html	vendor-advisoryx_refsource_REDHAT
http://www.ubuntu.com/usn/usn-486-1	vendor-advisoryx_refsource_UBUNTU
http://secunia.com/advisories/26450	third-party-advisoryx_refsource_SECUNIA
http://secunia.com/advisories/25700	third-party-advisoryx_refsource_SECUNIA
http://secunia.com/advisories/26139	third-party-advisoryx_refsource_SECUNIA
http://rhn.redhat.com/errata/RHSA-2007-0488.html	vendor-advisoryx_refsource_REDHAT
http://secunia.com/advisories/26133	third-party-advisoryx_refsource_SECUNIA

Date Public

2007-04-20 00:00

Show details on NVD website

JSON

To clipboard

{
  "containers": {
    "adp": [
      {
        "providerMetadata": {
          "dateUpdated": "2024-08-07T13:42:33.440Z",
          "orgId": "af854a3a-2127-422b-91ae-364da2661108",
          "shortName": "CVE"
        },
        "references": [
          {
            "tags": [
              "x_refsource_CONFIRM",
              "x_transferred"
            ],
            "url": "http://kernel.org/pub/linux/kernel/v2.6/snapshots/patch-2.6.21-git8.log"
          },
          {
            "name": "ADV-2007-1703",
            "tags": [
              "vdb-entry",
              "x_refsource_VUPEN",
              "x_transferred"
            ],
            "url": "http://www.vupen.com/english/advisories/2007/1703"
          },
          {
            "name": "27227",
            "tags": [
              "third-party-advisory",
              "x_refsource_SECUNIA",
              "x_transferred"
            ],
            "url": "http://secunia.com/advisories/27227"
          },
          {
            "name": "26664",
            "tags": [
              "third-party-advisory",
              "x_refsource_SECUNIA",
              "x_transferred"
            ],
            "url": "http://secunia.com/advisories/26664"
          },
          {
            "name": "SUSE-SA:2007:051",
            "tags": [
              "vendor-advisory",
              "x_refsource_SUSE",
              "x_transferred"
            ],
            "url": "http://www.novell.com/linux/security/advisories/2007_51_kernel.html"
          },
          {
            "name": "SUSE-SA:2007:053",
            "tags": [
              "vendor-advisory",
              "x_refsource_SUSE",
              "x_transferred"
            ],
            "url": "http://www.novell.com/linux/security/advisories/2007_53_kernel.html"
          },
          {
            "name": "26289",
            "tags": [
              "third-party-advisory",
              "x_refsource_SECUNIA",
              "x_transferred"
            ],
            "url": "http://secunia.com/advisories/26289"
          },
          {
            "name": "23870",
            "tags": [
              "vdb-entry",
              "x_refsource_BID",
              "x_transferred"
            ],
            "url": "http://www.securityfocus.com/bid/23870"
          },
          {
            "name": "oval:org.mitre.oval:def:10594",
            "tags": [
              "vdb-entry",
              "signature",
              "x_refsource_OVAL",
              "x_transferred"
            ],
            "url": "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A10594"
          },
          {
            "name": "25838",
            "tags": [
              "third-party-advisory",
              "x_refsource_SECUNIA",
              "x_transferred"
            ],
            "url": "http://secunia.com/advisories/25838"
          },
          {
            "name": "MDKSA-2007:171",
            "tags": [
              "vendor-advisory",
              "x_refsource_MANDRIVA",
              "x_transferred"
            ],
            "url": "http://www.mandriva.com/security/advisories?name=MDKSA-2007:171"
          },
          {
            "name": "USN-510-1",
            "tags": [
              "vendor-advisory",
              "x_refsource_UBUNTU",
              "x_transferred"
            ],
            "url": "http://www.ubuntu.com/usn/usn-510-1"
          },
          {
            "name": "DSA-1504",
            "tags": [
              "vendor-advisory",
              "x_refsource_DEBIAN",
              "x_transferred"
            ],
            "url": "http://www.debian.org/security/2008/dsa-1504"
          },
          {
            "name": "DSA-1356",
            "tags": [
              "vendor-advisory",
              "x_refsource_DEBIAN",
              "x_transferred"
            ],
            "url": "http://www.debian.org/security/2007/dsa-1356"
          },
          {
            "name": "MDKSA-2007:216",
            "tags": [
              "vendor-advisory",
              "x_refsource_MANDRIVA",
              "x_transferred"
            ],
            "url": "http://www.mandriva.com/security/advisories?name=MDKSA-2007:216"
          },
          {
            "name": "26620",
            "tags": [
              "third-party-advisory",
              "x_refsource_SECUNIA",
              "x_transferred"
            ],
            "url": "http://secunia.com/advisories/26620"
          },
          {
            "name": "USN-489-1",
            "tags": [
              "vendor-advisory",
              "x_refsource_UBUNTU",
              "x_transferred"
            ],
            "url": "http://www.ubuntu.com/usn/usn-489-1"
          },
          {
            "name": "kernel-pppoe-dos(34150)",
            "tags": [
              "vdb-entry",
              "x_refsource_XF",
              "x_transferred"
            ],
            "url": "https://exchange.xforce.ibmcloud.com/vulnerabilities/34150"
          },
          {
            "name": "MDKSA-2007:196",
            "tags": [
              "vendor-advisory",
              "x_refsource_MANDRIVA",
              "x_transferred"
            ],
            "url": "http://www.mandriva.com/security/advisories?name=MDKSA-2007:196"
          },
          {
            "name": "25163",
            "tags": [
              "third-party-advisory",
              "x_refsource_SECUNIA",
              "x_transferred"
            ],
            "url": "http://secunia.com/advisories/25163"
          },
          {
            "name": "DSA-1503",
            "tags": [
              "vendor-advisory",
              "x_refsource_DEBIAN",
              "x_transferred"
            ],
            "url": "http://www.debian.org/security/2008/dsa-1503"
          },
          {
            "tags": [
              "x_refsource_CONFIRM",
              "x_transferred"
            ],
            "url": "http://support.avaya.com/elmodocs2/security/ASA-2007-287.htm"
          },
          {
            "name": "29058",
            "tags": [
              "third-party-advisory",
              "x_refsource_SECUNIA",
              "x_transferred"
            ],
            "url": "http://secunia.com/advisories/29058"
          },
          {
            "name": "RHSA-2007:0376",
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT",
              "x_transferred"
            ],
            "url": "https://rhn.redhat.com/errata/RHSA-2007-0376.html"
          },
          {
            "name": "USN-486-1",
            "tags": [
              "vendor-advisory",
              "x_refsource_UBUNTU",
              "x_transferred"
            ],
            "url": "http://www.ubuntu.com/usn/usn-486-1"
          },
          {
            "name": "26450",
            "tags": [
              "third-party-advisory",
              "x_refsource_SECUNIA",
              "x_transferred"
            ],
            "url": "http://secunia.com/advisories/26450"
          },
          {
            "name": "25700",
            "tags": [
              "third-party-advisory",
              "x_refsource_SECUNIA",
              "x_transferred"
            ],
            "url": "http://secunia.com/advisories/25700"
          },
          {
            "name": "26139",
            "tags": [
              "third-party-advisory",
              "x_refsource_SECUNIA",
              "x_transferred"
            ],
            "url": "http://secunia.com/advisories/26139"
          },
          {
            "name": "RHSA-2007:0488",
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT",
              "x_transferred"
            ],
            "url": "http://rhn.redhat.com/errata/RHSA-2007-0488.html"
          },
          {
            "name": "26133",
            "tags": [
              "third-party-advisory",
              "x_refsource_SECUNIA",
              "x_transferred"
            ],
            "url": "http://secunia.com/advisories/26133"
          }
        ],
        "title": "CVE Program Container"
      }
    ],
    "cna": {
      "affected": [
        {
          "product": "n/a",
          "vendor": "n/a",
          "versions": [
            {
              "status": "affected",
              "version": "n/a"
            }
          ]
        }
      ],
      "datePublic": "2007-04-20T00:00:00.000Z",
      "descriptions": [
        {
          "lang": "en",
          "value": "Memory leak in the PPP over Ethernet (PPPoE) socket implementation in the Linux kernel before 2.6.21-git8 allows local users to cause a denial of service (memory consumption) by creating a socket using connect, and releasing it before the PPPIOCGCHAN ioctl is initialized."
        }
      ],
      "problemTypes": [
        {
          "descriptions": [
            {
              "description": "n/a",
              "lang": "en",
              "type": "text"
            }
          ]
        }
      ],
      "providerMetadata": {
        "dateUpdated": "2017-10-10T00:57:01.000Z",
        "orgId": "8254265b-2729-46b6-b9e3-3dfca2d5bfca",
        "shortName": "mitre"
      },
      "references": [
        {
          "tags": [
            "x_refsource_CONFIRM"
          ],
          "url": "http://kernel.org/pub/linux/kernel/v2.6/snapshots/patch-2.6.21-git8.log"
        },
        {
          "name": "ADV-2007-1703",
          "tags": [
            "vdb-entry",
            "x_refsource_VUPEN"
          ],
          "url": "http://www.vupen.com/english/advisories/2007/1703"
        },
        {
          "name": "27227",
          "tags": [
            "third-party-advisory",
            "x_refsource_SECUNIA"
          ],
          "url": "http://secunia.com/advisories/27227"
        },
        {
          "name": "26664",
          "tags": [
            "third-party-advisory",
            "x_refsource_SECUNIA"
          ],
          "url": "http://secunia.com/advisories/26664"
        },
        {
          "name": "SUSE-SA:2007:051",
          "tags": [
            "vendor-advisory",
            "x_refsource_SUSE"
          ],
          "url": "http://www.novell.com/linux/security/advisories/2007_51_kernel.html"
        },
        {
          "name": "SUSE-SA:2007:053",
          "tags": [
            "vendor-advisory",
            "x_refsource_SUSE"
          ],
          "url": "http://www.novell.com/linux/security/advisories/2007_53_kernel.html"
        },
        {
          "name": "26289",
          "tags": [
            "third-party-advisory",
            "x_refsource_SECUNIA"
          ],
          "url": "http://secunia.com/advisories/26289"
        },
        {
          "name": "23870",
          "tags": [
            "vdb-entry",
            "x_refsource_BID"
          ],
          "url": "http://www.securityfocus.com/bid/23870"
        },
        {
          "name": "oval:org.mitre.oval:def:10594",
          "tags": [
            "vdb-entry",
            "signature",
            "x_refsource_OVAL"
          ],
          "url": "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A10594"
        },
        {
          "name": "25838",
          "tags": [
            "third-party-advisory",
            "x_refsource_SECUNIA"
          ],
          "url": "http://secunia.com/advisories/25838"
        },
        {
          "name": "MDKSA-2007:171",
          "tags": [
            "vendor-advisory",
            "x_refsource_MANDRIVA"
          ],
          "url": "http://www.mandriva.com/security/advisories?name=MDKSA-2007:171"
        },
        {
          "name": "USN-510-1",
          "tags": [
            "vendor-advisory",
            "x_refsource_UBUNTU"
          ],
          "url": "http://www.ubuntu.com/usn/usn-510-1"
        },
        {
          "name": "DSA-1504",
          "tags": [
            "vendor-advisory",
            "x_refsource_DEBIAN"
          ],
          "url": "http://www.debian.org/security/2008/dsa-1504"
        },
        {
          "name": "DSA-1356",
          "tags": [
            "vendor-advisory",
            "x_refsource_DEBIAN"
          ],
          "url": "http://www.debian.org/security/2007/dsa-1356"
        },
        {
          "name": "MDKSA-2007:216",
          "tags": [
            "vendor-advisory",
            "x_refsource_MANDRIVA"
          ],
          "url": "http://www.mandriva.com/security/advisories?name=MDKSA-2007:216"
        },
        {
          "name": "26620",
          "tags": [
            "third-party-advisory",
            "x_refsource_SECUNIA"
          ],
          "url": "http://secunia.com/advisories/26620"
        },
        {
          "name": "USN-489-1",
          "tags": [
            "vendor-advisory",
            "x_refsource_UBUNTU"
          ],
          "url": "http://www.ubuntu.com/usn/usn-489-1"
        },
        {
          "name": "kernel-pppoe-dos(34150)",
          "tags": [
            "vdb-entry",
            "x_refsource_XF"
          ],
          "url": "https://exchange.xforce.ibmcloud.com/vulnerabilities/34150"
        },
        {
          "name": "MDKSA-2007:196",
          "tags": [
            "vendor-advisory",
            "x_refsource_MANDRIVA"
          ],
          "url": "http://www.mandriva.com/security/advisories?name=MDKSA-2007:196"
        },
        {
          "name": "25163",
          "tags": [
            "third-party-advisory",
            "x_refsource_SECUNIA"
          ],
          "url": "http://secunia.com/advisories/25163"
        },
        {
          "name": "DSA-1503",
          "tags": [
            "vendor-advisory",
            "x_refsource_DEBIAN"
          ],
          "url": "http://www.debian.org/security/2008/dsa-1503"
        },
        {
          "tags": [
            "x_refsource_CONFIRM"
          ],
          "url": "http://support.avaya.com/elmodocs2/security/ASA-2007-287.htm"
        },
        {
          "name": "29058",
          "tags": [
            "third-party-advisory",
            "x_refsource_SECUNIA"
          ],
          "url": "http://secunia.com/advisories/29058"
        },
        {
          "name": "RHSA-2007:0376",
          "tags": [
            "vendor-advisory",
            "x_refsource_REDHAT"
          ],
          "url": "https://rhn.redhat.com/errata/RHSA-2007-0376.html"
        },
        {
          "name": "USN-486-1",
          "tags": [
            "vendor-advisory",
            "x_refsource_UBUNTU"
          ],
          "url": "http://www.ubuntu.com/usn/usn-486-1"
        },
        {
          "name": "26450",
          "tags": [
            "third-party-advisory",
            "x_refsource_SECUNIA"
          ],
          "url": "http://secunia.com/advisories/26450"
        },
        {
          "name": "25700",
          "tags": [
            "third-party-advisory",
            "x_refsource_SECUNIA"
          ],
          "url": "http://secunia.com/advisories/25700"
        },
        {
          "name": "26139",
          "tags": [
            "third-party-advisory",
            "x_refsource_SECUNIA"
          ],
          "url": "http://secunia.com/advisories/26139"
        },
        {
          "name": "RHSA-2007:0488",
          "tags": [
            "vendor-advisory",
            "x_refsource_REDHAT"
          ],
          "url": "http://rhn.redhat.com/errata/RHSA-2007-0488.html"
        },
        {
          "name": "26133",
          "tags": [
            "third-party-advisory",
            "x_refsource_SECUNIA"
          ],
          "url": "http://secunia.com/advisories/26133"
        }
      ],
      "x_legacyV4Record": {
        "CVE_data_meta": {
          "ASSIGNER": "cve@mitre.org",
          "ID": "CVE-2007-2525",
          "STATE": "PUBLIC"
        },
        "affects": {
          "vendor": {
            "vendor_data": [
              {
                "product": {
                  "product_data": [
                    {
                      "product_name": "n/a",
                      "version": {
                        "version_data": [
                          {
                            "version_value": "n/a"
                          }
                        ]
                      }
                    }
                  ]
                },
                "vendor_name": "n/a"
              }
            ]
          }
        },
        "data_format": "MITRE",
        "data_type": "CVE",
        "data_version": "4.0",
        "description": {
          "description_data": [
            {
              "lang": "eng",
              "value": "Memory leak in the PPP over Ethernet (PPPoE) socket implementation in the Linux kernel before 2.6.21-git8 allows local users to cause a denial of service (memory consumption) by creating a socket using connect, and releasing it before the PPPIOCGCHAN ioctl is initialized."
            }
          ]
        },
        "problemtype": {
          "problemtype_data": [
            {
              "description": [
                {
                  "lang": "eng",
                  "value": "n/a"
                }
              ]
            }
          ]
        },
        "references": {
          "reference_data": [
            {
              "name": "http://kernel.org/pub/linux/kernel/v2.6/snapshots/patch-2.6.21-git8.log",
              "refsource": "CONFIRM",
              "url": "http://kernel.org/pub/linux/kernel/v2.6/snapshots/patch-2.6.21-git8.log"
            },
            {
              "name": "ADV-2007-1703",
              "refsource": "VUPEN",
              "url": "http://www.vupen.com/english/advisories/2007/1703"
            },
            {
              "name": "27227",
              "refsource": "SECUNIA",
              "url": "http://secunia.com/advisories/27227"
            },
            {
              "name": "26664",
              "refsource": "SECUNIA",
              "url": "http://secunia.com/advisories/26664"
            },
            {
              "name": "SUSE-SA:2007:051",
              "refsource": "SUSE",
              "url": "http://www.novell.com/linux/security/advisories/2007_51_kernel.html"
            },
            {
              "name": "SUSE-SA:2007:053",
              "refsource": "SUSE",
              "url": "http://www.novell.com/linux/security/advisories/2007_53_kernel.html"
            },
            {
              "name": "26289",
              "refsource": "SECUNIA",
              "url": "http://secunia.com/advisories/26289"
            },
            {
              "name": "23870",
              "refsource": "BID",
              "url": "http://www.securityfocus.com/bid/23870"
            },
            {
              "name": "oval:org.mitre.oval:def:10594",
              "refsource": "OVAL",
              "url": "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A10594"
            },
            {
              "name": "25838",
              "refsource": "SECUNIA",
              "url": "http://secunia.com/advisories/25838"
            },
            {
              "name": "MDKSA-2007:171",
              "refsource": "MANDRIVA",
              "url": "http://www.mandriva.com/security/advisories?name=MDKSA-2007:171"
            },
            {
              "name": "USN-510-1",
              "refsource": "UBUNTU",
              "url": "http://www.ubuntu.com/usn/usn-510-1"
            },
            {
              "name": "DSA-1504",
              "refsource": "DEBIAN",
              "url": "http://www.debian.org/security/2008/dsa-1504"
            },
            {
              "name": "DSA-1356",
              "refsource": "DEBIAN",
              "url": "http://www.debian.org/security/2007/dsa-1356"
            },
            {
              "name": "MDKSA-2007:216",
              "refsource": "MANDRIVA",
              "url": "http://www.mandriva.com/security/advisories?name=MDKSA-2007:216"
            },
            {
              "name": "26620",
              "refsource": "SECUNIA",
              "url": "http://secunia.com/advisories/26620"
            },
            {
              "name": "USN-489-1",
              "refsource": "UBUNTU",
              "url": "http://www.ubuntu.com/usn/usn-489-1"
            },
            {
              "name": "kernel-pppoe-dos(34150)",
              "refsource": "XF",
              "url": "https://exchange.xforce.ibmcloud.com/vulnerabilities/34150"
            },
            {
              "name": "MDKSA-2007:196",
              "refsource": "MANDRIVA",
              "url": "http://www.mandriva.com/security/advisories?name=MDKSA-2007:196"
            },
            {
              "name": "25163",
              "refsource": "SECUNIA",
              "url": "http://secunia.com/advisories/25163"
            },
            {
              "name": "DSA-1503",
              "refsource": "DEBIAN",
              "url": "http://www.debian.org/security/2008/dsa-1503"
            },
            {
              "name": "http://support.avaya.com/elmodocs2/security/ASA-2007-287.htm",
              "refsource": "CONFIRM",
              "url": "http://support.avaya.com/elmodocs2/security/ASA-2007-287.htm"
            },
            {
              "name": "29058",
              "refsource": "SECUNIA",
              "url": "http://secunia.com/advisories/29058"
            },
            {
              "name": "RHSA-2007:0376",
              "refsource": "REDHAT",
              "url": "https://rhn.redhat.com/errata/RHSA-2007-0376.html"
            },
            {
              "name": "USN-486-1",
              "refsource": "UBUNTU",
              "url": "http://www.ubuntu.com/usn/usn-486-1"
            },
            {
              "name": "26450",
              "refsource": "SECUNIA",
              "url": "http://secunia.com/advisories/26450"
            },
            {
              "name": "25700",
              "refsource": "SECUNIA",
              "url": "http://secunia.com/advisories/25700"
            },
            {
              "name": "26139",
              "refsource": "SECUNIA",
              "url": "http://secunia.com/advisories/26139"
            },
            {
              "name": "RHSA-2007:0488",
              "refsource": "REDHAT",
              "url": "http://rhn.redhat.com/errata/RHSA-2007-0488.html"
            },
            {
              "name": "26133",
              "refsource": "SECUNIA",
              "url": "http://secunia.com/advisories/26133"
            }
          ]
        }
      }
    }
  },
  "cveMetadata": {
    "assignerOrgId": "8254265b-2729-46b6-b9e3-3dfca2d5bfca",
    "assignerShortName": "mitre",
    "cveId": "CVE-2007-2525",
    "datePublished": "2007-05-08T23:00:00.000Z",
    "dateReserved": "2007-05-08T00:00:00.000Z",
    "dateUpdated": "2024-08-07T13:42:33.440Z",
    "state": "PUBLISHED"
  },
  "dataType": "CVE_RECORD",
  "dataVersion": "5.1"
}

CVE-2007-3848 (GCVE-0-2007-3848)

Vulnerability from cvelistv5 – Published: 2007-08-14 17:00 – Updated: 2024-08-07 14:28

Summary

Linux kernel 2.4.35 and other versions allows local users to send arbitrary signals to a child process that is running at higher privileges by causing a setuid-root parent process to die, which delivers an attacker-controlled parent process death signal (PR_SET_PDEATHSIG).

Severity

No CVSS data available.

CWE

Assigner

redhat redhat root

References

42 references

URL	Tags
http://lists.opensuse.org/opensuse-security-annou…	vendor-advisoryx_refsource_SUSE
http://www.redhat.com/support/errata/RHSA-2007-09…	vendor-advisoryx_refsource_REDHAT
http://www.securityfocus.com/bid/25387	vdb-entryx_refsource_BID
http://secunia.com/advisories/27747	third-party-advisoryx_refsource_SECUNIA
http://bugzilla.redhat.com/bugzilla/show_bug.cgi?…	x_refsource_MISC
http://secunia.com/advisories/27212	third-party-advisoryx_refsource_SECUNIA
http://secunia.com/advisories/27227	third-party-advisoryx_refsource_SECUNIA
http://secunia.com/advisories/26664	third-party-advisoryx_refsource_SECUNIA
http://marc.info/?l=bugtraq&m=118711306802632&w=2	mailing-listx_refsource_BUGTRAQ
http://secunia.com/advisories/26643	third-party-advisoryx_refsource_SECUNIA
https://issues.rpath.com/browse/RPL-1648	x_refsource_CONFIRM
http://www.redhat.com/support/errata/RHSA-2007-10…	vendor-advisoryx_refsource_REDHAT
http://secunia.com/advisories/28806	third-party-advisoryx_refsource_SECUNIA
http://www.novell.com/linux/security/advisories/2…	vendor-advisoryx_refsource_SUSE
http://secunia.com/advisories/27913	third-party-advisoryx_refsource_SECUNIA
http://secunia.com/advisories/27322	third-party-advisoryx_refsource_SECUNIA
http://www.securityfocus.com/archive/1/476803/100…	mailing-listx_refsource_BUGTRAQ
http://secunia.com/advisories/26651	third-party-advisoryx_refsource_SECUNIA
http://www.redhat.com/support/errata/RHSA-2007-09…	vendor-advisoryx_refsource_REDHAT
http://www.ubuntu.com/usn/usn-510-1	vendor-advisoryx_refsource_UBUNTU
http://www.debian.org/security/2008/dsa-1504	vendor-advisoryx_refsource_DEBIAN
http://www.debian.org/security/2007/dsa-1356	vendor-advisoryx_refsource_DEBIAN
http://support.avaya.com/elmodocs2/security/ASA-2…	x_refsource_CONFIRM
http://www.ubuntu.com/usn/usn-509-1	vendor-advisoryx_refsource_UBUNTU
http://secunia.com/advisories/33280	third-party-advisoryx_refsource_SECUNIA
http://www.securityfocus.com/archive/1/476538/100…	mailing-listx_refsource_BUGTRAQ
http://www.securityfocus.com/archive/1/476464/100…	mailing-listx_refsource_BUGTRAQ
http://www.kernel.org/pub/linux/kernel/v2.6/Chang…	x_refsource_CONFIRM
http://www.mandriva.com/security/advisories?name=…	vendor-advisoryx_refsource_MANDRIVA
http://lists.opensuse.org/opensuse-security-annou…	vendor-advisoryx_refsource_SUSE
http://www.debian.org/security/2008/dsa-1503	vendor-advisoryx_refsource_DEBIAN
http://secunia.com/advisories/29058	third-party-advisoryx_refsource_SECUNIA
http://secunia.com/advisories/26500	third-party-advisoryx_refsource_SECUNIA
http://marc.info/?l=openwall-announce&m=118710356…	mailing-listx_refsource_MLIST
http://www.redhat.com/support/errata/RHSA-2008-07…	vendor-advisoryx_refsource_REDHAT
http://secunia.com/advisories/26450	third-party-advisoryx_refsource_SECUNIA
https://oval.cisecurity.org/repository/search/def…	vdb-entrysignaturex_refsource_OVAL
http://www.ubuntu.com/usn/usn-508-1	vendor-advisoryx_refsource_UBUNTU
http://www.securityfocus.com/archive/1/476677/100…	mailing-listx_refsource_BUGTRAQ
http://secunia.com/advisories/27436	third-party-advisoryx_refsource_SECUNIA
http://secunia.com/advisories/29570	third-party-advisoryx_refsource_SECUNIA
http://www.mandriva.com/security/advisories?name=…	vendor-advisoryx_refsource_MANDRIVA

Date Public

2007-08-14 00:00

Show details on NVD website

JSON

To clipboard

{
  "containers": {
    "adp": [
      {
        "providerMetadata": {
          "dateUpdated": "2024-08-07T14:28:52.569Z",
          "orgId": "af854a3a-2127-422b-91ae-364da2661108",
          "shortName": "CVE"
        },
        "references": [
          {
            "name": "SUSE-SA:2008:017",
            "tags": [
              "vendor-advisory",
              "x_refsource_SUSE",
              "x_transferred"
            ],
            "url": "http://lists.opensuse.org/opensuse-security-announce/2008-03/msg00007.html"
          },
          {
            "name": "RHSA-2007:0940",
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT",
              "x_transferred"
            ],
            "url": "http://www.redhat.com/support/errata/RHSA-2007-0940.html"
          },
          {
            "name": "25387",
            "tags": [
              "vdb-entry",
              "x_refsource_BID",
              "x_transferred"
            ],
            "url": "http://www.securityfocus.com/bid/25387"
          },
          {
            "name": "27747",
            "tags": [
              "third-party-advisory",
              "x_refsource_SECUNIA",
              "x_transferred"
            ],
            "url": "http://secunia.com/advisories/27747"
          },
          {
            "tags": [
              "x_refsource_MISC",
              "x_transferred"
            ],
            "url": "http://bugzilla.redhat.com/bugzilla/show_bug.cgi?id=CVE-2007-3848"
          },
          {
            "name": "27212",
            "tags": [
              "third-party-advisory",
              "x_refsource_SECUNIA",
              "x_transferred"
            ],
            "url": "http://secunia.com/advisories/27212"
          },
          {
            "name": "27227",
            "tags": [
              "third-party-advisory",
              "x_refsource_SECUNIA",
              "x_transferred"
            ],
            "url": "http://secunia.com/advisories/27227"
          },
          {
            "name": "26664",
            "tags": [
              "third-party-advisory",
              "x_refsource_SECUNIA",
              "x_transferred"
            ],
            "url": "http://secunia.com/advisories/26664"
          },
          {
            "name": "20070814 COSEINC Linux Advisory #1: Linux Kernel Parent Process DeathSignal Vulnerability",
            "tags": [
              "mailing-list",
              "x_refsource_BUGTRAQ",
              "x_transferred"
            ],
            "url": "http://marc.info/?l=bugtraq\u0026m=118711306802632\u0026w=2"
          },
          {
            "name": "26643",
            "tags": [
              "third-party-advisory",
              "x_refsource_SECUNIA",
              "x_transferred"
            ],
            "url": "http://secunia.com/advisories/26643"
          },
          {
            "tags": [
              "x_refsource_CONFIRM",
              "x_transferred"
            ],
            "url": "https://issues.rpath.com/browse/RPL-1648"
          },
          {
            "name": "RHSA-2007:1049",
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT",
              "x_transferred"
            ],
            "url": "http://www.redhat.com/support/errata/RHSA-2007-1049.html"
          },
          {
            "name": "28806",
            "tags": [
              "third-party-advisory",
              "x_refsource_SECUNIA",
              "x_transferred"
            ],
            "url": "http://secunia.com/advisories/28806"
          },
          {
            "name": "SUSE-SA:2007:053",
            "tags": [
              "vendor-advisory",
              "x_refsource_SUSE",
              "x_transferred"
            ],
            "url": "http://www.novell.com/linux/security/advisories/2007_53_kernel.html"
          },
          {
            "name": "27913",
            "tags": [
              "third-party-advisory",
              "x_refsource_SECUNIA",
              "x_transferred"
            ],
            "url": "http://secunia.com/advisories/27913"
          },
          {
            "name": "27322",
            "tags": [
              "third-party-advisory",
              "x_refsource_SECUNIA",
              "x_transferred"
            ],
            "url": "http://secunia.com/advisories/27322"
          },
          {
            "name": "20070816 Re: COSEINC Linux Advisory #1: Linux Kernel Parent Process Death Signal Vulnerability",
            "tags": [
              "mailing-list",
              "x_refsource_BUGTRAQ",
              "x_transferred"
            ],
            "url": "http://www.securityfocus.com/archive/1/476803/100/0/threaded"
          },
          {
            "name": "26651",
            "tags": [
              "third-party-advisory",
              "x_refsource_SECUNIA",
              "x_transferred"
            ],
            "url": "http://secunia.com/advisories/26651"
          },
          {
            "name": "RHSA-2007:0939",
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT",
              "x_transferred"
            ],
            "url": "http://www.redhat.com/support/errata/RHSA-2007-0939.html"
          },
          {
            "name": "USN-510-1",
            "tags": [
              "vendor-advisory",
              "x_refsource_UBUNTU",
              "x_transferred"
            ],
            "url": "http://www.ubuntu.com/usn/usn-510-1"
          },
          {
            "name": "DSA-1504",
            "tags": [
              "vendor-advisory",
              "x_refsource_DEBIAN",
              "x_transferred"
            ],
            "url": "http://www.debian.org/security/2008/dsa-1504"
          },
          {
            "name": "DSA-1356",
            "tags": [
              "vendor-advisory",
              "x_refsource_DEBIAN",
              "x_transferred"
            ],
            "url": "http://www.debian.org/security/2007/dsa-1356"
          },
          {
            "tags": [
              "x_refsource_CONFIRM",
              "x_transferred"
            ],
            "url": "http://support.avaya.com/elmodocs2/security/ASA-2007-474.htm"
          },
          {
            "name": "USN-509-1",
            "tags": [
              "vendor-advisory",
              "x_refsource_UBUNTU",
              "x_transferred"
            ],
            "url": "http://www.ubuntu.com/usn/usn-509-1"
          },
          {
            "name": "33280",
            "tags": [
              "third-party-advisory",
              "x_refsource_SECUNIA",
              "x_transferred"
            ],
            "url": "http://secunia.com/advisories/33280"
          },
          {
            "name": "20070814 Re: COSEINC Linux Advisory #1: Linux Kernel Parent Process Death Signal Vulnerability",
            "tags": [
              "mailing-list",
              "x_refsource_BUGTRAQ",
              "x_transferred"
            ],
            "url": "http://www.securityfocus.com/archive/1/476538/100/0/threaded"
          },
          {
            "name": "20070814 COSEINC Linux Advisory #1: Linux Kernel Parent Process Death Signal Vulnerability",
            "tags": [
              "mailing-list",
              "x_refsource_BUGTRAQ",
              "x_transferred"
            ],
            "url": "http://www.securityfocus.com/archive/1/476464/100/0/threaded"
          },
          {
            "tags": [
              "x_refsource_CONFIRM",
              "x_transferred"
            ],
            "url": "http://www.kernel.org/pub/linux/kernel/v2.6/ChangeLog-2.6.22.4"
          },
          {
            "name": "MDKSA-2007:196",
            "tags": [
              "vendor-advisory",
              "x_refsource_MANDRIVA",
              "x_transferred"
            ],
            "url": "http://www.mandriva.com/security/advisories?name=MDKSA-2007:196"
          },
          {
            "name": "SUSE-SA:2008:006",
            "tags": [
              "vendor-advisory",
              "x_refsource_SUSE",
              "x_transferred"
            ],
            "url": "http://lists.opensuse.org/opensuse-security-announce/2008-02/msg00002.html"
          },
          {
            "name": "DSA-1503",
            "tags": [
              "vendor-advisory",
              "x_refsource_DEBIAN",
              "x_transferred"
            ],
            "url": "http://www.debian.org/security/2008/dsa-1503"
          },
          {
            "name": "29058",
            "tags": [
              "third-party-advisory",
              "x_refsource_SECUNIA",
              "x_transferred"
            ],
            "url": "http://secunia.com/advisories/29058"
          },
          {
            "name": "26500",
            "tags": [
              "third-party-advisory",
              "x_refsource_SECUNIA",
              "x_transferred"
            ],
            "url": "http://secunia.com/advisories/26500"
          },
          {
            "name": "[openwall-announce] 20070814 Linux 2.4.35-ow2",
            "tags": [
              "mailing-list",
              "x_refsource_MLIST",
              "x_transferred"
            ],
            "url": "http://marc.info/?l=openwall-announce\u0026m=118710356812637\u0026w=2"
          },
          {
            "name": "RHSA-2008:0787",
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT",
              "x_transferred"
            ],
            "url": "http://www.redhat.com/support/errata/RHSA-2008-0787.html"
          },
          {
            "name": "26450",
            "tags": [
              "third-party-advisory",
              "x_refsource_SECUNIA",
              "x_transferred"
            ],
            "url": "http://secunia.com/advisories/26450"
          },
          {
            "name": "oval:org.mitre.oval:def:10120",
            "tags": [
              "vdb-entry",
              "signature",
              "x_refsource_OVAL",
              "x_transferred"
            ],
            "url": "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A10120"
          },
          {
            "name": "USN-508-1",
            "tags": [
              "vendor-advisory",
              "x_refsource_UBUNTU",
              "x_transferred"
            ],
            "url": "http://www.ubuntu.com/usn/usn-508-1"
          },
          {
            "name": "20070815 Re: COSEINC Linux Advisory #1: Linux Kernel Parent Process Death Signal Vulnerability",
            "tags": [
              "mailing-list",
              "x_refsource_BUGTRAQ",
              "x_transferred"
            ],
            "url": "http://www.securityfocus.com/archive/1/476677/100/0/threaded"
          },
          {
            "name": "27436",
            "tags": [
              "third-party-advisory",
              "x_refsource_SECUNIA",
              "x_transferred"
            ],
            "url": "http://secunia.com/advisories/27436"
          },
          {
            "name": "29570",
            "tags": [
              "third-party-advisory",
              "x_refsource_SECUNIA",
              "x_transferred"
            ],
            "url": "http://secunia.com/advisories/29570"
          },
          {
            "name": "MDKSA-2007:195",
            "tags": [
              "vendor-advisory",
              "x_refsource_MANDRIVA",
              "x_transferred"
            ],
            "url": "http://www.mandriva.com/security/advisories?name=MDKSA-2007:195"
          }
        ],
        "title": "CVE Program Container"
      }
    ],
    "cna": {
      "affected": [
        {
          "product": "n/a",
          "vendor": "n/a",
          "versions": [
            {
              "status": "affected",
              "version": "n/a"
            }
          ]
        }
      ],
      "datePublic": "2007-08-14T00:00:00.000Z",
      "descriptions": [
        {
          "lang": "en",
          "value": "Linux kernel 2.4.35 and other versions allows local users to send arbitrary signals to a child process that is running at higher privileges by causing a setuid-root parent process to die, which delivers an attacker-controlled parent process death signal (PR_SET_PDEATHSIG)."
        }
      ],
      "problemTypes": [
        {
          "descriptions": [
            {
              "description": "n/a",
              "lang": "en",
              "type": "text"
            }
          ]
        }
      ],
      "providerMetadata": {
        "dateUpdated": "2018-10-15T20:57:01.000Z",
        "orgId": "53f830b8-0a3f-465b-8143-3b8a9948e749",
        "shortName": "redhat"
      },
      "references": [
        {
          "name": "SUSE-SA:2008:017",
          "tags": [
            "vendor-advisory",
            "x_refsource_SUSE"
          ],
          "url": "http://lists.opensuse.org/opensuse-security-announce/2008-03/msg00007.html"
        },
        {
          "name": "RHSA-2007:0940",
          "tags": [
            "vendor-advisory",
            "x_refsource_REDHAT"
          ],
          "url": "http://www.redhat.com/support/errata/RHSA-2007-0940.html"
        },
        {
          "name": "25387",
          "tags": [
            "vdb-entry",
            "x_refsource_BID"
          ],
          "url": "http://www.securityfocus.com/bid/25387"
        },
        {
          "name": "27747",
          "tags": [
            "third-party-advisory",
            "x_refsource_SECUNIA"
          ],
          "url": "http://secunia.com/advisories/27747"
        },
        {
          "tags": [
            "x_refsource_MISC"
          ],
          "url": "http://bugzilla.redhat.com/bugzilla/show_bug.cgi?id=CVE-2007-3848"
        },
        {
          "name": "27212",
          "tags": [
            "third-party-advisory",
            "x_refsource_SECUNIA"
          ],
          "url": "http://secunia.com/advisories/27212"
        },
        {
          "name": "27227",
          "tags": [
            "third-party-advisory",
            "x_refsource_SECUNIA"
          ],
          "url": "http://secunia.com/advisories/27227"
        },
        {
          "name": "26664",
          "tags": [
            "third-party-advisory",
            "x_refsource_SECUNIA"
          ],
          "url": "http://secunia.com/advisories/26664"
        },
        {
          "name": "20070814 COSEINC Linux Advisory #1: Linux Kernel Parent Process DeathSignal Vulnerability",
          "tags": [
            "mailing-list",
            "x_refsource_BUGTRAQ"
          ],
          "url": "http://marc.info/?l=bugtraq\u0026m=118711306802632\u0026w=2"
        },
        {
          "name": "26643",
          "tags": [
            "third-party-advisory",
            "x_refsource_SECUNIA"
          ],
          "url": "http://secunia.com/advisories/26643"
        },
        {
          "tags": [
            "x_refsource_CONFIRM"
          ],
          "url": "https://issues.rpath.com/browse/RPL-1648"
        },
        {
          "name": "RHSA-2007:1049",
          "tags": [
            "vendor-advisory",
            "x_refsource_REDHAT"
          ],
          "url": "http://www.redhat.com/support/errata/RHSA-2007-1049.html"
        },
        {
          "name": "28806",
          "tags": [
            "third-party-advisory",
            "x_refsource_SECUNIA"
          ],
          "url": "http://secunia.com/advisories/28806"
        },
        {
          "name": "SUSE-SA:2007:053",
          "tags": [
            "vendor-advisory",
            "x_refsource_SUSE"
          ],
          "url": "http://www.novell.com/linux/security/advisories/2007_53_kernel.html"
        },
        {
          "name": "27913",
          "tags": [
            "third-party-advisory",
            "x_refsource_SECUNIA"
          ],
          "url": "http://secunia.com/advisories/27913"
        },
        {
          "name": "27322",
          "tags": [
            "third-party-advisory",
            "x_refsource_SECUNIA"
          ],
          "url": "http://secunia.com/advisories/27322"
        },
        {
          "name": "20070816 Re: COSEINC Linux Advisory #1: Linux Kernel Parent Process Death Signal Vulnerability",
          "tags": [
            "mailing-list",
            "x_refsource_BUGTRAQ"
          ],
          "url": "http://www.securityfocus.com/archive/1/476803/100/0/threaded"
        },
        {
          "name": "26651",
          "tags": [
            "third-party-advisory",
            "x_refsource_SECUNIA"
          ],
          "url": "http://secunia.com/advisories/26651"
        },
        {
          "name": "RHSA-2007:0939",
          "tags": [
            "vendor-advisory",
            "x_refsource_REDHAT"
          ],
          "url": "http://www.redhat.com/support/errata/RHSA-2007-0939.html"
        },
        {
          "name": "USN-510-1",
          "tags": [
            "vendor-advisory",
            "x_refsource_UBUNTU"
          ],
          "url": "http://www.ubuntu.com/usn/usn-510-1"
        },
        {
          "name": "DSA-1504",
          "tags": [
            "vendor-advisory",
            "x_refsource_DEBIAN"
          ],
          "url": "http://www.debian.org/security/2008/dsa-1504"
        },
        {
          "name": "DSA-1356",
          "tags": [
            "vendor-advisory",
            "x_refsource_DEBIAN"
          ],
          "url": "http://www.debian.org/security/2007/dsa-1356"
        },
        {
          "tags": [
            "x_refsource_CONFIRM"
          ],
          "url": "http://support.avaya.com/elmodocs2/security/ASA-2007-474.htm"
        },
        {
          "name": "USN-509-1",
          "tags": [
            "vendor-advisory",
            "x_refsource_UBUNTU"
          ],
          "url": "http://www.ubuntu.com/usn/usn-509-1"
        },
        {
          "name": "33280",
          "tags": [
            "third-party-advisory",
            "x_refsource_SECUNIA"
          ],
          "url": "http://secunia.com/advisories/33280"
        },
        {
          "name": "20070814 Re: COSEINC Linux Advisory #1: Linux Kernel Parent Process Death Signal Vulnerability",
          "tags": [
            "mailing-list",
            "x_refsource_BUGTRAQ"
          ],
          "url": "http://www.securityfocus.com/archive/1/476538/100/0/threaded"
        },
        {
          "name": "20070814 COSEINC Linux Advisory #1: Linux Kernel Parent Process Death Signal Vulnerability",
          "tags": [
            "mailing-list",
            "x_refsource_BUGTRAQ"
          ],
          "url": "http://www.securityfocus.com/archive/1/476464/100/0/threaded"
        },
        {
          "tags": [
            "x_refsource_CONFIRM"
          ],
          "url": "http://www.kernel.org/pub/linux/kernel/v2.6/ChangeLog-2.6.22.4"
        },
        {
          "name": "MDKSA-2007:196",
          "tags": [
            "vendor-advisory",
            "x_refsource_MANDRIVA"
          ],
          "url": "http://www.mandriva.com/security/advisories?name=MDKSA-2007:196"
        },
        {
          "name": "SUSE-SA:2008:006",
          "tags": [
            "vendor-advisory",
            "x_refsource_SUSE"
          ],
          "url": "http://lists.opensuse.org/opensuse-security-announce/2008-02/msg00002.html"
        },
        {
          "name": "DSA-1503",
          "tags": [
            "vendor-advisory",
            "x_refsource_DEBIAN"
          ],
          "url": "http://www.debian.org/security/2008/dsa-1503"
        },
        {
          "name": "29058",
          "tags": [
            "third-party-advisory",
            "x_refsource_SECUNIA"
          ],
          "url": "http://secunia.com/advisories/29058"
        },
        {
          "name": "26500",
          "tags": [
            "third-party-advisory",
            "x_refsource_SECUNIA"
          ],
          "url": "http://secunia.com/advisories/26500"
        },
        {
          "name": "[openwall-announce] 20070814 Linux 2.4.35-ow2",
          "tags": [
            "mailing-list",
            "x_refsource_MLIST"
          ],
          "url": "http://marc.info/?l=openwall-announce\u0026m=118710356812637\u0026w=2"
        },
        {
          "name": "RHSA-2008:0787",
          "tags": [
            "vendor-advisory",
            "x_refsource_REDHAT"
          ],
          "url": "http://www.redhat.com/support/errata/RHSA-2008-0787.html"
        },
        {
          "name": "26450",
          "tags": [
            "third-party-advisory",
            "x_refsource_SECUNIA"
          ],
          "url": "http://secunia.com/advisories/26450"
        },
        {
          "name": "oval:org.mitre.oval:def:10120",
          "tags": [
            "vdb-entry",
            "signature",
            "x_refsource_OVAL"
          ],
          "url": "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A10120"
        },
        {
          "name": "USN-508-1",
          "tags": [
            "vendor-advisory",
            "x_refsource_UBUNTU"
          ],
          "url": "http://www.ubuntu.com/usn/usn-508-1"
        },
        {
          "name": "20070815 Re: COSEINC Linux Advisory #1: Linux Kernel Parent Process Death Signal Vulnerability",
          "tags": [
            "mailing-list",
            "x_refsource_BUGTRAQ"
          ],
          "url": "http://www.securityfocus.com/archive/1/476677/100/0/threaded"
        },
        {
          "name": "27436",
          "tags": [
            "third-party-advisory",
            "x_refsource_SECUNIA"
          ],
          "url": "http://secunia.com/advisories/27436"
        },
        {
          "name": "29570",
          "tags": [
            "third-party-advisory",
            "x_refsource_SECUNIA"
          ],
          "url": "http://secunia.com/advisories/29570"
        },
        {
          "name": "MDKSA-2007:195",
          "tags": [
            "vendor-advisory",
            "x_refsource_MANDRIVA"
          ],
          "url": "http://www.mandriva.com/security/advisories?name=MDKSA-2007:195"
        }
      ]
    }
  },
  "cveMetadata": {
    "assignerOrgId": "53f830b8-0a3f-465b-8143-3b8a9948e749",
    "assignerShortName": "redhat",
    "cveId": "CVE-2007-3848",
    "datePublished": "2007-08-14T17:00:00.000Z",
    "dateReserved": "2007-07-18T00:00:00.000Z",
    "dateUpdated": "2024-08-07T14:28:52.569Z",
    "state": "PUBLISHED"
  },
  "dataType": "CVE_RECORD",
  "dataVersion": "5.1"
}

CVE-2007-4308 (GCVE-0-2007-4308)

Vulnerability from cvelistv5 – Published: 2007-08-13 21:00 – Updated: 2024-08-07 14:53

Summary

The (1) aac_cfg_open and (2) aac_compat_ioctl functions in the SCSI layer ioctl path in aacraid in the Linux kernel before 2.6.23-rc2 do not check permissions for ioctls, which might allow local users to cause a denial of service or gain privileges.

Severity

No CVSS data available.

CWE

Assigner

mitre mitre root

References

40 references

URL	Tags
http://lists.vmware.com/pipermail/security-announ…	mailing-listx_refsource_MLIST
http://lists.opensuse.org/opensuse-security-annou…	vendor-advisoryx_refsource_SUSE
http://www.redhat.com/support/errata/RHSA-2007-09…	vendor-advisoryx_refsource_REDHAT
http://secunia.com/advisories/27747	third-party-advisoryx_refsource_SECUNIA
https://oval.cisecurity.org/repository/search/def…	vdb-entrysignaturex_refsource_OVAL
http://secunia.com/advisories/27212	third-party-advisoryx_refsource_SECUNIA
http://secunia.com/advisories/26643	third-party-advisoryx_refsource_SECUNIA
http://kernel.org/pub/linux/kernel/v2.6/testing/C…	x_refsource_CONFIRM
http://www.redhat.com/support/errata/RHSA-2007-10…	vendor-advisoryx_refsource_REDHAT
http://secunia.com/advisories/28806	third-party-advisoryx_refsource_SECUNIA
http://secunia.com/advisories/27913	third-party-advisoryx_refsource_SECUNIA
http://secunia.com/advisories/27322	third-party-advisoryx_refsource_SECUNIA
http://www.vupen.com/english/advisories/2007/2786	vdb-entryx_refsource_VUPEN
http://www.debian.org/security/2007/dsa-1363	vendor-advisoryx_refsource_DEBIAN
http://secunia.com/advisories/26651	third-party-advisoryx_refsource_SECUNIA
http://www.redhat.com/support/errata/RHSA-2007-09…	vendor-advisoryx_refsource_REDHAT
http://secunia.com/advisories/26322	third-party-advisoryx_refsource_SECUNIA
http://secunia.com/advisories/29032	third-party-advisoryx_refsource_SECUNIA
http://www.ubuntu.com/usn/usn-510-1	vendor-advisoryx_refsource_UBUNTU
http://securitytracker.com/id?1019470	vdb-entryx_refsource_SECTRACK
http://www.debian.org/security/2008/dsa-1504	vendor-advisoryx_refsource_DEBIAN
http://support.avaya.com/elmodocs2/security/ASA-2…	x_refsource_CONFIRM
http://www.ubuntu.com/usn/usn-509-1	vendor-advisoryx_refsource_UBUNTU
http://secunia.com/advisories/26647	third-party-advisoryx_refsource_SECUNIA
http://secunia.com/advisories/27912	third-party-advisoryx_refsource_SECUNIA
http://www.securityfocus.com/archive/1/488457/100…	mailing-listx_refsource_BUGTRAQ
http://secunia.com/advisories/33280	third-party-advisoryx_refsource_SECUNIA
http://www.vupen.com/english/advisories/2008/0637	vdb-entryx_refsource_VUPEN
http://lkml.org/lkml/2007/7/23/195	x_refsource_CONFIRM
http://www.mandriva.com/security/advisories?name=…	vendor-advisoryx_refsource_MANDRIVA
http://lists.opensuse.org/opensuse-security-annou…	vendor-advisoryx_refsource_SUSE
http://www.securityfocus.com/bid/25216	vdb-entryx_refsource_BID
http://lists.opensuse.org/opensuse-security-annou…	vendor-advisoryx_refsource_SUSE
http://www.debian.org/security/2008/dsa-1503	vendor-advisoryx_refsource_DEBIAN
http://secunia.com/advisories/29058	third-party-advisoryx_refsource_SECUNIA
http://www.redhat.com/support/errata/RHSA-2008-07…	vendor-advisoryx_refsource_REDHAT
http://www.ubuntu.com/usn/usn-508-1	vendor-advisoryx_refsource_UBUNTU
http://secunia.com/advisories/27436	third-party-advisoryx_refsource_SECUNIA
http://secunia.com/advisories/29570	third-party-advisoryx_refsource_SECUNIA
http://www.mandriva.com/security/advisories?name=…	vendor-advisoryx_refsource_MANDRIVA

Date Public

2007-07-23 00:00

Show details on NVD website

JSON

To clipboard

{
  "containers": {
    "adp": [
      {
        "providerMetadata": {
          "dateUpdated": "2024-08-07T14:53:55.997Z",
          "orgId": "af854a3a-2127-422b-91ae-364da2661108",
          "shortName": "CVE"
        },
        "references": [
          {
            "name": "[Security-announce] 20080221 VMSA-2008-0003 Moderate: Updated aacraid driver and samba and python service console updates",
            "tags": [
              "mailing-list",
              "x_refsource_MLIST",
              "x_transferred"
            ],
            "url": "http://lists.vmware.com/pipermail/security-announce/2008/000005.html"
          },
          {
            "name": "SUSE-SA:2008:017",
            "tags": [
              "vendor-advisory",
              "x_refsource_SUSE",
              "x_transferred"
            ],
            "url": "http://lists.opensuse.org/opensuse-security-announce/2008-03/msg00007.html"
          },
          {
            "name": "RHSA-2007:0940",
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT",
              "x_transferred"
            ],
            "url": "http://www.redhat.com/support/errata/RHSA-2007-0940.html"
          },
          {
            "name": "27747",
            "tags": [
              "third-party-advisory",
              "x_refsource_SECUNIA",
              "x_transferred"
            ],
            "url": "http://secunia.com/advisories/27747"
          },
          {
            "name": "oval:org.mitre.oval:def:8872",
            "tags": [
              "vdb-entry",
              "signature",
              "x_refsource_OVAL",
              "x_transferred"
            ],
            "url": "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A8872"
          },
          {
            "name": "27212",
            "tags": [
              "third-party-advisory",
              "x_refsource_SECUNIA",
              "x_transferred"
            ],
            "url": "http://secunia.com/advisories/27212"
          },
          {
            "name": "26643",
            "tags": [
              "third-party-advisory",
              "x_refsource_SECUNIA",
              "x_transferred"
            ],
            "url": "http://secunia.com/advisories/26643"
          },
          {
            "tags": [
              "x_refsource_CONFIRM",
              "x_transferred"
            ],
            "url": "http://kernel.org/pub/linux/kernel/v2.6/testing/ChangeLog-2.6.23-rc2"
          },
          {
            "name": "RHSA-2007:1049",
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT",
              "x_transferred"
            ],
            "url": "http://www.redhat.com/support/errata/RHSA-2007-1049.html"
          },
          {
            "name": "28806",
            "tags": [
              "third-party-advisory",
              "x_refsource_SECUNIA",
              "x_transferred"
            ],
            "url": "http://secunia.com/advisories/28806"
          },
          {
            "name": "27913",
            "tags": [
              "third-party-advisory",
              "x_refsource_SECUNIA",
              "x_transferred"
            ],
            "url": "http://secunia.com/advisories/27913"
          },
          {
            "name": "27322",
            "tags": [
              "third-party-advisory",
              "x_refsource_SECUNIA",
              "x_transferred"
            ],
            "url": "http://secunia.com/advisories/27322"
          },
          {
            "name": "ADV-2007-2786",
            "tags": [
              "vdb-entry",
              "x_refsource_VUPEN",
              "x_transferred"
            ],
            "url": "http://www.vupen.com/english/advisories/2007/2786"
          },
          {
            "name": "DSA-1363",
            "tags": [
              "vendor-advisory",
              "x_refsource_DEBIAN",
              "x_transferred"
            ],
            "url": "http://www.debian.org/security/2007/dsa-1363"
          },
          {
            "name": "26651",
            "tags": [
              "third-party-advisory",
              "x_refsource_SECUNIA",
              "x_transferred"
            ],
            "url": "http://secunia.com/advisories/26651"
          },
          {
            "name": "RHSA-2007:0939",
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT",
              "x_transferred"
            ],
            "url": "http://www.redhat.com/support/errata/RHSA-2007-0939.html"
          },
          {
            "name": "26322",
            "tags": [
              "third-party-advisory",
              "x_refsource_SECUNIA",
              "x_transferred"
            ],
            "url": "http://secunia.com/advisories/26322"
          },
          {
            "name": "29032",
            "tags": [
              "third-party-advisory",
              "x_refsource_SECUNIA",
              "x_transferred"
            ],
            "url": "http://secunia.com/advisories/29032"
          },
          {
            "name": "USN-510-1",
            "tags": [
              "vendor-advisory",
              "x_refsource_UBUNTU",
              "x_transferred"
            ],
            "url": "http://www.ubuntu.com/usn/usn-510-1"
          },
          {
            "name": "1019470",
            "tags": [
              "vdb-entry",
              "x_refsource_SECTRACK",
              "x_transferred"
            ],
            "url": "http://securitytracker.com/id?1019470"
          },
          {
            "name": "DSA-1504",
            "tags": [
              "vendor-advisory",
              "x_refsource_DEBIAN",
              "x_transferred"
            ],
            "url": "http://www.debian.org/security/2008/dsa-1504"
          },
          {
            "tags": [
              "x_refsource_CONFIRM",
              "x_transferred"
            ],
            "url": "http://support.avaya.com/elmodocs2/security/ASA-2007-474.htm"
          },
          {
            "name": "USN-509-1",
            "tags": [
              "vendor-advisory",
              "x_refsource_UBUNTU",
              "x_transferred"
            ],
            "url": "http://www.ubuntu.com/usn/usn-509-1"
          },
          {
            "name": "26647",
            "tags": [
              "third-party-advisory",
              "x_refsource_SECUNIA",
              "x_transferred"
            ],
            "url": "http://secunia.com/advisories/26647"
          },
          {
            "name": "27912",
            "tags": [
              "third-party-advisory",
              "x_refsource_SECUNIA",
              "x_transferred"
            ],
            "url": "http://secunia.com/advisories/27912"
          },
          {
            "name": "20080221 VMSA-2008-0003 Moderate: Updated aacraid driver and samba and python service console updates",
            "tags": [
              "mailing-list",
              "x_refsource_BUGTRAQ",
              "x_transferred"
            ],
            "url": "http://www.securityfocus.com/archive/1/488457/100/0/threaded"
          },
          {
            "name": "33280",
            "tags": [
              "third-party-advisory",
              "x_refsource_SECUNIA",
              "x_transferred"
            ],
            "url": "http://secunia.com/advisories/33280"
          },
          {
            "name": "ADV-2008-0637",
            "tags": [
              "vdb-entry",
              "x_refsource_VUPEN",
              "x_transferred"
            ],
            "url": "http://www.vupen.com/english/advisories/2008/0637"
          },
          {
            "tags": [
              "x_refsource_CONFIRM",
              "x_transferred"
            ],
            "url": "http://lkml.org/lkml/2007/7/23/195"
          },
          {
            "name": "MDKSA-2007:196",
            "tags": [
              "vendor-advisory",
              "x_refsource_MANDRIVA",
              "x_transferred"
            ],
            "url": "http://www.mandriva.com/security/advisories?name=MDKSA-2007:196"
          },
          {
            "name": "SUSE-SA:2007:064",
            "tags": [
              "vendor-advisory",
              "x_refsource_SUSE",
              "x_transferred"
            ],
            "url": "http://lists.opensuse.org/opensuse-security-announce/2007-12/msg00001.html"
          },
          {
            "name": "25216",
            "tags": [
              "vdb-entry",
              "x_refsource_BID",
              "x_transferred"
            ],
            "url": "http://www.securityfocus.com/bid/25216"
          },
          {
            "name": "SUSE-SA:2008:006",
            "tags": [
              "vendor-advisory",
              "x_refsource_SUSE",
              "x_transferred"
            ],
            "url": "http://lists.opensuse.org/opensuse-security-announce/2008-02/msg00002.html"
          },
          {
            "name": "DSA-1503",
            "tags": [
              "vendor-advisory",
              "x_refsource_DEBIAN",
              "x_transferred"
            ],
            "url": "http://www.debian.org/security/2008/dsa-1503"
          },
          {
            "name": "29058",
            "tags": [
              "third-party-advisory",
              "x_refsource_SECUNIA",
              "x_transferred"
            ],
            "url": "http://secunia.com/advisories/29058"
          },
          {
            "name": "RHSA-2008:0787",
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT",
              "x_transferred"
            ],
            "url": "http://www.redhat.com/support/errata/RHSA-2008-0787.html"
          },
          {
            "name": "USN-508-1",
            "tags": [
              "vendor-advisory",
              "x_refsource_UBUNTU",
              "x_transferred"
            ],
            "url": "http://www.ubuntu.com/usn/usn-508-1"
          },
          {
            "name": "27436",
            "tags": [
              "third-party-advisory",
              "x_refsource_SECUNIA",
              "x_transferred"
            ],
            "url": "http://secunia.com/advisories/27436"
          },
          {
            "name": "29570",
            "tags": [
              "third-party-advisory",
              "x_refsource_SECUNIA",
              "x_transferred"
            ],
            "url": "http://secunia.com/advisories/29570"
          },
          {
            "name": "MDKSA-2007:195",
            "tags": [
              "vendor-advisory",
              "x_refsource_MANDRIVA",
              "x_transferred"
            ],
            "url": "http://www.mandriva.com/security/advisories?name=MDKSA-2007:195"
          }
        ],
        "title": "CVE Program Container"
      }
    ],
    "cna": {
      "affected": [
        {
          "product": "n/a",
          "vendor": "n/a",
          "versions": [
            {
              "status": "affected",
              "version": "n/a"
            }
          ]
        }
      ],
      "datePublic": "2007-07-23T00:00:00.000Z",
      "descriptions": [
        {
          "lang": "en",
          "value": "The (1) aac_cfg_open and (2) aac_compat_ioctl functions in the SCSI layer ioctl path in aacraid in the Linux kernel before 2.6.23-rc2 do not check permissions for ioctls, which might allow local users to cause a denial of service or gain privileges."
        }
      ],
      "problemTypes": [
        {
          "descriptions": [
            {
              "description": "n/a",
              "lang": "en",
              "type": "text"
            }
          ]
        }
      ],
      "providerMetadata": {
        "dateUpdated": "2018-10-15T20:57:01.000Z",
        "orgId": "8254265b-2729-46b6-b9e3-3dfca2d5bfca",
        "shortName": "mitre"
      },
      "references": [
        {
          "name": "[Security-announce] 20080221 VMSA-2008-0003 Moderate: Updated aacraid driver and samba and python service console updates",
          "tags": [
            "mailing-list",
            "x_refsource_MLIST"
          ],
          "url": "http://lists.vmware.com/pipermail/security-announce/2008/000005.html"
        },
        {
          "name": "SUSE-SA:2008:017",
          "tags": [
            "vendor-advisory",
            "x_refsource_SUSE"
          ],
          "url": "http://lists.opensuse.org/opensuse-security-announce/2008-03/msg00007.html"
        },
        {
          "name": "RHSA-2007:0940",
          "tags": [
            "vendor-advisory",
            "x_refsource_REDHAT"
          ],
          "url": "http://www.redhat.com/support/errata/RHSA-2007-0940.html"
        },
        {
          "name": "27747",
          "tags": [
            "third-party-advisory",
            "x_refsource_SECUNIA"
          ],
          "url": "http://secunia.com/advisories/27747"
        },
        {
          "name": "oval:org.mitre.oval:def:8872",
          "tags": [
            "vdb-entry",
            "signature",
            "x_refsource_OVAL"
          ],
          "url": "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A8872"
        },
        {
          "name": "27212",
          "tags": [
            "third-party-advisory",
            "x_refsource_SECUNIA"
          ],
          "url": "http://secunia.com/advisories/27212"
        },
        {
          "name": "26643",
          "tags": [
            "third-party-advisory",
            "x_refsource_SECUNIA"
          ],
          "url": "http://secunia.com/advisories/26643"
        },
        {
          "tags": [
            "x_refsource_CONFIRM"
          ],
          "url": "http://kernel.org/pub/linux/kernel/v2.6/testing/ChangeLog-2.6.23-rc2"
        },
        {
          "name": "RHSA-2007:1049",
          "tags": [
            "vendor-advisory",
            "x_refsource_REDHAT"
          ],
          "url": "http://www.redhat.com/support/errata/RHSA-2007-1049.html"
        },
        {
          "name": "28806",
          "tags": [
            "third-party-advisory",
            "x_refsource_SECUNIA"
          ],
          "url": "http://secunia.com/advisories/28806"
        },
        {
          "name": "27913",
          "tags": [
            "third-party-advisory",
            "x_refsource_SECUNIA"
          ],
          "url": "http://secunia.com/advisories/27913"
        },
        {
          "name": "27322",
          "tags": [
            "third-party-advisory",
            "x_refsource_SECUNIA"
          ],
          "url": "http://secunia.com/advisories/27322"
        },
        {
          "name": "ADV-2007-2786",
          "tags": [
            "vdb-entry",
            "x_refsource_VUPEN"
          ],
          "url": "http://www.vupen.com/english/advisories/2007/2786"
        },
        {
          "name": "DSA-1363",
          "tags": [
            "vendor-advisory",
            "x_refsource_DEBIAN"
          ],
          "url": "http://www.debian.org/security/2007/dsa-1363"
        },
        {
          "name": "26651",
          "tags": [
            "third-party-advisory",
            "x_refsource_SECUNIA"
          ],
          "url": "http://secunia.com/advisories/26651"
        },
        {
          "name": "RHSA-2007:0939",
          "tags": [
            "vendor-advisory",
            "x_refsource_REDHAT"
          ],
          "url": "http://www.redhat.com/support/errata/RHSA-2007-0939.html"
        },
        {
          "name": "26322",
          "tags": [
            "third-party-advisory",
            "x_refsource_SECUNIA"
          ],
          "url": "http://secunia.com/advisories/26322"
        },
        {
          "name": "29032",
          "tags": [
            "third-party-advisory",
            "x_refsource_SECUNIA"
          ],
          "url": "http://secunia.com/advisories/29032"
        },
        {
          "name": "USN-510-1",
          "tags": [
            "vendor-advisory",
            "x_refsource_UBUNTU"
          ],
          "url": "http://www.ubuntu.com/usn/usn-510-1"
        },
        {
          "name": "1019470",
          "tags": [
            "vdb-entry",
            "x_refsource_SECTRACK"
          ],
          "url": "http://securitytracker.com/id?1019470"
        },
        {
          "name": "DSA-1504",
          "tags": [
            "vendor-advisory",
            "x_refsource_DEBIAN"
          ],
          "url": "http://www.debian.org/security/2008/dsa-1504"
        },
        {
          "tags": [
            "x_refsource_CONFIRM"
          ],
          "url": "http://support.avaya.com/elmodocs2/security/ASA-2007-474.htm"
        },
        {
          "name": "USN-509-1",
          "tags": [
            "vendor-advisory",
            "x_refsource_UBUNTU"
          ],
          "url": "http://www.ubuntu.com/usn/usn-509-1"
        },
        {
          "name": "26647",
          "tags": [
            "third-party-advisory",
            "x_refsource_SECUNIA"
          ],
          "url": "http://secunia.com/advisories/26647"
        },
        {
          "name": "27912",
          "tags": [
            "third-party-advisory",
            "x_refsource_SECUNIA"
          ],
          "url": "http://secunia.com/advisories/27912"
        },
        {
          "name": "20080221 VMSA-2008-0003 Moderate: Updated aacraid driver and samba and python service console updates",
          "tags": [
            "mailing-list",
            "x_refsource_BUGTRAQ"
          ],
          "url": "http://www.securityfocus.com/archive/1/488457/100/0/threaded"
        },
        {
          "name": "33280",
          "tags": [
            "third-party-advisory",
            "x_refsource_SECUNIA"
          ],
          "url": "http://secunia.com/advisories/33280"
        },
        {
          "name": "ADV-2008-0637",
          "tags": [
            "vdb-entry",
            "x_refsource_VUPEN"
          ],
          "url": "http://www.vupen.com/english/advisories/2008/0637"
        },
        {
          "tags": [
            "x_refsource_CONFIRM"
          ],
          "url": "http://lkml.org/lkml/2007/7/23/195"
        },
        {
          "name": "MDKSA-2007:196",
          "tags": [
            "vendor-advisory",
            "x_refsource_MANDRIVA"
          ],
          "url": "http://www.mandriva.com/security/advisories?name=MDKSA-2007:196"
        },
        {
          "name": "SUSE-SA:2007:064",
          "tags": [
            "vendor-advisory",
            "x_refsource_SUSE"
          ],
          "url": "http://lists.opensuse.org/opensuse-security-announce/2007-12/msg00001.html"
        },
        {
          "name": "25216",
          "tags": [
            "vdb-entry",
            "x_refsource_BID"
          ],
          "url": "http://www.securityfocus.com/bid/25216"
        },
        {
          "name": "SUSE-SA:2008:006",
          "tags": [
            "vendor-advisory",
            "x_refsource_SUSE"
          ],
          "url": "http://lists.opensuse.org/opensuse-security-announce/2008-02/msg00002.html"
        },
        {
          "name": "DSA-1503",
          "tags": [
            "vendor-advisory",
            "x_refsource_DEBIAN"
          ],
          "url": "http://www.debian.org/security/2008/dsa-1503"
        },
        {
          "name": "29058",
          "tags": [
            "third-party-advisory",
            "x_refsource_SECUNIA"
          ],
          "url": "http://secunia.com/advisories/29058"
        },
        {
          "name": "RHSA-2008:0787",
          "tags": [
            "vendor-advisory",
            "x_refsource_REDHAT"
          ],
          "url": "http://www.redhat.com/support/errata/RHSA-2008-0787.html"
        },
        {
          "name": "USN-508-1",
          "tags": [
            "vendor-advisory",
            "x_refsource_UBUNTU"
          ],
          "url": "http://www.ubuntu.com/usn/usn-508-1"
        },
        {
          "name": "27436",
          "tags": [
            "third-party-advisory",
            "x_refsource_SECUNIA"
          ],
          "url": "http://secunia.com/advisories/27436"
        },
        {
          "name": "29570",
          "tags": [
            "third-party-advisory",
            "x_refsource_SECUNIA"
          ],
          "url": "http://secunia.com/advisories/29570"
        },
        {
          "name": "MDKSA-2007:195",
          "tags": [
            "vendor-advisory",
            "x_refsource_MANDRIVA"
          ],
          "url": "http://www.mandriva.com/security/advisories?name=MDKSA-2007:195"
        }
      ],
      "x_legacyV4Record": {
        "CVE_data_meta": {
          "ASSIGNER": "cve@mitre.org",
          "ID": "CVE-2007-4308",
          "STATE": "PUBLIC"
        },
        "affects": {
          "vendor": {
            "vendor_data": [
              {
                "product": {
                  "product_data": [
                    {
                      "product_name": "n/a",
                      "version": {
                        "version_data": [
                          {
                            "version_value": "n/a"
                          }
                        ]
                      }
                    }
                  ]
                },
                "vendor_name": "n/a"
              }
            ]
          }
        },
        "data_format": "MITRE",
        "data_type": "CVE",
        "data_version": "4.0",
        "description": {
          "description_data": [
            {
              "lang": "eng",
              "value": "The (1) aac_cfg_open and (2) aac_compat_ioctl functions in the SCSI layer ioctl path in aacraid in the Linux kernel before 2.6.23-rc2 do not check permissions for ioctls, which might allow local users to cause a denial of service or gain privileges."
            }
          ]
        },
        "problemtype": {
          "problemtype_data": [
            {
              "description": [
                {
                  "lang": "eng",
                  "value": "n/a"
                }
              ]
            }
          ]
        },
        "references": {
          "reference_data": [
            {
              "name": "[Security-announce] 20080221 VMSA-2008-0003 Moderate: Updated aacraid driver and samba and python service console updates",
              "refsource": "MLIST",
              "url": "http://lists.vmware.com/pipermail/security-announce/2008/000005.html"
            },
            {
              "name": "SUSE-SA:2008:017",
              "refsource": "SUSE",
              "url": "http://lists.opensuse.org/opensuse-security-announce/2008-03/msg00007.html"
            },
            {
              "name": "RHSA-2007:0940",
              "refsource": "REDHAT",
              "url": "http://www.redhat.com/support/errata/RHSA-2007-0940.html"
            },
            {
              "name": "27747",
              "refsource": "SECUNIA",
              "url": "http://secunia.com/advisories/27747"
            },
            {
              "name": "oval:org.mitre.oval:def:8872",
              "refsource": "OVAL",
              "url": "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A8872"
            },
            {
              "name": "27212",
              "refsource": "SECUNIA",
              "url": "http://secunia.com/advisories/27212"
            },
            {
              "name": "26643",
              "refsource": "SECUNIA",
              "url": "http://secunia.com/advisories/26643"
            },
            {
              "name": "http://kernel.org/pub/linux/kernel/v2.6/testing/ChangeLog-2.6.23-rc2",
              "refsource": "CONFIRM",
              "url": "http://kernel.org/pub/linux/kernel/v2.6/testing/ChangeLog-2.6.23-rc2"
            },
            {
              "name": "RHSA-2007:1049",
              "refsource": "REDHAT",
              "url": "http://www.redhat.com/support/errata/RHSA-2007-1049.html"
            },
            {
              "name": "28806",
              "refsource": "SECUNIA",
              "url": "http://secunia.com/advisories/28806"
            },
            {
              "name": "27913",
              "refsource": "SECUNIA",
              "url": "http://secunia.com/advisories/27913"
            },
            {
              "name": "27322",
              "refsource": "SECUNIA",
              "url": "http://secunia.com/advisories/27322"
            },
            {
              "name": "ADV-2007-2786",
              "refsource": "VUPEN",
              "url": "http://www.vupen.com/english/advisories/2007/2786"
            },
            {
              "name": "DSA-1363",
              "refsource": "DEBIAN",
              "url": "http://www.debian.org/security/2007/dsa-1363"
            },
            {
              "name": "26651",
              "refsource": "SECUNIA",
              "url": "http://secunia.com/advisories/26651"
            },
            {
              "name": "RHSA-2007:0939",
              "refsource": "REDHAT",
              "url": "http://www.redhat.com/support/errata/RHSA-2007-0939.html"
            },
            {
              "name": "26322",
              "refsource": "SECUNIA",
              "url": "http://secunia.com/advisories/26322"
            },
            {
              "name": "29032",
              "refsource": "SECUNIA",
              "url": "http://secunia.com/advisories/29032"
            },
            {
              "name": "USN-510-1",
              "refsource": "UBUNTU",
              "url": "http://www.ubuntu.com/usn/usn-510-1"
            },
            {
              "name": "1019470",
              "refsource": "SECTRACK",
              "url": "http://securitytracker.com/id?1019470"
            },
            {
              "name": "DSA-1504",
              "refsource": "DEBIAN",
              "url": "http://www.debian.org/security/2008/dsa-1504"
            },
            {
              "name": "http://support.avaya.com/elmodocs2/security/ASA-2007-474.htm",
              "refsource": "CONFIRM",
              "url": "http://support.avaya.com/elmodocs2/security/ASA-2007-474.htm"
            },
            {
              "name": "USN-509-1",
              "refsource": "UBUNTU",
              "url": "http://www.ubuntu.com/usn/usn-509-1"
            },
            {
              "name": "26647",
              "refsource": "SECUNIA",
              "url": "http://secunia.com/advisories/26647"
            },
            {
              "name": "27912",
              "refsource": "SECUNIA",
              "url": "http://secunia.com/advisories/27912"
            },
            {
              "name": "20080221 VMSA-2008-0003 Moderate: Updated aacraid driver and samba and python service console updates",
              "refsource": "BUGTRAQ",
              "url": "http://www.securityfocus.com/archive/1/488457/100/0/threaded"
            },
            {
              "name": "33280",
              "refsource": "SECUNIA",
              "url": "http://secunia.com/advisories/33280"
            },
            {
              "name": "ADV-2008-0637",
              "refsource": "VUPEN",
              "url": "http://www.vupen.com/english/advisories/2008/0637"
            },
            {
              "name": "http://lkml.org/lkml/2007/7/23/195",
              "refsource": "CONFIRM",
              "url": "http://lkml.org/lkml/2007/7/23/195"
            },
            {
              "name": "MDKSA-2007:196",
              "refsource": "MANDRIVA",
              "url": "http://www.mandriva.com/security/advisories?name=MDKSA-2007:196"
            },
            {
              "name": "SUSE-SA:2007:064",
              "refsource": "SUSE",
              "url": "http://lists.opensuse.org/opensuse-security-announce/2007-12/msg00001.html"
            },
            {
              "name": "25216",
              "refsource": "BID",
              "url": "http://www.securityfocus.com/bid/25216"
            },
            {
              "name": "SUSE-SA:2008:006",
              "refsource": "SUSE",
              "url": "http://lists.opensuse.org/opensuse-security-announce/2008-02/msg00002.html"
            },
            {
              "name": "DSA-1503",
              "refsource": "DEBIAN",
              "url": "http://www.debian.org/security/2008/dsa-1503"
            },
            {
              "name": "29058",
              "refsource": "SECUNIA",
              "url": "http://secunia.com/advisories/29058"
            },
            {
              "name": "RHSA-2008:0787",
              "refsource": "REDHAT",
              "url": "http://www.redhat.com/support/errata/RHSA-2008-0787.html"
            },
            {
              "name": "USN-508-1",
              "refsource": "UBUNTU",
              "url": "http://www.ubuntu.com/usn/usn-508-1"
            },
            {
              "name": "27436",
              "refsource": "SECUNIA",
              "url": "http://secunia.com/advisories/27436"
            },
            {
              "name": "29570",
              "refsource": "SECUNIA",
              "url": "http://secunia.com/advisories/29570"
            },
            {
              "name": "MDKSA-2007:195",
              "refsource": "MANDRIVA",
              "url": "http://www.mandriva.com/security/advisories?name=MDKSA-2007:195"
            }
          ]
        }
      }
    }
  },
  "cveMetadata": {
    "assignerOrgId": "8254265b-2729-46b6-b9e3-3dfca2d5bfca",
    "assignerShortName": "mitre",
    "cveId": "CVE-2007-4308",
    "datePublished": "2007-08-13T21:00:00.000Z",
    "dateReserved": "2007-08-13T00:00:00.000Z",
    "dateUpdated": "2024-08-07T14:53:55.997Z",
    "state": "PUBLISHED"
  },
  "dataType": "CVE_RECORD",
  "dataVersion": "5.1"
}

CVE-2007-4311 (GCVE-0-2007-4311)

Vulnerability from cvelistv5 – Published: 2007-08-13 21:00 – Updated: 2024-08-07 14:53

Summary

The xfer_secondary_pool function in drivers/char/random.c in the Linux kernel 2.4 before 2.4.35 performs reseed operations on only the first few bytes of a buffer, which might make it easier for attackers to predict the output of the random number generator, related to incorrect use of the sizeof operator.

Severity

No CVSS data available.

CWE

Assigner

mitre mitre root

References

8 references

URL	Tags
http://git.kernel.org/?p=linux/kernel/git/stable/…	x_refsource_CONFIRM
http://git.kernel.org/?p=linux/kernel/git/stable/…	x_refsource_CONFIRM
http://www.kernel.org/pub/linux/kernel/v2.4/Chang…	x_refsource_CONFIRM
http://www.kernel.org/pub/linux/kernel/v2.4/Chang…	x_refsource_CONFIRM
http://www.debian.org/security/2008/dsa-1503	vendor-advisoryx_refsource_DEBIAN
http://secunia.com/advisories/29058	third-party-advisoryx_refsource_SECUNIA
http://www.vupen.com/english/advisories/2007/2690	vdb-entryx_refsource_VUPEN
http://www.securityfocus.com/bid/25029	vdb-entryx_refsource_BID

Date Public

2007-07-30 00:00

Show details on NVD website

JSON

To clipboard

{
  "containers": {
    "adp": [
      {
        "providerMetadata": {
          "dateUpdated": "2024-08-07T14:53:55.250Z",
          "orgId": "af854a3a-2127-422b-91ae-364da2661108",
          "shortName": "CVE"
        },
        "references": [
          {
            "tags": [
              "x_refsource_CONFIRM",
              "x_transferred"
            ],
            "url": "http://git.kernel.org/?p=linux/kernel/git/stable/linux-2.4.34.y.git%3Ba=commit%3Bh=faa3369ac2ea7feb0dd266b6a5e8d6ab153cf925"
          },
          {
            "tags": [
              "x_refsource_CONFIRM",
              "x_transferred"
            ],
            "url": "http://git.kernel.org/?p=linux/kernel/git/stable/linux-2.4.34.y.git%3Ba=commit%3Bh=bd67d4c7b11cc33ebdc346bc8926d255b354cd64"
          },
          {
            "tags": [
              "x_refsource_CONFIRM",
              "x_transferred"
            ],
            "url": "http://www.kernel.org/pub/linux/kernel/v2.4/ChangeLog-2.4.34.6"
          },
          {
            "tags": [
              "x_refsource_CONFIRM",
              "x_transferred"
            ],
            "url": "http://www.kernel.org/pub/linux/kernel/v2.4/ChangeLog-2.4.35"
          },
          {
            "name": "DSA-1503",
            "tags": [
              "vendor-advisory",
              "x_refsource_DEBIAN",
              "x_transferred"
            ],
            "url": "http://www.debian.org/security/2008/dsa-1503"
          },
          {
            "name": "29058",
            "tags": [
              "third-party-advisory",
              "x_refsource_SECUNIA",
              "x_transferred"
            ],
            "url": "http://secunia.com/advisories/29058"
          },
          {
            "name": "ADV-2007-2690",
            "tags": [
              "vdb-entry",
              "x_refsource_VUPEN",
              "x_transferred"
            ],
            "url": "http://www.vupen.com/english/advisories/2007/2690"
          },
          {
            "name": "25029",
            "tags": [
              "vdb-entry",
              "x_refsource_BID",
              "x_transferred"
            ],
            "url": "http://www.securityfocus.com/bid/25029"
          }
        ],
        "title": "CVE Program Container"
      }
    ],
    "cna": {
      "affected": [
        {
          "product": "n/a",
          "vendor": "n/a",
          "versions": [
            {
              "status": "affected",
              "version": "n/a"
            }
          ]
        }
      ],
      "datePublic": "2007-07-30T00:00:00.000Z",
      "descriptions": [
        {
          "lang": "en",
          "value": "The xfer_secondary_pool function in drivers/char/random.c in the Linux kernel 2.4 before 2.4.35 performs reseed operations on only the first few bytes of a buffer, which might make it easier for attackers to predict the output of the random number generator, related to incorrect use of the sizeof operator."
        }
      ],
      "problemTypes": [
        {
          "descriptions": [
            {
              "description": "n/a",
              "lang": "en",
              "type": "text"
            }
          ]
        }
      ],
      "providerMetadata": {
        "dateUpdated": "2008-02-26T10:00:00.000Z",
        "orgId": "8254265b-2729-46b6-b9e3-3dfca2d5bfca",
        "shortName": "mitre"
      },
      "references": [
        {
          "tags": [
            "x_refsource_CONFIRM"
          ],
          "url": "http://git.kernel.org/?p=linux/kernel/git/stable/linux-2.4.34.y.git%3Ba=commit%3Bh=faa3369ac2ea7feb0dd266b6a5e8d6ab153cf925"
        },
        {
          "tags": [
            "x_refsource_CONFIRM"
          ],
          "url": "http://git.kernel.org/?p=linux/kernel/git/stable/linux-2.4.34.y.git%3Ba=commit%3Bh=bd67d4c7b11cc33ebdc346bc8926d255b354cd64"
        },
        {
          "tags": [
            "x_refsource_CONFIRM"
          ],
          "url": "http://www.kernel.org/pub/linux/kernel/v2.4/ChangeLog-2.4.34.6"
        },
        {
          "tags": [
            "x_refsource_CONFIRM"
          ],
          "url": "http://www.kernel.org/pub/linux/kernel/v2.4/ChangeLog-2.4.35"
        },
        {
          "name": "DSA-1503",
          "tags": [
            "vendor-advisory",
            "x_refsource_DEBIAN"
          ],
          "url": "http://www.debian.org/security/2008/dsa-1503"
        },
        {
          "name": "29058",
          "tags": [
            "third-party-advisory",
            "x_refsource_SECUNIA"
          ],
          "url": "http://secunia.com/advisories/29058"
        },
        {
          "name": "ADV-2007-2690",
          "tags": [
            "vdb-entry",
            "x_refsource_VUPEN"
          ],
          "url": "http://www.vupen.com/english/advisories/2007/2690"
        },
        {
          "name": "25029",
          "tags": [
            "vdb-entry",
            "x_refsource_BID"
          ],
          "url": "http://www.securityfocus.com/bid/25029"
        }
      ],
      "x_legacyV4Record": {
        "CVE_data_meta": {
          "ASSIGNER": "cve@mitre.org",
          "ID": "CVE-2007-4311",
          "STATE": "PUBLIC"
        },
        "affects": {
          "vendor": {
            "vendor_data": [
              {
                "product": {
                  "product_data": [
                    {
                      "product_name": "n/a",
                      "version": {
                        "version_data": [
                          {
                            "version_value": "n/a"
                          }
                        ]
                      }
                    }
                  ]
                },
                "vendor_name": "n/a"
              }
            ]
          }
        },
        "data_format": "MITRE",
        "data_type": "CVE",
        "data_version": "4.0",
        "description": {
          "description_data": [
            {
              "lang": "eng",
              "value": "The xfer_secondary_pool function in drivers/char/random.c in the Linux kernel 2.4 before 2.4.35 performs reseed operations on only the first few bytes of a buffer, which might make it easier for attackers to predict the output of the random number generator, related to incorrect use of the sizeof operator."
            }
          ]
        },
        "problemtype": {
          "problemtype_data": [
            {
              "description": [
                {
                  "lang": "eng",
                  "value": "n/a"
                }
              ]
            }
          ]
        },
        "references": {
          "reference_data": [
            {
              "name": "http://git.kernel.org/?p=linux/kernel/git/stable/linux-2.4.34.y.git;a=commit;h=faa3369ac2ea7feb0dd266b6a5e8d6ab153cf925",
              "refsource": "CONFIRM",
              "url": "http://git.kernel.org/?p=linux/kernel/git/stable/linux-2.4.34.y.git;a=commit;h=faa3369ac2ea7feb0dd266b6a5e8d6ab153cf925"
            },
            {
              "name": "http://git.kernel.org/?p=linux/kernel/git/stable/linux-2.4.34.y.git;a=commit;h=bd67d4c7b11cc33ebdc346bc8926d255b354cd64",
              "refsource": "CONFIRM",
              "url": "http://git.kernel.org/?p=linux/kernel/git/stable/linux-2.4.34.y.git;a=commit;h=bd67d4c7b11cc33ebdc346bc8926d255b354cd64"
            },
            {
              "name": "http://www.kernel.org/pub/linux/kernel/v2.4/ChangeLog-2.4.34.6",
              "refsource": "CONFIRM",
              "url": "http://www.kernel.org/pub/linux/kernel/v2.4/ChangeLog-2.4.34.6"
            },
            {
              "name": "http://www.kernel.org/pub/linux/kernel/v2.4/ChangeLog-2.4.35",
              "refsource": "CONFIRM",
              "url": "http://www.kernel.org/pub/linux/kernel/v2.4/ChangeLog-2.4.35"
            },
            {
              "name": "DSA-1503",
              "refsource": "DEBIAN",
              "url": "http://www.debian.org/security/2008/dsa-1503"
            },
            {
              "name": "29058",
              "refsource": "SECUNIA",
              "url": "http://secunia.com/advisories/29058"
            },
            {
              "name": "ADV-2007-2690",
              "refsource": "VUPEN",
              "url": "http://www.vupen.com/english/advisories/2007/2690"
            },
            {
              "name": "25029",
              "refsource": "BID",
              "url": "http://www.securityfocus.com/bid/25029"
            }
          ]
        }
      }
    }
  },
  "cveMetadata": {
    "assignerOrgId": "8254265b-2729-46b6-b9e3-3dfca2d5bfca",
    "assignerShortName": "mitre",
    "cveId": "CVE-2007-4311",
    "datePublished": "2007-08-13T21:00:00.000Z",
    "dateReserved": "2007-08-13T00:00:00.000Z",
    "dateUpdated": "2024-08-07T14:53:55.250Z",
    "state": "PUBLISHED"
  },
  "dataType": "CVE_RECORD",
  "dataVersion": "5.1"
}

CVE-2007-5093 (GCVE-0-2007-5093)

Vulnerability from cvelistv5 – Published: 2007-09-26 21:00 – Updated: 2024-08-07 15:17

Summary

The disconnect method in the Philips USB Webcam (pwc) driver in Linux kernel 2.6.x before 2.6.22.6 "relies on user space to close the device," which allows user-assisted local attackers to cause a denial of service (USB subsystem hang and CPU consumption in khubd) by not closing the device after the disconnect is invoked. NOTE: this rarely crosses privilege boundaries, unless the attacker can convince the victim to unplug the affected device.

Severity

No CVSS data available.

CWE

Assigner

redhat redhat root

References

22 references

URL	Tags
http://www.redhat.com/support/errata/RHSA-2008-02…	vendor-advisoryx_refsource_REDHAT
http://secunia.com/advisories/30294	third-party-advisoryx_refsource_SECUNIA
http://marc.info/?l=linux-kernel&m=118873457814808&w=2	mailing-listx_refsource_MLIST
http://marc.info/?l=linux-kernel&m=118880154122548&w=2	mailing-listx_refsource_MLIST
http://rhn.redhat.com/errata/RHSA-2008-0972.html	vendor-advisoryx_refsource_REDHAT
http://secunia.com/advisories/28706	third-party-advisoryx_refsource_SECUNIA
http://www.kernel.org/pub/linux/kernel/v2.6/Chang…	x_refsource_CONFIRM
http://secunia.com/advisories/26994	third-party-advisoryx_refsource_SECUNIA
http://www.debian.org/security/2008/dsa-1504	vendor-advisoryx_refsource_DEBIAN
http://www.mandriva.com/security/advisories?name=…	vendor-advisoryx_refsource_MANDRIVA
https://oval.cisecurity.org/repository/search/def…	vdb-entrysignaturex_refsource_OVAL
http://www.ubuntu.com/usn/usn-558-1	vendor-advisoryx_refsource_UBUNTU
http://www.debian.org/security/2007/dsa-1381	vendor-advisoryx_refsource_DEBIAN
http://www.mandriva.com/security/advisories?name=…	vendor-advisoryx_refsource_MANDRIVA
http://www.debian.org/security/2008/dsa-1503	vendor-advisoryx_refsource_DEBIAN
http://www.ubuntu.com/usn/usn-574-1	vendor-advisoryx_refsource_UBUNTU
http://secunia.com/advisories/29058	third-party-advisoryx_refsource_SECUNIA
http://secunia.com/advisories/28971	third-party-advisoryx_refsource_SECUNIA
http://www.securityfocus.com/bid/25504	vdb-entryx_refsource_BID
http://secunia.com/advisories/28170	third-party-advisoryx_refsource_SECUNIA
http://secunia.com/advisories/32799	third-party-advisoryx_refsource_SECUNIA
http://www.ubuntu.com/usn/usn-578-1	vendor-advisoryx_refsource_UBUNTU

Date Public

2007-08-22 00:00

Show details on NVD website

JSON

To clipboard

{
  "containers": {
    "adp": [
      {
        "providerMetadata": {
          "dateUpdated": "2024-08-07T15:17:28.263Z",
          "orgId": "af854a3a-2127-422b-91ae-364da2661108",
          "shortName": "CVE"
        },
        "references": [
          {
            "name": "RHSA-2008:0275",
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT",
              "x_transferred"
            ],
            "url": "http://www.redhat.com/support/errata/RHSA-2008-0275.html"
          },
          {
            "name": "30294",
            "tags": [
              "third-party-advisory",
              "x_refsource_SECUNIA",
              "x_transferred"
            ],
            "url": "http://secunia.com/advisories/30294"
          },
          {
            "name": "20070902 Oops in pwc v4l driver",
            "tags": [
              "mailing-list",
              "x_refsource_MLIST",
              "x_transferred"
            ],
            "url": "http://marc.info/?l=linux-kernel\u0026m=118873457814808\u0026w=2"
          },
          {
            "name": "20070903 Re: Oops in pwc v4l driver",
            "tags": [
              "mailing-list",
              "x_refsource_MLIST",
              "x_transferred"
            ],
            "url": "http://marc.info/?l=linux-kernel\u0026m=118880154122548\u0026w=2"
          },
          {
            "name": "RHSA-2008:0972",
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT",
              "x_transferred"
            ],
            "url": "http://rhn.redhat.com/errata/RHSA-2008-0972.html"
          },
          {
            "name": "28706",
            "tags": [
              "third-party-advisory",
              "x_refsource_SECUNIA",
              "x_transferred"
            ],
            "url": "http://secunia.com/advisories/28706"
          },
          {
            "tags": [
              "x_refsource_CONFIRM",
              "x_transferred"
            ],
            "url": "http://www.kernel.org/pub/linux/kernel/v2.6/ChangeLog-2.6.22.6"
          },
          {
            "name": "26994",
            "tags": [
              "third-party-advisory",
              "x_refsource_SECUNIA",
              "x_transferred"
            ],
            "url": "http://secunia.com/advisories/26994"
          },
          {
            "name": "DSA-1504",
            "tags": [
              "vendor-advisory",
              "x_refsource_DEBIAN",
              "x_transferred"
            ],
            "url": "http://www.debian.org/security/2008/dsa-1504"
          },
          {
            "name": "MDVSA-2008:008",
            "tags": [
              "vendor-advisory",
              "x_refsource_MANDRIVA",
              "x_transferred"
            ],
            "url": "http://www.mandriva.com/security/advisories?name=MDVSA-2008:008"
          },
          {
            "name": "oval:org.mitre.oval:def:10494",
            "tags": [
              "vdb-entry",
              "signature",
              "x_refsource_OVAL",
              "x_transferred"
            ],
            "url": "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A10494"
          },
          {
            "name": "USN-558-1",
            "tags": [
              "vendor-advisory",
              "x_refsource_UBUNTU",
              "x_transferred"
            ],
            "url": "http://www.ubuntu.com/usn/usn-558-1"
          },
          {
            "name": "DSA-1381",
            "tags": [
              "vendor-advisory",
              "x_refsource_DEBIAN",
              "x_transferred"
            ],
            "url": "http://www.debian.org/security/2007/dsa-1381"
          },
          {
            "name": "MDVSA-2008:105",
            "tags": [
              "vendor-advisory",
              "x_refsource_MANDRIVA",
              "x_transferred"
            ],
            "url": "http://www.mandriva.com/security/advisories?name=MDVSA-2008:105"
          },
          {
            "name": "DSA-1503",
            "tags": [
              "vendor-advisory",
              "x_refsource_DEBIAN",
              "x_transferred"
            ],
            "url": "http://www.debian.org/security/2008/dsa-1503"
          },
          {
            "name": "USN-574-1",
            "tags": [
              "vendor-advisory",
              "x_refsource_UBUNTU",
              "x_transferred"
            ],
            "url": "http://www.ubuntu.com/usn/usn-574-1"
          },
          {
            "name": "29058",
            "tags": [
              "third-party-advisory",
              "x_refsource_SECUNIA",
              "x_transferred"
            ],
            "url": "http://secunia.com/advisories/29058"
          },
          {
            "name": "28971",
            "tags": [
              "third-party-advisory",
              "x_refsource_SECUNIA",
              "x_transferred"
            ],
            "url": "http://secunia.com/advisories/28971"
          },
          {
            "name": "25504",
            "tags": [
              "vdb-entry",
              "x_refsource_BID",
              "x_transferred"
            ],
            "url": "http://www.securityfocus.com/bid/25504"
          },
          {
            "name": "28170",
            "tags": [
              "third-party-advisory",
              "x_refsource_SECUNIA",
              "x_transferred"
            ],
            "url": "http://secunia.com/advisories/28170"
          },
          {
            "name": "32799",
            "tags": [
              "third-party-advisory",
              "x_refsource_SECUNIA",
              "x_transferred"
            ],
            "url": "http://secunia.com/advisories/32799"
          },
          {
            "name": "USN-578-1",
            "tags": [
              "vendor-advisory",
              "x_refsource_UBUNTU",
              "x_transferred"
            ],
            "url": "http://www.ubuntu.com/usn/usn-578-1"
          }
        ],
        "title": "CVE Program Container"
      }
    ],
    "cna": {
      "affected": [
        {
          "product": "n/a",
          "vendor": "n/a",
          "versions": [
            {
              "status": "affected",
              "version": "n/a"
            }
          ]
        }
      ],
      "datePublic": "2007-08-22T00:00:00.000Z",
      "descriptions": [
        {
          "lang": "en",
          "value": "The disconnect method in the Philips USB Webcam (pwc) driver in Linux kernel 2.6.x before 2.6.22.6 \"relies on user space to close the device,\" which allows user-assisted local attackers to cause a denial of service (USB subsystem hang and CPU consumption in khubd) by not closing the device after the disconnect is invoked.  NOTE: this rarely crosses privilege boundaries, unless the attacker can convince the victim to unplug the affected device."
        }
      ],
      "problemTypes": [
        {
          "descriptions": [
            {
              "description": "n/a",
              "lang": "en",
              "type": "text"
            }
          ]
        }
      ],
      "providerMetadata": {
        "dateUpdated": "2017-09-28T12:57:01.000Z",
        "orgId": "53f830b8-0a3f-465b-8143-3b8a9948e749",
        "shortName": "redhat"
      },
      "references": [
        {
          "name": "RHSA-2008:0275",
          "tags": [
            "vendor-advisory",
            "x_refsource_REDHAT"
          ],
          "url": "http://www.redhat.com/support/errata/RHSA-2008-0275.html"
        },
        {
          "name": "30294",
          "tags": [
            "third-party-advisory",
            "x_refsource_SECUNIA"
          ],
          "url": "http://secunia.com/advisories/30294"
        },
        {
          "name": "20070902 Oops in pwc v4l driver",
          "tags": [
            "mailing-list",
            "x_refsource_MLIST"
          ],
          "url": "http://marc.info/?l=linux-kernel\u0026m=118873457814808\u0026w=2"
        },
        {
          "name": "20070903 Re: Oops in pwc v4l driver",
          "tags": [
            "mailing-list",
            "x_refsource_MLIST"
          ],
          "url": "http://marc.info/?l=linux-kernel\u0026m=118880154122548\u0026w=2"
        },
        {
          "name": "RHSA-2008:0972",
          "tags": [
            "vendor-advisory",
            "x_refsource_REDHAT"
          ],
          "url": "http://rhn.redhat.com/errata/RHSA-2008-0972.html"
        },
        {
          "name": "28706",
          "tags": [
            "third-party-advisory",
            "x_refsource_SECUNIA"
          ],
          "url": "http://secunia.com/advisories/28706"
        },
        {
          "tags": [
            "x_refsource_CONFIRM"
          ],
          "url": "http://www.kernel.org/pub/linux/kernel/v2.6/ChangeLog-2.6.22.6"
        },
        {
          "name": "26994",
          "tags": [
            "third-party-advisory",
            "x_refsource_SECUNIA"
          ],
          "url": "http://secunia.com/advisories/26994"
        },
        {
          "name": "DSA-1504",
          "tags": [
            "vendor-advisory",
            "x_refsource_DEBIAN"
          ],
          "url": "http://www.debian.org/security/2008/dsa-1504"
        },
        {
          "name": "MDVSA-2008:008",
          "tags": [
            "vendor-advisory",
            "x_refsource_MANDRIVA"
          ],
          "url": "http://www.mandriva.com/security/advisories?name=MDVSA-2008:008"
        },
        {
          "name": "oval:org.mitre.oval:def:10494",
          "tags": [
            "vdb-entry",
            "signature",
            "x_refsource_OVAL"
          ],
          "url": "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A10494"
        },
        {
          "name": "USN-558-1",
          "tags": [
            "vendor-advisory",
            "x_refsource_UBUNTU"
          ],
          "url": "http://www.ubuntu.com/usn/usn-558-1"
        },
        {
          "name": "DSA-1381",
          "tags": [
            "vendor-advisory",
            "x_refsource_DEBIAN"
          ],
          "url": "http://www.debian.org/security/2007/dsa-1381"
        },
        {
          "name": "MDVSA-2008:105",
          "tags": [
            "vendor-advisory",
            "x_refsource_MANDRIVA"
          ],
          "url": "http://www.mandriva.com/security/advisories?name=MDVSA-2008:105"
        },
        {
          "name": "DSA-1503",
          "tags": [
            "vendor-advisory",
            "x_refsource_DEBIAN"
          ],
          "url": "http://www.debian.org/security/2008/dsa-1503"
        },
        {
          "name": "USN-574-1",
          "tags": [
            "vendor-advisory",
            "x_refsource_UBUNTU"
          ],
          "url": "http://www.ubuntu.com/usn/usn-574-1"
        },
        {
          "name": "29058",
          "tags": [
            "third-party-advisory",
            "x_refsource_SECUNIA"
          ],
          "url": "http://secunia.com/advisories/29058"
        },
        {
          "name": "28971",
          "tags": [
            "third-party-advisory",
            "x_refsource_SECUNIA"
          ],
          "url": "http://secunia.com/advisories/28971"
        },
        {
          "name": "25504",
          "tags": [
            "vdb-entry",
            "x_refsource_BID"
          ],
          "url": "http://www.securityfocus.com/bid/25504"
        },
        {
          "name": "28170",
          "tags": [
            "third-party-advisory",
            "x_refsource_SECUNIA"
          ],
          "url": "http://secunia.com/advisories/28170"
        },
        {
          "name": "32799",
          "tags": [
            "third-party-advisory",
            "x_refsource_SECUNIA"
          ],
          "url": "http://secunia.com/advisories/32799"
        },
        {
          "name": "USN-578-1",
          "tags": [
            "vendor-advisory",
            "x_refsource_UBUNTU"
          ],
          "url": "http://www.ubuntu.com/usn/usn-578-1"
        }
      ]
    }
  },
  "cveMetadata": {
    "assignerOrgId": "53f830b8-0a3f-465b-8143-3b8a9948e749",
    "assignerShortName": "redhat",
    "cveId": "CVE-2007-5093",
    "datePublished": "2007-09-26T21:00:00.000Z",
    "dateReserved": "2007-09-26T00:00:00.000Z",
    "dateUpdated": "2024-08-07T15:17:28.263Z",
    "state": "PUBLISHED"
  },
  "dataType": "CVE_RECORD",
  "dataVersion": "5.1"
}

CVE-2007-6063 (GCVE-0-2007-6063)

Vulnerability from cvelistv5 – Published: 2007-11-21 00:00 – Updated: 2024-08-07 15:54

Summary

Buffer overflow in the isdn_net_setcfg function in isdn_net.c in Linux kernel 2.6.23 allows local users to have an unknown impact via a crafted argument to the isdn_ioctl function.

Severity

No CVSS data available.

CWE

Assigner

mitre mitre root

References

29 references

URL	Tags
http://bugzilla.kernel.org/show_bug.cgi?id=9416	x_refsource_CONFIRM
http://secunia.com/advisories/28806	third-party-advisoryx_refsource_SECUNIA
http://www.securityfocus.com/bid/26605	vdb-entryx_refsource_BID
http://www.redhat.com/support/errata/RHSA-2008-01…	vendor-advisoryx_refsource_REDHAT
http://www.debian.org/security/2007/dsa-1436	vendor-advisoryx_refsource_DEBIAN
http://www.vupen.com/english/advisories/2007/4046	vdb-entryx_refsource_VUPEN
http://secunia.com/advisories/28141	third-party-advisoryx_refsource_SECUNIA
http://secunia.com/advisories/28706	third-party-advisoryx_refsource_SECUNIA
http://www.mandriva.com/security/advisories?name=…	vendor-advisoryx_refsource_MANDRIVA
http://www.debian.org/security/2008/dsa-1504	vendor-advisoryx_refsource_DEBIAN
http://www.mandriva.com/security/advisories?name=…	vendor-advisoryx_refsource_MANDRIVA
http://secunia.com/advisories/27912	third-party-advisoryx_refsource_SECUNIA
https://oval.cisecurity.org/repository/search/def…	vdb-entrysignaturex_refsource_OVAL
http://secunia.com/advisories/33280	third-party-advisoryx_refsource_SECUNIA
http://secunia.com/advisories/29236	third-party-advisoryx_refsource_SECUNIA
http://lists.opensuse.org/opensuse-security-annou…	vendor-advisoryx_refsource_SUSE
http://lists.opensuse.org/opensuse-security-annou…	vendor-advisoryx_refsource_SUSE
http://www.debian.org/security/2008/dsa-1503	vendor-advisoryx_refsource_DEBIAN
http://secunia.com/advisories/27842	third-party-advisoryx_refsource_SECUNIA
http://secunia.com/advisories/28748	third-party-advisoryx_refsource_SECUNIA
http://www.ubuntu.com/usn/usn-574-1	vendor-advisoryx_refsource_UBUNTU
http://secunia.com/advisories/29058	third-party-advisoryx_refsource_SECUNIA
http://www.redhat.com/support/errata/RHSA-2008-09…	vendor-advisoryx_refsource_REDHAT
http://secunia.com/advisories/28971	third-party-advisoryx_refsource_SECUNIA
http://www.redhat.com/support/errata/RHSA-2008-07…	vendor-advisoryx_refsource_REDHAT
http://www.ubuntu.com/usn/usn-578-1	vendor-advisoryx_refsource_UBUNTU
http://rhn.redhat.com/errata/RHSA-2008-0055.html	vendor-advisoryx_refsource_REDHAT
https://oval.cisecurity.org/repository/search/def…	vdb-entrysignaturex_refsource_OVAL
http://secunia.com/advisories/33201	third-party-advisoryx_refsource_SECUNIA

Date Public

2007-11-20 00:00

Show details on NVD website

JSON

To clipboard

{
  "containers": {
    "adp": [
      {
        "providerMetadata": {
          "dateUpdated": "2024-08-07T15:54:26.990Z",
          "orgId": "af854a3a-2127-422b-91ae-364da2661108",
          "shortName": "CVE"
        },
        "references": [
          {
            "tags": [
              "x_refsource_CONFIRM",
              "x_transferred"
            ],
            "url": "http://bugzilla.kernel.org/show_bug.cgi?id=9416"
          },
          {
            "name": "28806",
            "tags": [
              "third-party-advisory",
              "x_refsource_SECUNIA",
              "x_transferred"
            ],
            "url": "http://secunia.com/advisories/28806"
          },
          {
            "name": "26605",
            "tags": [
              "vdb-entry",
              "x_refsource_BID",
              "x_transferred"
            ],
            "url": "http://www.securityfocus.com/bid/26605"
          },
          {
            "name": "RHSA-2008:0154",
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT",
              "x_transferred"
            ],
            "url": "http://www.redhat.com/support/errata/RHSA-2008-0154.html"
          },
          {
            "name": "DSA-1436",
            "tags": [
              "vendor-advisory",
              "x_refsource_DEBIAN",
              "x_transferred"
            ],
            "url": "http://www.debian.org/security/2007/dsa-1436"
          },
          {
            "name": "ADV-2007-4046",
            "tags": [
              "vdb-entry",
              "x_refsource_VUPEN",
              "x_transferred"
            ],
            "url": "http://www.vupen.com/english/advisories/2007/4046"
          },
          {
            "name": "28141",
            "tags": [
              "third-party-advisory",
              "x_refsource_SECUNIA",
              "x_transferred"
            ],
            "url": "http://secunia.com/advisories/28141"
          },
          {
            "name": "28706",
            "tags": [
              "third-party-advisory",
              "x_refsource_SECUNIA",
              "x_transferred"
            ],
            "url": "http://secunia.com/advisories/28706"
          },
          {
            "name": "MDVSA-2008:112",
            "tags": [
              "vendor-advisory",
              "x_refsource_MANDRIVA",
              "x_transferred"
            ],
            "url": "http://www.mandriva.com/security/advisories?name=MDVSA-2008:112"
          },
          {
            "name": "DSA-1504",
            "tags": [
              "vendor-advisory",
              "x_refsource_DEBIAN",
              "x_transferred"
            ],
            "url": "http://www.debian.org/security/2008/dsa-1504"
          },
          {
            "name": "MDVSA-2008:008",
            "tags": [
              "vendor-advisory",
              "x_refsource_MANDRIVA",
              "x_transferred"
            ],
            "url": "http://www.mandriva.com/security/advisories?name=MDVSA-2008:008"
          },
          {
            "name": "27912",
            "tags": [
              "third-party-advisory",
              "x_refsource_SECUNIA",
              "x_transferred"
            ],
            "url": "http://secunia.com/advisories/27912"
          },
          {
            "name": "oval:org.mitre.oval:def:9846",
            "tags": [
              "vdb-entry",
              "signature",
              "x_refsource_OVAL",
              "x_transferred"
            ],
            "url": "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A9846"
          },
          {
            "name": "33280",
            "tags": [
              "third-party-advisory",
              "x_refsource_SECUNIA",
              "x_transferred"
            ],
            "url": "http://secunia.com/advisories/33280"
          },
          {
            "name": "29236",
            "tags": [
              "third-party-advisory",
              "x_refsource_SECUNIA",
              "x_transferred"
            ],
            "url": "http://secunia.com/advisories/29236"
          },
          {
            "name": "SUSE-SA:2007:064",
            "tags": [
              "vendor-advisory",
              "x_refsource_SUSE",
              "x_transferred"
            ],
            "url": "http://lists.opensuse.org/opensuse-security-announce/2007-12/msg00001.html"
          },
          {
            "name": "SUSE-SA:2008:006",
            "tags": [
              "vendor-advisory",
              "x_refsource_SUSE",
              "x_transferred"
            ],
            "url": "http://lists.opensuse.org/opensuse-security-announce/2008-02/msg00002.html"
          },
          {
            "name": "DSA-1503",
            "tags": [
              "vendor-advisory",
              "x_refsource_DEBIAN",
              "x_transferred"
            ],
            "url": "http://www.debian.org/security/2008/dsa-1503"
          },
          {
            "name": "27842",
            "tags": [
              "third-party-advisory",
              "x_refsource_SECUNIA",
              "x_transferred"
            ],
            "url": "http://secunia.com/advisories/27842"
          },
          {
            "name": "28748",
            "tags": [
              "third-party-advisory",
              "x_refsource_SECUNIA",
              "x_transferred"
            ],
            "url": "http://secunia.com/advisories/28748"
          },
          {
            "name": "USN-574-1",
            "tags": [
              "vendor-advisory",
              "x_refsource_UBUNTU",
              "x_transferred"
            ],
            "url": "http://www.ubuntu.com/usn/usn-574-1"
          },
          {
            "name": "29058",
            "tags": [
              "third-party-advisory",
              "x_refsource_SECUNIA",
              "x_transferred"
            ],
            "url": "http://secunia.com/advisories/29058"
          },
          {
            "name": "RHSA-2008:0973",
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT",
              "x_transferred"
            ],
            "url": "http://www.redhat.com/support/errata/RHSA-2008-0973.html"
          },
          {
            "name": "28971",
            "tags": [
              "third-party-advisory",
              "x_refsource_SECUNIA",
              "x_transferred"
            ],
            "url": "http://secunia.com/advisories/28971"
          },
          {
            "name": "RHSA-2008:0787",
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT",
              "x_transferred"
            ],
            "url": "http://www.redhat.com/support/errata/RHSA-2008-0787.html"
          },
          {
            "name": "USN-578-1",
            "tags": [
              "vendor-advisory",
              "x_refsource_UBUNTU",
              "x_transferred"
            ],
            "url": "http://www.ubuntu.com/usn/usn-578-1"
          },
          {
            "name": "RHSA-2008:0055",
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT",
              "x_transferred"
            ],
            "url": "http://rhn.redhat.com/errata/RHSA-2008-0055.html"
          },
          {
            "name": "oval:org.mitre.oval:def:6514",
            "tags": [
              "vdb-entry",
              "signature",
              "x_refsource_OVAL",
              "x_transferred"
            ],
            "url": "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A6514"
          },
          {
            "name": "33201",
            "tags": [
              "third-party-advisory",
              "x_refsource_SECUNIA",
              "x_transferred"
            ],
            "url": "http://secunia.com/advisories/33201"
          }
        ],
        "title": "CVE Program Container"
      }
    ],
    "cna": {
      "affected": [
        {
          "product": "n/a",
          "vendor": "n/a",
          "versions": [
            {
              "status": "affected",
              "version": "n/a"
            }
          ]
        }
      ],
      "datePublic": "2007-11-20T00:00:00.000Z",
      "descriptions": [
        {
          "lang": "en",
          "value": "Buffer overflow in the isdn_net_setcfg function in isdn_net.c in Linux kernel 2.6.23 allows local users to have an unknown impact via a crafted argument to the isdn_ioctl function."
        }
      ],
      "problemTypes": [
        {
          "descriptions": [
            {
              "description": "n/a",
              "lang": "en",
              "type": "text"
            }
          ]
        }
      ],
      "providerMetadata": {
        "dateUpdated": "2017-09-28T12:57:01.000Z",
        "orgId": "8254265b-2729-46b6-b9e3-3dfca2d5bfca",
        "shortName": "mitre"
      },
      "references": [
        {
          "tags": [
            "x_refsource_CONFIRM"
          ],
          "url": "http://bugzilla.kernel.org/show_bug.cgi?id=9416"
        },
        {
          "name": "28806",
          "tags": [
            "third-party-advisory",
            "x_refsource_SECUNIA"
          ],
          "url": "http://secunia.com/advisories/28806"
        },
        {
          "name": "26605",
          "tags": [
            "vdb-entry",
            "x_refsource_BID"
          ],
          "url": "http://www.securityfocus.com/bid/26605"
        },
        {
          "name": "RHSA-2008:0154",
          "tags": [
            "vendor-advisory",
            "x_refsource_REDHAT"
          ],
          "url": "http://www.redhat.com/support/errata/RHSA-2008-0154.html"
        },
        {
          "name": "DSA-1436",
          "tags": [
            "vendor-advisory",
            "x_refsource_DEBIAN"
          ],
          "url": "http://www.debian.org/security/2007/dsa-1436"
        },
        {
          "name": "ADV-2007-4046",
          "tags": [
            "vdb-entry",
            "x_refsource_VUPEN"
          ],
          "url": "http://www.vupen.com/english/advisories/2007/4046"
        },
        {
          "name": "28141",
          "tags": [
            "third-party-advisory",
            "x_refsource_SECUNIA"
          ],
          "url": "http://secunia.com/advisories/28141"
        },
        {
          "name": "28706",
          "tags": [
            "third-party-advisory",
            "x_refsource_SECUNIA"
          ],
          "url": "http://secunia.com/advisories/28706"
        },
        {
          "name": "MDVSA-2008:112",
          "tags": [
            "vendor-advisory",
            "x_refsource_MANDRIVA"
          ],
          "url": "http://www.mandriva.com/security/advisories?name=MDVSA-2008:112"
        },
        {
          "name": "DSA-1504",
          "tags": [
            "vendor-advisory",
            "x_refsource_DEBIAN"
          ],
          "url": "http://www.debian.org/security/2008/dsa-1504"
        },
        {
          "name": "MDVSA-2008:008",
          "tags": [
            "vendor-advisory",
            "x_refsource_MANDRIVA"
          ],
          "url": "http://www.mandriva.com/security/advisories?name=MDVSA-2008:008"
        },
        {
          "name": "27912",
          "tags": [
            "third-party-advisory",
            "x_refsource_SECUNIA"
          ],
          "url": "http://secunia.com/advisories/27912"
        },
        {
          "name": "oval:org.mitre.oval:def:9846",
          "tags": [
            "vdb-entry",
            "signature",
            "x_refsource_OVAL"
          ],
          "url": "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A9846"
        },
        {
          "name": "33280",
          "tags": [
            "third-party-advisory",
            "x_refsource_SECUNIA"
          ],
          "url": "http://secunia.com/advisories/33280"
        },
        {
          "name": "29236",
          "tags": [
            "third-party-advisory",
            "x_refsource_SECUNIA"
          ],
          "url": "http://secunia.com/advisories/29236"
        },
        {
          "name": "SUSE-SA:2007:064",
          "tags": [
            "vendor-advisory",
            "x_refsource_SUSE"
          ],
          "url": "http://lists.opensuse.org/opensuse-security-announce/2007-12/msg00001.html"
        },
        {
          "name": "SUSE-SA:2008:006",
          "tags": [
            "vendor-advisory",
            "x_refsource_SUSE"
          ],
          "url": "http://lists.opensuse.org/opensuse-security-announce/2008-02/msg00002.html"
        },
        {
          "name": "DSA-1503",
          "tags": [
            "vendor-advisory",
            "x_refsource_DEBIAN"
          ],
          "url": "http://www.debian.org/security/2008/dsa-1503"
        },
        {
          "name": "27842",
          "tags": [
            "third-party-advisory",
            "x_refsource_SECUNIA"
          ],
          "url": "http://secunia.com/advisories/27842"
        },
        {
          "name": "28748",
          "tags": [
            "third-party-advisory",
            "x_refsource_SECUNIA"
          ],
          "url": "http://secunia.com/advisories/28748"
        },
        {
          "name": "USN-574-1",
          "tags": [
            "vendor-advisory",
            "x_refsource_UBUNTU"
          ],
          "url": "http://www.ubuntu.com/usn/usn-574-1"
        },
        {
          "name": "29058",
          "tags": [
            "third-party-advisory",
            "x_refsource_SECUNIA"
          ],
          "url": "http://secunia.com/advisories/29058"
        },
        {
          "name": "RHSA-2008:0973",
          "tags": [
            "vendor-advisory",
            "x_refsource_REDHAT"
          ],
          "url": "http://www.redhat.com/support/errata/RHSA-2008-0973.html"
        },
        {
          "name": "28971",
          "tags": [
            "third-party-advisory",
            "x_refsource_SECUNIA"
          ],
          "url": "http://secunia.com/advisories/28971"
        },
        {
          "name": "RHSA-2008:0787",
          "tags": [
            "vendor-advisory",
            "x_refsource_REDHAT"
          ],
          "url": "http://www.redhat.com/support/errata/RHSA-2008-0787.html"
        },
        {
          "name": "USN-578-1",
          "tags": [
            "vendor-advisory",
            "x_refsource_UBUNTU"
          ],
          "url": "http://www.ubuntu.com/usn/usn-578-1"
        },
        {
          "name": "RHSA-2008:0055",
          "tags": [
            "vendor-advisory",
            "x_refsource_REDHAT"
          ],
          "url": "http://rhn.redhat.com/errata/RHSA-2008-0055.html"
        },
        {
          "name": "oval:org.mitre.oval:def:6514",
          "tags": [
            "vdb-entry",
            "signature",
            "x_refsource_OVAL"
          ],
          "url": "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A6514"
        },
        {
          "name": "33201",
          "tags": [
            "third-party-advisory",
            "x_refsource_SECUNIA"
          ],
          "url": "http://secunia.com/advisories/33201"
        }
      ],
      "x_legacyV4Record": {
        "CVE_data_meta": {
          "ASSIGNER": "cve@mitre.org",
          "ID": "CVE-2007-6063",
          "STATE": "PUBLIC"
        },
        "affects": {
          "vendor": {
            "vendor_data": [
              {
                "product": {
                  "product_data": [
                    {
                      "product_name": "n/a",
                      "version": {
                        "version_data": [
                          {
                            "version_value": "n/a"
                          }
                        ]
                      }
                    }
                  ]
                },
                "vendor_name": "n/a"
              }
            ]
          }
        },
        "data_format": "MITRE",
        "data_type": "CVE",
        "data_version": "4.0",
        "description": {
          "description_data": [
            {
              "lang": "eng",
              "value": "Buffer overflow in the isdn_net_setcfg function in isdn_net.c in Linux kernel 2.6.23 allows local users to have an unknown impact via a crafted argument to the isdn_ioctl function."
            }
          ]
        },
        "problemtype": {
          "problemtype_data": [
            {
              "description": [
                {
                  "lang": "eng",
                  "value": "n/a"
                }
              ]
            }
          ]
        },
        "references": {
          "reference_data": [
            {
              "name": "http://bugzilla.kernel.org/show_bug.cgi?id=9416",
              "refsource": "CONFIRM",
              "url": "http://bugzilla.kernel.org/show_bug.cgi?id=9416"
            },
            {
              "name": "28806",
              "refsource": "SECUNIA",
              "url": "http://secunia.com/advisories/28806"
            },
            {
              "name": "26605",
              "refsource": "BID",
              "url": "http://www.securityfocus.com/bid/26605"
            },
            {
              "name": "RHSA-2008:0154",
              "refsource": "REDHAT",
              "url": "http://www.redhat.com/support/errata/RHSA-2008-0154.html"
            },
            {
              "name": "DSA-1436",
              "refsource": "DEBIAN",
              "url": "http://www.debian.org/security/2007/dsa-1436"
            },
            {
              "name": "ADV-2007-4046",
              "refsource": "VUPEN",
              "url": "http://www.vupen.com/english/advisories/2007/4046"
            },
            {
              "name": "28141",
              "refsource": "SECUNIA",
              "url": "http://secunia.com/advisories/28141"
            },
            {
              "name": "28706",
              "refsource": "SECUNIA",
              "url": "http://secunia.com/advisories/28706"
            },
            {
              "name": "MDVSA-2008:112",
              "refsource": "MANDRIVA",
              "url": "http://www.mandriva.com/security/advisories?name=MDVSA-2008:112"
            },
            {
              "name": "DSA-1504",
              "refsource": "DEBIAN",
              "url": "http://www.debian.org/security/2008/dsa-1504"
            },
            {
              "name": "MDVSA-2008:008",
              "refsource": "MANDRIVA",
              "url": "http://www.mandriva.com/security/advisories?name=MDVSA-2008:008"
            },
            {
              "name": "27912",
              "refsource": "SECUNIA",
              "url": "http://secunia.com/advisories/27912"
            },
            {
              "name": "oval:org.mitre.oval:def:9846",
              "refsource": "OVAL",
              "url": "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A9846"
            },
            {
              "name": "33280",
              "refsource": "SECUNIA",
              "url": "http://secunia.com/advisories/33280"
            },
            {
              "name": "29236",
              "refsource": "SECUNIA",
              "url": "http://secunia.com/advisories/29236"
            },
            {
              "name": "SUSE-SA:2007:064",
              "refsource": "SUSE",
              "url": "http://lists.opensuse.org/opensuse-security-announce/2007-12/msg00001.html"
            },
            {
              "name": "SUSE-SA:2008:006",
              "refsource": "SUSE",
              "url": "http://lists.opensuse.org/opensuse-security-announce/2008-02/msg00002.html"
            },
            {
              "name": "DSA-1503",
              "refsource": "DEBIAN",
              "url": "http://www.debian.org/security/2008/dsa-1503"
            },
            {
              "name": "27842",
              "refsource": "SECUNIA",
              "url": "http://secunia.com/advisories/27842"
            },
            {
              "name": "28748",
              "refsource": "SECUNIA",
              "url": "http://secunia.com/advisories/28748"
            },
            {
              "name": "USN-574-1",
              "refsource": "UBUNTU",
              "url": "http://www.ubuntu.com/usn/usn-574-1"
            },
            {
              "name": "29058",
              "refsource": "SECUNIA",
              "url": "http://secunia.com/advisories/29058"
            },
            {
              "name": "RHSA-2008:0973",
              "refsource": "REDHAT",
              "url": "http://www.redhat.com/support/errata/RHSA-2008-0973.html"
            },
            {
              "name": "28971",
              "refsource": "SECUNIA",
              "url": "http://secunia.com/advisories/28971"
            },
            {
              "name": "RHSA-2008:0787",
              "refsource": "REDHAT",
              "url": "http://www.redhat.com/support/errata/RHSA-2008-0787.html"
            },
            {
              "name": "USN-578-1",
              "refsource": "UBUNTU",
              "url": "http://www.ubuntu.com/usn/usn-578-1"
            },
            {
              "name": "RHSA-2008:0055",
              "refsource": "REDHAT",
              "url": "http://rhn.redhat.com/errata/RHSA-2008-0055.html"
            },
            {
              "name": "oval:org.mitre.oval:def:6514",
              "refsource": "OVAL",
              "url": "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A6514"
            },
            {
              "name": "33201",
              "refsource": "SECUNIA",
              "url": "http://secunia.com/advisories/33201"
            }
          ]
        }
      }
    }
  },
  "cveMetadata": {
    "assignerOrgId": "8254265b-2729-46b6-b9e3-3dfca2d5bfca",
    "assignerShortName": "mitre",
    "cveId": "CVE-2007-6063",
    "datePublished": "2007-11-21T00:00:00.000Z",
    "dateReserved": "2007-11-20T00:00:00.000Z",
    "dateUpdated": "2024-08-07T15:54:26.990Z",
    "state": "PUBLISHED"
  },
  "dataType": "CVE_RECORD",
  "dataVersion": "5.1"
}

CVE-2007-6151 (GCVE-0-2007-6151)

Vulnerability from cvelistv5 – Published: 2007-12-15 01:00 – Updated: 2024-08-07 15:54

Summary

The isdn_ioctl function in isdn_common.c in Linux kernel 2.6.23 allows local users to cause a denial of service via a crafted ioctl struct in which iocts is not null terminated, which triggers a buffer overflow.

Severity

No CVSS data available.

CWE

Assigner

mitre mitre root

References

29 references

URL	Tags
http://secunia.com/advisories/30962	third-party-advisoryx_refsource_SECUNIA
http://lists.opensuse.org/opensuse-security-annou…	vendor-advisoryx_refsource_SUSE
http://www.securityfocus.com/bid/27497	vdb-entryx_refsource_BID
http://git.kernel.org/?p=linux/kernel/git/torvald…	x_refsource_CONFIRM
http://lists.opensuse.org/opensuse-security-annou…	vendor-advisoryx_refsource_SUSE
https://oval.cisecurity.org/repository/search/def…	vdb-entrysignaturex_refsource_OVAL
http://secunia.com/advisories/28706	third-party-advisoryx_refsource_SECUNIA
http://secunia.com/advisories/28626	third-party-advisoryx_refsource_SECUNIA
http://www.debian.org/security/2008/dsa-1479	vendor-advisoryx_refsource_DEBIAN
http://www.mandriva.com/security/advisories?name=…	vendor-advisoryx_refsource_MANDRIVA
http://www.debian.org/security/2008/dsa-1504	vendor-advisoryx_refsource_DEBIAN
http://secunia.com/advisories/28889	third-party-advisoryx_refsource_SECUNIA
http://secunia.com/advisories/30110	third-party-advisoryx_refsource_SECUNIA
http://www.vupen.com/english/advisories/2008/2222…	vdb-entryx_refsource_VUPEN
http://secunia.com/advisories/33280	third-party-advisoryx_refsource_SECUNIA
http://www.mandriva.com/security/advisories?name=…	vendor-advisoryx_refsource_MANDRIVA
http://www.debian.org/security/2008/dsa-1503	vendor-advisoryx_refsource_DEBIAN
http://secunia.com/advisories/28748	third-party-advisoryx_refsource_SECUNIA
http://www.ubuntu.com/usn/usn-574-1	vendor-advisoryx_refsource_UBUNTU
http://secunia.com/advisories/29058	third-party-advisoryx_refsource_SECUNIA
http://www.redhat.com/support/errata/RHSA-2008-02…	vendor-advisoryx_refsource_REDHAT
http://secunia.com/advisories/28971	third-party-advisoryx_refsource_SECUNIA
http://www.redhat.com/support/errata/RHSA-2008-07…	vendor-advisoryx_refsource_REDHAT
http://lists.vmware.com/pipermail/security-announ…	mailing-listx_refsource_MLIST
http://www.ubuntu.com/usn/usn-578-1	vendor-advisoryx_refsource_UBUNTU
http://secunia.com/advisories/31246	third-party-advisoryx_refsource_SECUNIA
http://secunia.com/advisories/29570	third-party-advisoryx_refsource_SECUNIA
http://rhn.redhat.com/errata/RHSA-2008-0055.html	vendor-advisoryx_refsource_REDHAT
http://lists.opensuse.org/opensuse-security-annou…	vendor-advisoryx_refsource_SUSE

Date Public

2007-12-01 00:00

Show details on NVD website

JSON

To clipboard

{
  "containers": {
    "adp": [
      {
        "providerMetadata": {
          "dateUpdated": "2024-08-07T15:54:27.005Z",
          "orgId": "af854a3a-2127-422b-91ae-364da2661108",
          "shortName": "CVE"
        },
        "references": [
          {
            "name": "30962",
            "tags": [
              "third-party-advisory",
              "x_refsource_SECUNIA",
              "x_transferred"
            ],
            "url": "http://secunia.com/advisories/30962"
          },
          {
            "name": "SUSE-SA:2008:017",
            "tags": [
              "vendor-advisory",
              "x_refsource_SUSE",
              "x_transferred"
            ],
            "url": "http://lists.opensuse.org/opensuse-security-announce/2008-03/msg00007.html"
          },
          {
            "name": "27497",
            "tags": [
              "vdb-entry",
              "x_refsource_BID",
              "x_transferred"
            ],
            "url": "http://www.securityfocus.com/bid/27497"
          },
          {
            "tags": [
              "x_refsource_CONFIRM",
              "x_transferred"
            ],
            "url": "http://git.kernel.org/?p=linux/kernel/git/torvalds/linux-2.6.git%3Ba=commitdiff%3Bh=eafe1aa37e6ec2d56f14732b5240c4dd09f0613a"
          },
          {
            "name": "SUSE-SA:2008:007",
            "tags": [
              "vendor-advisory",
              "x_refsource_SUSE",
              "x_transferred"
            ],
            "url": "http://lists.opensuse.org/opensuse-security-announce/2008-02/msg00005.html"
          },
          {
            "name": "oval:org.mitre.oval:def:10971",
            "tags": [
              "vdb-entry",
              "signature",
              "x_refsource_OVAL",
              "x_transferred"
            ],
            "url": "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A10971"
          },
          {
            "name": "28706",
            "tags": [
              "third-party-advisory",
              "x_refsource_SECUNIA",
              "x_transferred"
            ],
            "url": "http://secunia.com/advisories/28706"
          },
          {
            "name": "28626",
            "tags": [
              "third-party-advisory",
              "x_refsource_SECUNIA",
              "x_transferred"
            ],
            "url": "http://secunia.com/advisories/28626"
          },
          {
            "name": "DSA-1479",
            "tags": [
              "vendor-advisory",
              "x_refsource_DEBIAN",
              "x_transferred"
            ],
            "url": "http://www.debian.org/security/2008/dsa-1479"
          },
          {
            "name": "MDVSA-2008:112",
            "tags": [
              "vendor-advisory",
              "x_refsource_MANDRIVA",
              "x_transferred"
            ],
            "url": "http://www.mandriva.com/security/advisories?name=MDVSA-2008:112"
          },
          {
            "name": "DSA-1504",
            "tags": [
              "vendor-advisory",
              "x_refsource_DEBIAN",
              "x_transferred"
            ],
            "url": "http://www.debian.org/security/2008/dsa-1504"
          },
          {
            "name": "28889",
            "tags": [
              "third-party-advisory",
              "x_refsource_SECUNIA",
              "x_transferred"
            ],
            "url": "http://secunia.com/advisories/28889"
          },
          {
            "name": "30110",
            "tags": [
              "third-party-advisory",
              "x_refsource_SECUNIA",
              "x_transferred"
            ],
            "url": "http://secunia.com/advisories/30110"
          },
          {
            "name": "ADV-2008-2222",
            "tags": [
              "vdb-entry",
              "x_refsource_VUPEN",
              "x_transferred"
            ],
            "url": "http://www.vupen.com/english/advisories/2008/2222/references"
          },
          {
            "name": "33280",
            "tags": [
              "third-party-advisory",
              "x_refsource_SECUNIA",
              "x_transferred"
            ],
            "url": "http://secunia.com/advisories/33280"
          },
          {
            "name": "MDVSA-2008:086",
            "tags": [
              "vendor-advisory",
              "x_refsource_MANDRIVA",
              "x_transferred"
            ],
            "url": "http://www.mandriva.com/security/advisories?name=MDVSA-2008:086"
          },
          {
            "name": "DSA-1503",
            "tags": [
              "vendor-advisory",
              "x_refsource_DEBIAN",
              "x_transferred"
            ],
            "url": "http://www.debian.org/security/2008/dsa-1503"
          },
          {
            "name": "28748",
            "tags": [
              "third-party-advisory",
              "x_refsource_SECUNIA",
              "x_transferred"
            ],
            "url": "http://secunia.com/advisories/28748"
          },
          {
            "name": "USN-574-1",
            "tags": [
              "vendor-advisory",
              "x_refsource_UBUNTU",
              "x_transferred"
            ],
            "url": "http://www.ubuntu.com/usn/usn-574-1"
          },
          {
            "name": "29058",
            "tags": [
              "third-party-advisory",
              "x_refsource_SECUNIA",
              "x_transferred"
            ],
            "url": "http://secunia.com/advisories/29058"
          },
          {
            "name": "RHSA-2008:0211",
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT",
              "x_transferred"
            ],
            "url": "http://www.redhat.com/support/errata/RHSA-2008-0211.html"
          },
          {
            "name": "28971",
            "tags": [
              "third-party-advisory",
              "x_refsource_SECUNIA",
              "x_transferred"
            ],
            "url": "http://secunia.com/advisories/28971"
          },
          {
            "name": "RHSA-2008:0787",
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT",
              "x_transferred"
            ],
            "url": "http://www.redhat.com/support/errata/RHSA-2008-0787.html"
          },
          {
            "name": "[Security-announce] 20080728 VMSA-2008-00011 Updated ESX service console packages for Samba and vmnix",
            "tags": [
              "mailing-list",
              "x_refsource_MLIST",
              "x_transferred"
            ],
            "url": "http://lists.vmware.com/pipermail/security-announce/2008/000023.html"
          },
          {
            "name": "USN-578-1",
            "tags": [
              "vendor-advisory",
              "x_refsource_UBUNTU",
              "x_transferred"
            ],
            "url": "http://www.ubuntu.com/usn/usn-578-1"
          },
          {
            "name": "31246",
            "tags": [
              "third-party-advisory",
              "x_refsource_SECUNIA",
              "x_transferred"
            ],
            "url": "http://secunia.com/advisories/31246"
          },
          {
            "name": "29570",
            "tags": [
              "third-party-advisory",
              "x_refsource_SECUNIA",
              "x_transferred"
            ],
            "url": "http://secunia.com/advisories/29570"
          },
          {
            "name": "RHSA-2008:0055",
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT",
              "x_transferred"
            ],
            "url": "http://rhn.redhat.com/errata/RHSA-2008-0055.html"
          },
          {
            "name": "SUSE-SA:2008:032",
            "tags": [
              "vendor-advisory",
              "x_refsource_SUSE",
              "x_transferred"
            ],
            "url": "http://lists.opensuse.org/opensuse-security-announce/2008-07/msg00002.html"
          }
        ],
        "title": "CVE Program Container"
      }
    ],
    "cna": {
      "affected": [
        {
          "product": "n/a",
          "vendor": "n/a",
          "versions": [
            {
              "status": "affected",
              "version": "n/a"
            }
          ]
        }
      ],
      "datePublic": "2007-12-01T00:00:00.000Z",
      "descriptions": [
        {
          "lang": "en",
          "value": "The isdn_ioctl function in isdn_common.c in Linux kernel 2.6.23 allows local users to cause a denial of service via a crafted ioctl struct in which iocts is not null terminated, which triggers a buffer overflow."
        }
      ],
      "problemTypes": [
        {
          "descriptions": [
            {
              "description": "n/a",
              "lang": "en",
              "type": "text"
            }
          ]
        }
      ],
      "providerMetadata": {
        "dateUpdated": "2017-09-28T12:57:01.000Z",
        "orgId": "8254265b-2729-46b6-b9e3-3dfca2d5bfca",
        "shortName": "mitre"
      },
      "references": [
        {
          "name": "30962",
          "tags": [
            "third-party-advisory",
            "x_refsource_SECUNIA"
          ],
          "url": "http://secunia.com/advisories/30962"
        },
        {
          "name": "SUSE-SA:2008:017",
          "tags": [
            "vendor-advisory",
            "x_refsource_SUSE"
          ],
          "url": "http://lists.opensuse.org/opensuse-security-announce/2008-03/msg00007.html"
        },
        {
          "name": "27497",
          "tags": [
            "vdb-entry",
            "x_refsource_BID"
          ],
          "url": "http://www.securityfocus.com/bid/27497"
        },
        {
          "tags": [
            "x_refsource_CONFIRM"
          ],
          "url": "http://git.kernel.org/?p=linux/kernel/git/torvalds/linux-2.6.git%3Ba=commitdiff%3Bh=eafe1aa37e6ec2d56f14732b5240c4dd09f0613a"
        },
        {
          "name": "SUSE-SA:2008:007",
          "tags": [
            "vendor-advisory",
            "x_refsource_SUSE"
          ],
          "url": "http://lists.opensuse.org/opensuse-security-announce/2008-02/msg00005.html"
        },
        {
          "name": "oval:org.mitre.oval:def:10971",
          "tags": [
            "vdb-entry",
            "signature",
            "x_refsource_OVAL"
          ],
          "url": "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A10971"
        },
        {
          "name": "28706",
          "tags": [
            "third-party-advisory",
            "x_refsource_SECUNIA"
          ],
          "url": "http://secunia.com/advisories/28706"
        },
        {
          "name": "28626",
          "tags": [
            "third-party-advisory",
            "x_refsource_SECUNIA"
          ],
          "url": "http://secunia.com/advisories/28626"
        },
        {
          "name": "DSA-1479",
          "tags": [
            "vendor-advisory",
            "x_refsource_DEBIAN"
          ],
          "url": "http://www.debian.org/security/2008/dsa-1479"
        },
        {
          "name": "MDVSA-2008:112",
          "tags": [
            "vendor-advisory",
            "x_refsource_MANDRIVA"
          ],
          "url": "http://www.mandriva.com/security/advisories?name=MDVSA-2008:112"
        },
        {
          "name": "DSA-1504",
          "tags": [
            "vendor-advisory",
            "x_refsource_DEBIAN"
          ],
          "url": "http://www.debian.org/security/2008/dsa-1504"
        },
        {
          "name": "28889",
          "tags": [
            "third-party-advisory",
            "x_refsource_SECUNIA"
          ],
          "url": "http://secunia.com/advisories/28889"
        },
        {
          "name": "30110",
          "tags": [
            "third-party-advisory",
            "x_refsource_SECUNIA"
          ],
          "url": "http://secunia.com/advisories/30110"
        },
        {
          "name": "ADV-2008-2222",
          "tags": [
            "vdb-entry",
            "x_refsource_VUPEN"
          ],
          "url": "http://www.vupen.com/english/advisories/2008/2222/references"
        },
        {
          "name": "33280",
          "tags": [
            "third-party-advisory",
            "x_refsource_SECUNIA"
          ],
          "url": "http://secunia.com/advisories/33280"
        },
        {
          "name": "MDVSA-2008:086",
          "tags": [
            "vendor-advisory",
            "x_refsource_MANDRIVA"
          ],
          "url": "http://www.mandriva.com/security/advisories?name=MDVSA-2008:086"
        },
        {
          "name": "DSA-1503",
          "tags": [
            "vendor-advisory",
            "x_refsource_DEBIAN"
          ],
          "url": "http://www.debian.org/security/2008/dsa-1503"
        },
        {
          "name": "28748",
          "tags": [
            "third-party-advisory",
            "x_refsource_SECUNIA"
          ],
          "url": "http://secunia.com/advisories/28748"
        },
        {
          "name": "USN-574-1",
          "tags": [
            "vendor-advisory",
            "x_refsource_UBUNTU"
          ],
          "url": "http://www.ubuntu.com/usn/usn-574-1"
        },
        {
          "name": "29058",
          "tags": [
            "third-party-advisory",
            "x_refsource_SECUNIA"
          ],
          "url": "http://secunia.com/advisories/29058"
        },
        {
          "name": "RHSA-2008:0211",
          "tags": [
            "vendor-advisory",
            "x_refsource_REDHAT"
          ],
          "url": "http://www.redhat.com/support/errata/RHSA-2008-0211.html"
        },
        {
          "name": "28971",
          "tags": [
            "third-party-advisory",
            "x_refsource_SECUNIA"
          ],
          "url": "http://secunia.com/advisories/28971"
        },
        {
          "name": "RHSA-2008:0787",
          "tags": [
            "vendor-advisory",
            "x_refsource_REDHAT"
          ],
          "url": "http://www.redhat.com/support/errata/RHSA-2008-0787.html"
        },
        {
          "name": "[Security-announce] 20080728 VMSA-2008-00011 Updated ESX service console packages for Samba and vmnix",
          "tags": [
            "mailing-list",
            "x_refsource_MLIST"
          ],
          "url": "http://lists.vmware.com/pipermail/security-announce/2008/000023.html"
        },
        {
          "name": "USN-578-1",
          "tags": [
            "vendor-advisory",
            "x_refsource_UBUNTU"
          ],
          "url": "http://www.ubuntu.com/usn/usn-578-1"
        },
        {
          "name": "31246",
          "tags": [
            "third-party-advisory",
            "x_refsource_SECUNIA"
          ],
          "url": "http://secunia.com/advisories/31246"
        },
        {
          "name": "29570",
          "tags": [
            "third-party-advisory",
            "x_refsource_SECUNIA"
          ],
          "url": "http://secunia.com/advisories/29570"
        },
        {
          "name": "RHSA-2008:0055",
          "tags": [
            "vendor-advisory",
            "x_refsource_REDHAT"
          ],
          "url": "http://rhn.redhat.com/errata/RHSA-2008-0055.html"
        },
        {
          "name": "SUSE-SA:2008:032",
          "tags": [
            "vendor-advisory",
            "x_refsource_SUSE"
          ],
          "url": "http://lists.opensuse.org/opensuse-security-announce/2008-07/msg00002.html"
        }
      ],
      "x_legacyV4Record": {
        "CVE_data_meta": {
          "ASSIGNER": "cve@mitre.org",
          "ID": "CVE-2007-6151",
          "STATE": "PUBLIC"
        },
        "affects": {
          "vendor": {
            "vendor_data": [
              {
                "product": {
                  "product_data": [
                    {
                      "product_name": "n/a",
                      "version": {
                        "version_data": [
                          {
                            "version_value": "n/a"
                          }
                        ]
                      }
                    }
                  ]
                },
                "vendor_name": "n/a"
              }
            ]
          }
        },
        "data_format": "MITRE",
        "data_type": "CVE",
        "data_version": "4.0",
        "description": {
          "description_data": [
            {
              "lang": "eng",
              "value": "The isdn_ioctl function in isdn_common.c in Linux kernel 2.6.23 allows local users to cause a denial of service via a crafted ioctl struct in which iocts is not null terminated, which triggers a buffer overflow."
            }
          ]
        },
        "problemtype": {
          "problemtype_data": [
            {
              "description": [
                {
                  "lang": "eng",
                  "value": "n/a"
                }
              ]
            }
          ]
        },
        "references": {
          "reference_data": [
            {
              "name": "30962",
              "refsource": "SECUNIA",
              "url": "http://secunia.com/advisories/30962"
            },
            {
              "name": "SUSE-SA:2008:017",
              "refsource": "SUSE",
              "url": "http://lists.opensuse.org/opensuse-security-announce/2008-03/msg00007.html"
            },
            {
              "name": "27497",
              "refsource": "BID",
              "url": "http://www.securityfocus.com/bid/27497"
            },
            {
              "name": "http://git.kernel.org/?p=linux/kernel/git/torvalds/linux-2.6.git;a=commitdiff;h=eafe1aa37e6ec2d56f14732b5240c4dd09f0613a",
              "refsource": "CONFIRM",
              "url": "http://git.kernel.org/?p=linux/kernel/git/torvalds/linux-2.6.git;a=commitdiff;h=eafe1aa37e6ec2d56f14732b5240c4dd09f0613a"
            },
            {
              "name": "SUSE-SA:2008:007",
              "refsource": "SUSE",
              "url": "http://lists.opensuse.org/opensuse-security-announce/2008-02/msg00005.html"
            },
            {
              "name": "oval:org.mitre.oval:def:10971",
              "refsource": "OVAL",
              "url": "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A10971"
            },
            {
              "name": "28706",
              "refsource": "SECUNIA",
              "url": "http://secunia.com/advisories/28706"
            },
            {
              "name": "28626",
              "refsource": "SECUNIA",
              "url": "http://secunia.com/advisories/28626"
            },
            {
              "name": "DSA-1479",
              "refsource": "DEBIAN",
              "url": "http://www.debian.org/security/2008/dsa-1479"
            },
            {
              "name": "MDVSA-2008:112",
              "refsource": "MANDRIVA",
              "url": "http://www.mandriva.com/security/advisories?name=MDVSA-2008:112"
            },
            {
              "name": "DSA-1504",
              "refsource": "DEBIAN",
              "url": "http://www.debian.org/security/2008/dsa-1504"
            },
            {
              "name": "28889",
              "refsource": "SECUNIA",
              "url": "http://secunia.com/advisories/28889"
            },
            {
              "name": "30110",
              "refsource": "SECUNIA",
              "url": "http://secunia.com/advisories/30110"
            },
            {
              "name": "ADV-2008-2222",
              "refsource": "VUPEN",
              "url": "http://www.vupen.com/english/advisories/2008/2222/references"
            },
            {
              "name": "33280",
              "refsource": "SECUNIA",
              "url": "http://secunia.com/advisories/33280"
            },
            {
              "name": "MDVSA-2008:086",
              "refsource": "MANDRIVA",
              "url": "http://www.mandriva.com/security/advisories?name=MDVSA-2008:086"
            },
            {
              "name": "DSA-1503",
              "refsource": "DEBIAN",
              "url": "http://www.debian.org/security/2008/dsa-1503"
            },
            {
              "name": "28748",
              "refsource": "SECUNIA",
              "url": "http://secunia.com/advisories/28748"
            },
            {
              "name": "USN-574-1",
              "refsource": "UBUNTU",
              "url": "http://www.ubuntu.com/usn/usn-574-1"
            },
            {
              "name": "29058",
              "refsource": "SECUNIA",
              "url": "http://secunia.com/advisories/29058"
            },
            {
              "name": "RHSA-2008:0211",
              "refsource": "REDHAT",
              "url": "http://www.redhat.com/support/errata/RHSA-2008-0211.html"
            },
            {
              "name": "28971",
              "refsource": "SECUNIA",
              "url": "http://secunia.com/advisories/28971"
            },
            {
              "name": "RHSA-2008:0787",
              "refsource": "REDHAT",
              "url": "http://www.redhat.com/support/errata/RHSA-2008-0787.html"
            },
            {
              "name": "[Security-announce] 20080728 VMSA-2008-00011 Updated ESX service console packages for Samba and vmnix",
              "refsource": "MLIST",
              "url": "http://lists.vmware.com/pipermail/security-announce/2008/000023.html"
            },
            {
              "name": "USN-578-1",
              "refsource": "UBUNTU",
              "url": "http://www.ubuntu.com/usn/usn-578-1"
            },
            {
              "name": "31246",
              "refsource": "SECUNIA",
              "url": "http://secunia.com/advisories/31246"
            },
            {
              "name": "29570",
              "refsource": "SECUNIA",
              "url": "http://secunia.com/advisories/29570"
            },
            {
              "name": "RHSA-2008:0055",
              "refsource": "REDHAT",
              "url": "http://rhn.redhat.com/errata/RHSA-2008-0055.html"
            },
            {
              "name": "SUSE-SA:2008:032",
              "refsource": "SUSE",
              "url": "http://lists.opensuse.org/opensuse-security-announce/2008-07/msg00002.html"
            }
          ]
        }
      }
    }
  },
  "cveMetadata": {
    "assignerOrgId": "8254265b-2729-46b6-b9e3-3dfca2d5bfca",
    "assignerShortName": "mitre",
    "cveId": "CVE-2007-6151",
    "datePublished": "2007-12-15T01:00:00.000Z",
    "dateReserved": "2007-11-28T00:00:00.000Z",
    "dateUpdated": "2024-08-07T15:54:27.005Z",
    "state": "PUBLISHED"
  },
  "dataType": "CVE_RECORD",
  "dataVersion": "5.1"
}

CVE-2007-6206 (GCVE-0-2007-6206)

Vulnerability from cvelistv5 – Published: 2007-12-04 00:00 – Updated: 2024-08-07 15:54

Summary

The do_coredump function in fs/exec.c in Linux kernel 2.4.x and 2.6.x up to 2.6.24-rc3, and possibly other versions, does not change the UID of a core dump file if it exists before a root process creates a core dump in the same location, which might allow local users to obtain sensitive information.

Severity

No CVSS data available.

CWE

Assigner

mitre mitre root

References

39 references

URL	Tags
http://www.securityfocus.com/archive/1/487808/100…	mailing-listx_refsource_BUGTRAQ
http://secunia.com/advisories/30962	third-party-advisoryx_refsource_SECUNIA
http://bugzilla.kernel.org/show_bug.cgi?id=3043	x_refsource_CONFIRM
http://secunia.com/advisories/27908	third-party-advisoryx_refsource_SECUNIA
http://www.debian.org/security/2007/dsa-1436	vendor-advisoryx_refsource_DEBIAN
http://secunia.com/advisories/28643	third-party-advisoryx_refsource_SECUNIA
http://lists.opensuse.org/opensuse-security-annou…	vendor-advisoryx_refsource_SUSE
http://secunia.com/advisories/28141	third-party-advisoryx_refsource_SECUNIA
http://secunia.com/advisories/28826	third-party-advisoryx_refsource_SECUNIA
http://secunia.com/advisories/28706	third-party-advisoryx_refsource_SECUNIA
http://www.mandriva.com/security/advisories?name=…	vendor-advisoryx_refsource_MANDRIVA
http://www.debian.org/security/2008/dsa-1504	vendor-advisoryx_refsource_DEBIAN
https://exchange.xforce.ibmcloud.com/vulnerabilit…	vdb-entryx_refsource_XF
http://www.securityfocus.com/bid/26701	vdb-entryx_refsource_BID
http://secunia.com/advisories/28889	third-party-advisoryx_refsource_SECUNIA
http://wiki.rpath.com/wiki/Advisories:rPSA-2008-0048	x_refsource_CONFIRM
http://secunia.com/advisories/30110	third-party-advisoryx_refsource_SECUNIA
http://www.vupen.com/english/advisories/2008/2222…	vdb-entryx_refsource_VUPEN
http://secunia.com/advisories/33280	third-party-advisoryx_refsource_SECUNIA
http://www.mandriva.com/security/advisories?name=…	vendor-advisoryx_refsource_MANDRIVA
http://www.mandriva.com/security/advisories?name=…	vendor-advisoryx_refsource_MANDRIVA
https://oval.cisecurity.org/repository/search/def…	vdb-entrysignaturex_refsource_OVAL
http://git.kernel.org/?p=linux/kernel/git/torvald…	x_refsource_CONFIRM
http://www.debian.org/security/2008/dsa-1503	vendor-advisoryx_refsource_DEBIAN
http://secunia.com/advisories/28748	third-party-advisoryx_refsource_SECUNIA
http://www.ubuntu.com/usn/usn-574-1	vendor-advisoryx_refsource_UBUNTU
http://www.vupen.com/english/advisories/2007/4090	vdb-entryx_refsource_VUPEN
http://secunia.com/advisories/29058	third-party-advisoryx_refsource_SECUNIA
http://www.redhat.com/support/errata/RHSA-2008-02…	vendor-advisoryx_refsource_REDHAT
http://secunia.com/advisories/28971	third-party-advisoryx_refsource_SECUNIA
http://www.redhat.com/support/errata/RHSA-2008-07…	vendor-advisoryx_refsource_REDHAT
http://www.redhat.com/support/errata/RHSA-2008-00…	vendor-advisoryx_refsource_REDHAT
http://lists.vmware.com/pipermail/security-announ…	mailing-listx_refsource_MLIST
http://lists.opensuse.org/opensuse-security-annou…	vendor-advisoryx_refsource_SUSE
http://www.ubuntu.com/usn/usn-578-1	vendor-advisoryx_refsource_UBUNTU
http://secunia.com/advisories/31246	third-party-advisoryx_refsource_SECUNIA
http://rhn.redhat.com/errata/RHSA-2008-0055.html	vendor-advisoryx_refsource_REDHAT
http://secunia.com/advisories/30818	third-party-advisoryx_refsource_SECUNIA
http://lists.opensuse.org/opensuse-security-annou…	vendor-advisoryx_refsource_SUSE

Date Public

2007-12-03 00:00

Show details on NVD website

JSON

To clipboard

{
  "containers": {
    "adp": [
      {
        "providerMetadata": {
          "dateUpdated": "2024-08-07T15:54:27.085Z",
          "orgId": "af854a3a-2127-422b-91ae-364da2661108",
          "shortName": "CVE"
        },
        "references": [
          {
            "name": "20080208 rPSA-2008-0048-1 kernel",
            "tags": [
              "mailing-list",
              "x_refsource_BUGTRAQ",
              "x_transferred"
            ],
            "url": "http://www.securityfocus.com/archive/1/487808/100/0/threaded"
          },
          {
            "name": "30962",
            "tags": [
              "third-party-advisory",
              "x_refsource_SECUNIA",
              "x_transferred"
            ],
            "url": "http://secunia.com/advisories/30962"
          },
          {
            "tags": [
              "x_refsource_CONFIRM",
              "x_transferred"
            ],
            "url": "http://bugzilla.kernel.org/show_bug.cgi?id=3043"
          },
          {
            "name": "27908",
            "tags": [
              "third-party-advisory",
              "x_refsource_SECUNIA",
              "x_transferred"
            ],
            "url": "http://secunia.com/advisories/27908"
          },
          {
            "name": "DSA-1436",
            "tags": [
              "vendor-advisory",
              "x_refsource_DEBIAN",
              "x_transferred"
            ],
            "url": "http://www.debian.org/security/2007/dsa-1436"
          },
          {
            "name": "28643",
            "tags": [
              "third-party-advisory",
              "x_refsource_SECUNIA",
              "x_transferred"
            ],
            "url": "http://secunia.com/advisories/28643"
          },
          {
            "name": "SUSE-SA:2008:007",
            "tags": [
              "vendor-advisory",
              "x_refsource_SUSE",
              "x_transferred"
            ],
            "url": "http://lists.opensuse.org/opensuse-security-announce/2008-02/msg00005.html"
          },
          {
            "name": "28141",
            "tags": [
              "third-party-advisory",
              "x_refsource_SECUNIA",
              "x_transferred"
            ],
            "url": "http://secunia.com/advisories/28141"
          },
          {
            "name": "28826",
            "tags": [
              "third-party-advisory",
              "x_refsource_SECUNIA",
              "x_transferred"
            ],
            "url": "http://secunia.com/advisories/28826"
          },
          {
            "name": "28706",
            "tags": [
              "third-party-advisory",
              "x_refsource_SECUNIA",
              "x_transferred"
            ],
            "url": "http://secunia.com/advisories/28706"
          },
          {
            "name": "MDVSA-2008:112",
            "tags": [
              "vendor-advisory",
              "x_refsource_MANDRIVA",
              "x_transferred"
            ],
            "url": "http://www.mandriva.com/security/advisories?name=MDVSA-2008:112"
          },
          {
            "name": "DSA-1504",
            "tags": [
              "vendor-advisory",
              "x_refsource_DEBIAN",
              "x_transferred"
            ],
            "url": "http://www.debian.org/security/2008/dsa-1504"
          },
          {
            "name": "kernel-core-dump-information-disclosure(38841)",
            "tags": [
              "vdb-entry",
              "x_refsource_XF",
              "x_transferred"
            ],
            "url": "https://exchange.xforce.ibmcloud.com/vulnerabilities/38841"
          },
          {
            "name": "26701",
            "tags": [
              "vdb-entry",
              "x_refsource_BID",
              "x_transferred"
            ],
            "url": "http://www.securityfocus.com/bid/26701"
          },
          {
            "name": "28889",
            "tags": [
              "third-party-advisory",
              "x_refsource_SECUNIA",
              "x_transferred"
            ],
            "url": "http://secunia.com/advisories/28889"
          },
          {
            "tags": [
              "x_refsource_CONFIRM",
              "x_transferred"
            ],
            "url": "http://wiki.rpath.com/wiki/Advisories:rPSA-2008-0048"
          },
          {
            "name": "30110",
            "tags": [
              "third-party-advisory",
              "x_refsource_SECUNIA",
              "x_transferred"
            ],
            "url": "http://secunia.com/advisories/30110"
          },
          {
            "name": "ADV-2008-2222",
            "tags": [
              "vdb-entry",
              "x_refsource_VUPEN",
              "x_transferred"
            ],
            "url": "http://www.vupen.com/english/advisories/2008/2222/references"
          },
          {
            "name": "33280",
            "tags": [
              "third-party-advisory",
              "x_refsource_SECUNIA",
              "x_transferred"
            ],
            "url": "http://secunia.com/advisories/33280"
          },
          {
            "name": "MDVSA-2008:086",
            "tags": [
              "vendor-advisory",
              "x_refsource_MANDRIVA",
              "x_transferred"
            ],
            "url": "http://www.mandriva.com/security/advisories?name=MDVSA-2008:086"
          },
          {
            "name": "MDVSA-2008:044",
            "tags": [
              "vendor-advisory",
              "x_refsource_MANDRIVA",
              "x_transferred"
            ],
            "url": "http://www.mandriva.com/security/advisories?name=MDVSA-2008:044"
          },
          {
            "name": "oval:org.mitre.oval:def:10719",
            "tags": [
              "vdb-entry",
              "signature",
              "x_refsource_OVAL",
              "x_transferred"
            ],
            "url": "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A10719"
          },
          {
            "tags": [
              "x_refsource_CONFIRM",
              "x_transferred"
            ],
            "url": "http://git.kernel.org/?p=linux/kernel/git/torvalds/linux-2.6.git%3Ba=commitdiff%3Bh=c46f739dd39db3b07ab5deb4e3ec81e1c04a91af"
          },
          {
            "name": "DSA-1503",
            "tags": [
              "vendor-advisory",
              "x_refsource_DEBIAN",
              "x_transferred"
            ],
            "url": "http://www.debian.org/security/2008/dsa-1503"
          },
          {
            "name": "28748",
            "tags": [
              "third-party-advisory",
              "x_refsource_SECUNIA",
              "x_transferred"
            ],
            "url": "http://secunia.com/advisories/28748"
          },
          {
            "name": "USN-574-1",
            "tags": [
              "vendor-advisory",
              "x_refsource_UBUNTU",
              "x_transferred"
            ],
            "url": "http://www.ubuntu.com/usn/usn-574-1"
          },
          {
            "name": "ADV-2007-4090",
            "tags": [
              "vdb-entry",
              "x_refsource_VUPEN",
              "x_transferred"
            ],
            "url": "http://www.vupen.com/english/advisories/2007/4090"
          },
          {
            "name": "29058",
            "tags": [
              "third-party-advisory",
              "x_refsource_SECUNIA",
              "x_transferred"
            ],
            "url": "http://secunia.com/advisories/29058"
          },
          {
            "name": "RHSA-2008:0211",
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT",
              "x_transferred"
            ],
            "url": "http://www.redhat.com/support/errata/RHSA-2008-0211.html"
          },
          {
            "name": "28971",
            "tags": [
              "third-party-advisory",
              "x_refsource_SECUNIA",
              "x_transferred"
            ],
            "url": "http://secunia.com/advisories/28971"
          },
          {
            "name": "RHSA-2008:0787",
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT",
              "x_transferred"
            ],
            "url": "http://www.redhat.com/support/errata/RHSA-2008-0787.html"
          },
          {
            "name": "RHSA-2008:0089",
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT",
              "x_transferred"
            ],
            "url": "http://www.redhat.com/support/errata/RHSA-2008-0089.html"
          },
          {
            "name": "[Security-announce] 20080728 VMSA-2008-00011 Updated ESX service console packages for Samba and vmnix",
            "tags": [
              "mailing-list",
              "x_refsource_MLIST",
              "x_transferred"
            ],
            "url": "http://lists.vmware.com/pipermail/security-announce/2008/000023.html"
          },
          {
            "name": "SUSE-SA:2008:030",
            "tags": [
              "vendor-advisory",
              "x_refsource_SUSE",
              "x_transferred"
            ],
            "url": "http://lists.opensuse.org/opensuse-security-announce/2008-06/msg00006.html"
          },
          {
            "name": "USN-578-1",
            "tags": [
              "vendor-advisory",
              "x_refsource_UBUNTU",
              "x_transferred"
            ],
            "url": "http://www.ubuntu.com/usn/usn-578-1"
          },
          {
            "name": "31246",
            "tags": [
              "third-party-advisory",
              "x_refsource_SECUNIA",
              "x_transferred"
            ],
            "url": "http://secunia.com/advisories/31246"
          },
          {
            "name": "RHSA-2008:0055",
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT",
              "x_transferred"
            ],
            "url": "http://rhn.redhat.com/errata/RHSA-2008-0055.html"
          },
          {
            "name": "30818",
            "tags": [
              "third-party-advisory",
              "x_refsource_SECUNIA",
              "x_transferred"
            ],
            "url": "http://secunia.com/advisories/30818"
          },
          {
            "name": "SUSE-SA:2008:032",
            "tags": [
              "vendor-advisory",
              "x_refsource_SUSE",
              "x_transferred"
            ],
            "url": "http://lists.opensuse.org/opensuse-security-announce/2008-07/msg00002.html"
          }
        ],
        "title": "CVE Program Container"
      }
    ],
    "cna": {
      "affected": [
        {
          "product": "n/a",
          "vendor": "n/a",
          "versions": [
            {
              "status": "affected",
              "version": "n/a"
            }
          ]
        }
      ],
      "datePublic": "2007-12-03T00:00:00.000Z",
      "descriptions": [
        {
          "lang": "en",
          "value": "The do_coredump function in fs/exec.c in Linux kernel 2.4.x and 2.6.x up to 2.6.24-rc3, and possibly other versions, does not change the UID of a core dump file if it exists before a root process creates a core dump in the same location, which might allow local users to obtain sensitive information."
        }
      ],
      "problemTypes": [
        {
          "descriptions": [
            {
              "description": "n/a",
              "lang": "en",
              "type": "text"
            }
          ]
        }
      ],
      "providerMetadata": {
        "dateUpdated": "2018-10-15T20:57:01.000Z",
        "orgId": "8254265b-2729-46b6-b9e3-3dfca2d5bfca",
        "shortName": "mitre"
      },
      "references": [
        {
          "name": "20080208 rPSA-2008-0048-1 kernel",
          "tags": [
            "mailing-list",
            "x_refsource_BUGTRAQ"
          ],
          "url": "http://www.securityfocus.com/archive/1/487808/100/0/threaded"
        },
        {
          "name": "30962",
          "tags": [
            "third-party-advisory",
            "x_refsource_SECUNIA"
          ],
          "url": "http://secunia.com/advisories/30962"
        },
        {
          "tags": [
            "x_refsource_CONFIRM"
          ],
          "url": "http://bugzilla.kernel.org/show_bug.cgi?id=3043"
        },
        {
          "name": "27908",
          "tags": [
            "third-party-advisory",
            "x_refsource_SECUNIA"
          ],
          "url": "http://secunia.com/advisories/27908"
        },
        {
          "name": "DSA-1436",
          "tags": [
            "vendor-advisory",
            "x_refsource_DEBIAN"
          ],
          "url": "http://www.debian.org/security/2007/dsa-1436"
        },
        {
          "name": "28643",
          "tags": [
            "third-party-advisory",
            "x_refsource_SECUNIA"
          ],
          "url": "http://secunia.com/advisories/28643"
        },
        {
          "name": "SUSE-SA:2008:007",
          "tags": [
            "vendor-advisory",
            "x_refsource_SUSE"
          ],
          "url": "http://lists.opensuse.org/opensuse-security-announce/2008-02/msg00005.html"
        },
        {
          "name": "28141",
          "tags": [
            "third-party-advisory",
            "x_refsource_SECUNIA"
          ],
          "url": "http://secunia.com/advisories/28141"
        },
        {
          "name": "28826",
          "tags": [
            "third-party-advisory",
            "x_refsource_SECUNIA"
          ],
          "url": "http://secunia.com/advisories/28826"
        },
        {
          "name": "28706",
          "tags": [
            "third-party-advisory",
            "x_refsource_SECUNIA"
          ],
          "url": "http://secunia.com/advisories/28706"
        },
        {
          "name": "MDVSA-2008:112",
          "tags": [
            "vendor-advisory",
            "x_refsource_MANDRIVA"
          ],
          "url": "http://www.mandriva.com/security/advisories?name=MDVSA-2008:112"
        },
        {
          "name": "DSA-1504",
          "tags": [
            "vendor-advisory",
            "x_refsource_DEBIAN"
          ],
          "url": "http://www.debian.org/security/2008/dsa-1504"
        },
        {
          "name": "kernel-core-dump-information-disclosure(38841)",
          "tags": [
            "vdb-entry",
            "x_refsource_XF"
          ],
          "url": "https://exchange.xforce.ibmcloud.com/vulnerabilities/38841"
        },
        {
          "name": "26701",
          "tags": [
            "vdb-entry",
            "x_refsource_BID"
          ],
          "url": "http://www.securityfocus.com/bid/26701"
        },
        {
          "name": "28889",
          "tags": [
            "third-party-advisory",
            "x_refsource_SECUNIA"
          ],
          "url": "http://secunia.com/advisories/28889"
        },
        {
          "tags": [
            "x_refsource_CONFIRM"
          ],
          "url": "http://wiki.rpath.com/wiki/Advisories:rPSA-2008-0048"
        },
        {
          "name": "30110",
          "tags": [
            "third-party-advisory",
            "x_refsource_SECUNIA"
          ],
          "url": "http://secunia.com/advisories/30110"
        },
        {
          "name": "ADV-2008-2222",
          "tags": [
            "vdb-entry",
            "x_refsource_VUPEN"
          ],
          "url": "http://www.vupen.com/english/advisories/2008/2222/references"
        },
        {
          "name": "33280",
          "tags": [
            "third-party-advisory",
            "x_refsource_SECUNIA"
          ],
          "url": "http://secunia.com/advisories/33280"
        },
        {
          "name": "MDVSA-2008:086",
          "tags": [
            "vendor-advisory",
            "x_refsource_MANDRIVA"
          ],
          "url": "http://www.mandriva.com/security/advisories?name=MDVSA-2008:086"
        },
        {
          "name": "MDVSA-2008:044",
          "tags": [
            "vendor-advisory",
            "x_refsource_MANDRIVA"
          ],
          "url": "http://www.mandriva.com/security/advisories?name=MDVSA-2008:044"
        },
        {
          "name": "oval:org.mitre.oval:def:10719",
          "tags": [
            "vdb-entry",
            "signature",
            "x_refsource_OVAL"
          ],
          "url": "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A10719"
        },
        {
          "tags": [
            "x_refsource_CONFIRM"
          ],
          "url": "http://git.kernel.org/?p=linux/kernel/git/torvalds/linux-2.6.git%3Ba=commitdiff%3Bh=c46f739dd39db3b07ab5deb4e3ec81e1c04a91af"
        },
        {
          "name": "DSA-1503",
          "tags": [
            "vendor-advisory",
            "x_refsource_DEBIAN"
          ],
          "url": "http://www.debian.org/security/2008/dsa-1503"
        },
        {
          "name": "28748",
          "tags": [
            "third-party-advisory",
            "x_refsource_SECUNIA"
          ],
          "url": "http://secunia.com/advisories/28748"
        },
        {
          "name": "USN-574-1",
          "tags": [
            "vendor-advisory",
            "x_refsource_UBUNTU"
          ],
          "url": "http://www.ubuntu.com/usn/usn-574-1"
        },
        {
          "name": "ADV-2007-4090",
          "tags": [
            "vdb-entry",
            "x_refsource_VUPEN"
          ],
          "url": "http://www.vupen.com/english/advisories/2007/4090"
        },
        {
          "name": "29058",
          "tags": [
            "third-party-advisory",
            "x_refsource_SECUNIA"
          ],
          "url": "http://secunia.com/advisories/29058"
        },
        {
          "name": "RHSA-2008:0211",
          "tags": [
            "vendor-advisory",
            "x_refsource_REDHAT"
          ],
          "url": "http://www.redhat.com/support/errata/RHSA-2008-0211.html"
        },
        {
          "name": "28971",
          "tags": [
            "third-party-advisory",
            "x_refsource_SECUNIA"
          ],
          "url": "http://secunia.com/advisories/28971"
        },
        {
          "name": "RHSA-2008:0787",
          "tags": [
            "vendor-advisory",
            "x_refsource_REDHAT"
          ],
          "url": "http://www.redhat.com/support/errata/RHSA-2008-0787.html"
        },
        {
          "name": "RHSA-2008:0089",
          "tags": [
            "vendor-advisory",
            "x_refsource_REDHAT"
          ],
          "url": "http://www.redhat.com/support/errata/RHSA-2008-0089.html"
        },
        {
          "name": "[Security-announce] 20080728 VMSA-2008-00011 Updated ESX service console packages for Samba and vmnix",
          "tags": [
            "mailing-list",
            "x_refsource_MLIST"
          ],
          "url": "http://lists.vmware.com/pipermail/security-announce/2008/000023.html"
        },
        {
          "name": "SUSE-SA:2008:030",
          "tags": [
            "vendor-advisory",
            "x_refsource_SUSE"
          ],
          "url": "http://lists.opensuse.org/opensuse-security-announce/2008-06/msg00006.html"
        },
        {
          "name": "USN-578-1",
          "tags": [
            "vendor-advisory",
            "x_refsource_UBUNTU"
          ],
          "url": "http://www.ubuntu.com/usn/usn-578-1"
        },
        {
          "name": "31246",
          "tags": [
            "third-party-advisory",
            "x_refsource_SECUNIA"
          ],
          "url": "http://secunia.com/advisories/31246"
        },
        {
          "name": "RHSA-2008:0055",
          "tags": [
            "vendor-advisory",
            "x_refsource_REDHAT"
          ],
          "url": "http://rhn.redhat.com/errata/RHSA-2008-0055.html"
        },
        {
          "name": "30818",
          "tags": [
            "third-party-advisory",
            "x_refsource_SECUNIA"
          ],
          "url": "http://secunia.com/advisories/30818"
        },
        {
          "name": "SUSE-SA:2008:032",
          "tags": [
            "vendor-advisory",
            "x_refsource_SUSE"
          ],
          "url": "http://lists.opensuse.org/opensuse-security-announce/2008-07/msg00002.html"
        }
      ],
      "x_legacyV4Record": {
        "CVE_data_meta": {
          "ASSIGNER": "cve@mitre.org",
          "ID": "CVE-2007-6206",
          "STATE": "PUBLIC"
        },
        "affects": {
          "vendor": {
            "vendor_data": [
              {
                "product": {
                  "product_data": [
                    {
                      "product_name": "n/a",
                      "version": {
                        "version_data": [
                          {
                            "version_value": "n/a"
                          }
                        ]
                      }
                    }
                  ]
                },
                "vendor_name": "n/a"
              }
            ]
          }
        },
        "data_format": "MITRE",
        "data_type": "CVE",
        "data_version": "4.0",
        "description": {
          "description_data": [
            {
              "lang": "eng",
              "value": "The do_coredump function in fs/exec.c in Linux kernel 2.4.x and 2.6.x up to 2.6.24-rc3, and possibly other versions, does not change the UID of a core dump file if it exists before a root process creates a core dump in the same location, which might allow local users to obtain sensitive information."
            }
          ]
        },
        "problemtype": {
          "problemtype_data": [
            {
              "description": [
                {
                  "lang": "eng",
                  "value": "n/a"
                }
              ]
            }
          ]
        },
        "references": {
          "reference_data": [
            {
              "name": "20080208 rPSA-2008-0048-1 kernel",
              "refsource": "BUGTRAQ",
              "url": "http://www.securityfocus.com/archive/1/487808/100/0/threaded"
            },
            {
              "name": "30962",
              "refsource": "SECUNIA",
              "url": "http://secunia.com/advisories/30962"
            },
            {
              "name": "http://bugzilla.kernel.org/show_bug.cgi?id=3043",
              "refsource": "CONFIRM",
              "url": "http://bugzilla.kernel.org/show_bug.cgi?id=3043"
            },
            {
              "name": "27908",
              "refsource": "SECUNIA",
              "url": "http://secunia.com/advisories/27908"
            },
            {
              "name": "DSA-1436",
              "refsource": "DEBIAN",
              "url": "http://www.debian.org/security/2007/dsa-1436"
            },
            {
              "name": "28643",
              "refsource": "SECUNIA",
              "url": "http://secunia.com/advisories/28643"
            },
            {
              "name": "SUSE-SA:2008:007",
              "refsource": "SUSE",
              "url": "http://lists.opensuse.org/opensuse-security-announce/2008-02/msg00005.html"
            },
            {
              "name": "28141",
              "refsource": "SECUNIA",
              "url": "http://secunia.com/advisories/28141"
            },
            {
              "name": "28826",
              "refsource": "SECUNIA",
              "url": "http://secunia.com/advisories/28826"
            },
            {
              "name": "28706",
              "refsource": "SECUNIA",
              "url": "http://secunia.com/advisories/28706"
            },
            {
              "name": "MDVSA-2008:112",
              "refsource": "MANDRIVA",
              "url": "http://www.mandriva.com/security/advisories?name=MDVSA-2008:112"
            },
            {
              "name": "DSA-1504",
              "refsource": "DEBIAN",
              "url": "http://www.debian.org/security/2008/dsa-1504"
            },
            {
              "name": "kernel-core-dump-information-disclosure(38841)",
              "refsource": "XF",
              "url": "https://exchange.xforce.ibmcloud.com/vulnerabilities/38841"
            },
            {
              "name": "26701",
              "refsource": "BID",
              "url": "http://www.securityfocus.com/bid/26701"
            },
            {
              "name": "28889",
              "refsource": "SECUNIA",
              "url": "http://secunia.com/advisories/28889"
            },
            {
              "name": "http://wiki.rpath.com/wiki/Advisories:rPSA-2008-0048",
              "refsource": "CONFIRM",
              "url": "http://wiki.rpath.com/wiki/Advisories:rPSA-2008-0048"
            },
            {
              "name": "30110",
              "refsource": "SECUNIA",
              "url": "http://secunia.com/advisories/30110"
            },
            {
              "name": "ADV-2008-2222",
              "refsource": "VUPEN",
              "url": "http://www.vupen.com/english/advisories/2008/2222/references"
            },
            {
              "name": "33280",
              "refsource": "SECUNIA",
              "url": "http://secunia.com/advisories/33280"
            },
            {
              "name": "MDVSA-2008:086",
              "refsource": "MANDRIVA",
              "url": "http://www.mandriva.com/security/advisories?name=MDVSA-2008:086"
            },
            {
              "name": "MDVSA-2008:044",
              "refsource": "MANDRIVA",
              "url": "http://www.mandriva.com/security/advisories?name=MDVSA-2008:044"
            },
            {
              "name": "oval:org.mitre.oval:def:10719",
              "refsource": "OVAL",
              "url": "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A10719"
            },
            {
              "name": "http://git.kernel.org/?p=linux/kernel/git/torvalds/linux-2.6.git;a=commitdiff;h=c46f739dd39db3b07ab5deb4e3ec81e1c04a91af",
              "refsource": "CONFIRM",
              "url": "http://git.kernel.org/?p=linux/kernel/git/torvalds/linux-2.6.git;a=commitdiff;h=c46f739dd39db3b07ab5deb4e3ec81e1c04a91af"
            },
            {
              "name": "DSA-1503",
              "refsource": "DEBIAN",
              "url": "http://www.debian.org/security/2008/dsa-1503"
            },
            {
              "name": "28748",
              "refsource": "SECUNIA",
              "url": "http://secunia.com/advisories/28748"
            },
            {
              "name": "USN-574-1",
              "refsource": "UBUNTU",
              "url": "http://www.ubuntu.com/usn/usn-574-1"
            },
            {
              "name": "ADV-2007-4090",
              "refsource": "VUPEN",
              "url": "http://www.vupen.com/english/advisories/2007/4090"
            },
            {
              "name": "29058",
              "refsource": "SECUNIA",
              "url": "http://secunia.com/advisories/29058"
            },
            {
              "name": "RHSA-2008:0211",
              "refsource": "REDHAT",
              "url": "http://www.redhat.com/support/errata/RHSA-2008-0211.html"
            },
            {
              "name": "28971",
              "refsource": "SECUNIA",
              "url": "http://secunia.com/advisories/28971"
            },
            {
              "name": "RHSA-2008:0787",
              "refsource": "REDHAT",
              "url": "http://www.redhat.com/support/errata/RHSA-2008-0787.html"
            },
            {
              "name": "RHSA-2008:0089",
              "refsource": "REDHAT",
              "url": "http://www.redhat.com/support/errata/RHSA-2008-0089.html"
            },
            {
              "name": "[Security-announce] 20080728 VMSA-2008-00011 Updated ESX service console packages for Samba and vmnix",
              "refsource": "MLIST",
              "url": "http://lists.vmware.com/pipermail/security-announce/2008/000023.html"
            },
            {
              "name": "SUSE-SA:2008:030",
              "refsource": "SUSE",
              "url": "http://lists.opensuse.org/opensuse-security-announce/2008-06/msg00006.html"
            },
            {
              "name": "USN-578-1",
              "refsource": "UBUNTU",
              "url": "http://www.ubuntu.com/usn/usn-578-1"
            },
            {
              "name": "31246",
              "refsource": "SECUNIA",
              "url": "http://secunia.com/advisories/31246"
            },
            {
              "name": "RHSA-2008:0055",
              "refsource": "REDHAT",
              "url": "http://rhn.redhat.com/errata/RHSA-2008-0055.html"
            },
            {
              "name": "30818",
              "refsource": "SECUNIA",
              "url": "http://secunia.com/advisories/30818"
            },
            {
              "name": "SUSE-SA:2008:032",
              "refsource": "SUSE",
              "url": "http://lists.opensuse.org/opensuse-security-announce/2008-07/msg00002.html"
            }
          ]
        }
      }
    }
  },
  "cveMetadata": {
    "assignerOrgId": "8254265b-2729-46b6-b9e3-3dfca2d5bfca",
    "assignerShortName": "mitre",
    "cveId": "CVE-2007-6206",
    "datePublished": "2007-12-04T00:00:00.000Z",
    "dateReserved": "2007-12-03T00:00:00.000Z",
    "dateUpdated": "2024-08-07T15:54:27.085Z",
    "state": "PUBLISHED"
  },
  "dataType": "CVE_RECORD",
  "dataVersion": "5.1"
}

CVE-2007-6694 (GCVE-0-2007-6694)

Vulnerability from cvelistv5 – Published: 2008-01-29 19:00 – Updated: 2024-08-07 16:18

Summary

The chrp_show_cpuinfo function (chrp/setup.c) in Linux kernel 2.4.21 through 2.6.18-53, when running on PowerPC, might allow local users to cause a denial of service (crash) via unknown vectors that cause the of_get_property function to fail, which triggers a NULL pointer dereference.

Severity

No CVSS data available.

CWE

Assigner

mitre mitre root

References

19 references

URL	Tags
http://www.securityfocus.com/bid/27555	vdb-entryx_refsource_BID
http://www.redhat.com/support/errata/RHSA-2008-01…	vendor-advisoryx_refsource_REDHAT
http://www.ubuntu.com/usn/usn-618-1	vendor-advisoryx_refsource_UBUNTU
https://bugzilla.redhat.com/show_bug.cgi?id=396751	x_refsource_CONFIRM
http://www.debian.org/security/2008/dsa-1565	vendor-advisoryx_refsource_DEBIAN
http://www.debian.org/security/2008/dsa-1504	vendor-advisoryx_refsource_DEBIAN
http://secunia.com/advisories/28696	third-party-advisoryx_refsource_SECUNIA
http://secunia.com/advisories/29236	third-party-advisoryx_refsource_SECUNIA
http://secunia.com/advisories/30515	third-party-advisoryx_refsource_SECUNIA
https://usn.ubuntu.com/614-1/	vendor-advisoryx_refsource_UBUNTU
http://www.debian.org/security/2008/dsa-1503	vendor-advisoryx_refsource_DEBIAN
http://secunia.com/advisories/28748	third-party-advisoryx_refsource_SECUNIA
https://oval.cisecurity.org/repository/search/def…	vdb-entrysignaturex_refsource_OVAL
http://secunia.com/advisories/29058	third-party-advisoryx_refsource_SECUNIA
http://www.vupen.com/english/advisories/2008/0380	vdb-entryx_refsource_VUPEN
http://secunia.com/advisories/30769	third-party-advisoryx_refsource_SECUNIA
http://secunia.com/advisories/30018	third-party-advisoryx_refsource_SECUNIA
http://rhn.redhat.com/errata/RHSA-2008-0055.html	vendor-advisoryx_refsource_REDHAT
http://marc.info/?l=linux-kernel&m=119576191029571&w=2	mailing-listx_refsource_MLIST

Date Public

2007-11-22 00:00

Show details on NVD website

JSON

To clipboard

{
  "containers": {
    "adp": [
      {
        "providerMetadata": {
          "dateUpdated": "2024-08-07T16:18:20.892Z",
          "orgId": "af854a3a-2127-422b-91ae-364da2661108",
          "shortName": "CVE"
        },
        "references": [
          {
            "name": "27555",
            "tags": [
              "vdb-entry",
              "x_refsource_BID",
              "x_transferred"
            ],
            "url": "http://www.securityfocus.com/bid/27555"
          },
          {
            "name": "RHSA-2008:0154",
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT",
              "x_transferred"
            ],
            "url": "http://www.redhat.com/support/errata/RHSA-2008-0154.html"
          },
          {
            "name": "USN-618-1",
            "tags": [
              "vendor-advisory",
              "x_refsource_UBUNTU",
              "x_transferred"
            ],
            "url": "http://www.ubuntu.com/usn/usn-618-1"
          },
          {
            "tags": [
              "x_refsource_CONFIRM",
              "x_transferred"
            ],
            "url": "https://bugzilla.redhat.com/show_bug.cgi?id=396751"
          },
          {
            "name": "DSA-1565",
            "tags": [
              "vendor-advisory",
              "x_refsource_DEBIAN",
              "x_transferred"
            ],
            "url": "http://www.debian.org/security/2008/dsa-1565"
          },
          {
            "name": "DSA-1504",
            "tags": [
              "vendor-advisory",
              "x_refsource_DEBIAN",
              "x_transferred"
            ],
            "url": "http://www.debian.org/security/2008/dsa-1504"
          },
          {
            "name": "28696",
            "tags": [
              "third-party-advisory",
              "x_refsource_SECUNIA",
              "x_transferred"
            ],
            "url": "http://secunia.com/advisories/28696"
          },
          {
            "name": "29236",
            "tags": [
              "third-party-advisory",
              "x_refsource_SECUNIA",
              "x_transferred"
            ],
            "url": "http://secunia.com/advisories/29236"
          },
          {
            "name": "30515",
            "tags": [
              "third-party-advisory",
              "x_refsource_SECUNIA",
              "x_transferred"
            ],
            "url": "http://secunia.com/advisories/30515"
          },
          {
            "name": "USN-614-1",
            "tags": [
              "vendor-advisory",
              "x_refsource_UBUNTU",
              "x_transferred"
            ],
            "url": "https://usn.ubuntu.com/614-1/"
          },
          {
            "name": "DSA-1503",
            "tags": [
              "vendor-advisory",
              "x_refsource_DEBIAN",
              "x_transferred"
            ],
            "url": "http://www.debian.org/security/2008/dsa-1503"
          },
          {
            "name": "28748",
            "tags": [
              "third-party-advisory",
              "x_refsource_SECUNIA",
              "x_transferred"
            ],
            "url": "http://secunia.com/advisories/28748"
          },
          {
            "name": "oval:org.mitre.oval:def:11215",
            "tags": [
              "vdb-entry",
              "signature",
              "x_refsource_OVAL",
              "x_transferred"
            ],
            "url": "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A11215"
          },
          {
            "name": "29058",
            "tags": [
              "third-party-advisory",
              "x_refsource_SECUNIA",
              "x_transferred"
            ],
            "url": "http://secunia.com/advisories/29058"
          },
          {
            "name": "ADV-2008-0380",
            "tags": [
              "vdb-entry",
              "x_refsource_VUPEN",
              "x_transferred"
            ],
            "url": "http://www.vupen.com/english/advisories/2008/0380"
          },
          {
            "name": "30769",
            "tags": [
              "third-party-advisory",
              "x_refsource_SECUNIA",
              "x_transferred"
            ],
            "url": "http://secunia.com/advisories/30769"
          },
          {
            "name": "30018",
            "tags": [
              "third-party-advisory",
              "x_refsource_SECUNIA",
              "x_transferred"
            ],
            "url": "http://secunia.com/advisories/30018"
          },
          {
            "name": "RHSA-2008:0055",
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT",
              "x_transferred"
            ],
            "url": "http://rhn.redhat.com/errata/RHSA-2008-0055.html"
          },
          {
            "name": "[linux-kernel] 20071122 [PATCH] PPC: CHRP - fix possible NULL pointer dereference",
            "tags": [
              "mailing-list",
              "x_refsource_MLIST",
              "x_transferred"
            ],
            "url": "http://marc.info/?l=linux-kernel\u0026m=119576191029571\u0026w=2"
          }
        ],
        "title": "CVE Program Container"
      }
    ],
    "cna": {
      "affected": [
        {
          "product": "n/a",
          "vendor": "n/a",
          "versions": [
            {
              "status": "affected",
              "version": "n/a"
            }
          ]
        }
      ],
      "datePublic": "2007-11-22T00:00:00.000Z",
      "descriptions": [
        {
          "lang": "en",
          "value": "The chrp_show_cpuinfo function (chrp/setup.c) in Linux kernel 2.4.21 through 2.6.18-53, when running on PowerPC, might allow local users to cause a denial of service (crash) via unknown vectors that cause the of_get_property function to fail, which triggers a NULL pointer dereference."
        }
      ],
      "problemTypes": [
        {
          "descriptions": [
            {
              "description": "n/a",
              "lang": "en",
              "type": "text"
            }
          ]
        }
      ],
      "providerMetadata": {
        "dateUpdated": "2018-10-03T20:57:01.000Z",
        "orgId": "8254265b-2729-46b6-b9e3-3dfca2d5bfca",
        "shortName": "mitre"
      },
      "references": [
        {
          "name": "27555",
          "tags": [
            "vdb-entry",
            "x_refsource_BID"
          ],
          "url": "http://www.securityfocus.com/bid/27555"
        },
        {
          "name": "RHSA-2008:0154",
          "tags": [
            "vendor-advisory",
            "x_refsource_REDHAT"
          ],
          "url": "http://www.redhat.com/support/errata/RHSA-2008-0154.html"
        },
        {
          "name": "USN-618-1",
          "tags": [
            "vendor-advisory",
            "x_refsource_UBUNTU"
          ],
          "url": "http://www.ubuntu.com/usn/usn-618-1"
        },
        {
          "tags": [
            "x_refsource_CONFIRM"
          ],
          "url": "https://bugzilla.redhat.com/show_bug.cgi?id=396751"
        },
        {
          "name": "DSA-1565",
          "tags": [
            "vendor-advisory",
            "x_refsource_DEBIAN"
          ],
          "url": "http://www.debian.org/security/2008/dsa-1565"
        },
        {
          "name": "DSA-1504",
          "tags": [
            "vendor-advisory",
            "x_refsource_DEBIAN"
          ],
          "url": "http://www.debian.org/security/2008/dsa-1504"
        },
        {
          "name": "28696",
          "tags": [
            "third-party-advisory",
            "x_refsource_SECUNIA"
          ],
          "url": "http://secunia.com/advisories/28696"
        },
        {
          "name": "29236",
          "tags": [
            "third-party-advisory",
            "x_refsource_SECUNIA"
          ],
          "url": "http://secunia.com/advisories/29236"
        },
        {
          "name": "30515",
          "tags": [
            "third-party-advisory",
            "x_refsource_SECUNIA"
          ],
          "url": "http://secunia.com/advisories/30515"
        },
        {
          "name": "USN-614-1",
          "tags": [
            "vendor-advisory",
            "x_refsource_UBUNTU"
          ],
          "url": "https://usn.ubuntu.com/614-1/"
        },
        {
          "name": "DSA-1503",
          "tags": [
            "vendor-advisory",
            "x_refsource_DEBIAN"
          ],
          "url": "http://www.debian.org/security/2008/dsa-1503"
        },
        {
          "name": "28748",
          "tags": [
            "third-party-advisory",
            "x_refsource_SECUNIA"
          ],
          "url": "http://secunia.com/advisories/28748"
        },
        {
          "name": "oval:org.mitre.oval:def:11215",
          "tags": [
            "vdb-entry",
            "signature",
            "x_refsource_OVAL"
          ],
          "url": "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A11215"
        },
        {
          "name": "29058",
          "tags": [
            "third-party-advisory",
            "x_refsource_SECUNIA"
          ],
          "url": "http://secunia.com/advisories/29058"
        },
        {
          "name": "ADV-2008-0380",
          "tags": [
            "vdb-entry",
            "x_refsource_VUPEN"
          ],
          "url": "http://www.vupen.com/english/advisories/2008/0380"
        },
        {
          "name": "30769",
          "tags": [
            "third-party-advisory",
            "x_refsource_SECUNIA"
          ],
          "url": "http://secunia.com/advisories/30769"
        },
        {
          "name": "30018",
          "tags": [
            "third-party-advisory",
            "x_refsource_SECUNIA"
          ],
          "url": "http://secunia.com/advisories/30018"
        },
        {
          "name": "RHSA-2008:0055",
          "tags": [
            "vendor-advisory",
            "x_refsource_REDHAT"
          ],
          "url": "http://rhn.redhat.com/errata/RHSA-2008-0055.html"
        },
        {
          "name": "[linux-kernel] 20071122 [PATCH] PPC: CHRP - fix possible NULL pointer dereference",
          "tags": [
            "mailing-list",
            "x_refsource_MLIST"
          ],
          "url": "http://marc.info/?l=linux-kernel\u0026m=119576191029571\u0026w=2"
        }
      ],
      "x_legacyV4Record": {
        "CVE_data_meta": {
          "ASSIGNER": "cve@mitre.org",
          "ID": "CVE-2007-6694",
          "STATE": "PUBLIC"
        },
        "affects": {
          "vendor": {
            "vendor_data": [
              {
                "product": {
                  "product_data": [
                    {
                      "product_name": "n/a",
                      "version": {
                        "version_data": [
                          {
                            "version_value": "n/a"
                          }
                        ]
                      }
                    }
                  ]
                },
                "vendor_name": "n/a"
              }
            ]
          }
        },
        "data_format": "MITRE",
        "data_type": "CVE",
        "data_version": "4.0",
        "description": {
          "description_data": [
            {
              "lang": "eng",
              "value": "The chrp_show_cpuinfo function (chrp/setup.c) in Linux kernel 2.4.21 through 2.6.18-53, when running on PowerPC, might allow local users to cause a denial of service (crash) via unknown vectors that cause the of_get_property function to fail, which triggers a NULL pointer dereference."
            }
          ]
        },
        "problemtype": {
          "problemtype_data": [
            {
              "description": [
                {
                  "lang": "eng",
                  "value": "n/a"
                }
              ]
            }
          ]
        },
        "references": {
          "reference_data": [
            {
              "name": "27555",
              "refsource": "BID",
              "url": "http://www.securityfocus.com/bid/27555"
            },
            {
              "name": "RHSA-2008:0154",
              "refsource": "REDHAT",
              "url": "http://www.redhat.com/support/errata/RHSA-2008-0154.html"
            },
            {
              "name": "USN-618-1",
              "refsource": "UBUNTU",
              "url": "http://www.ubuntu.com/usn/usn-618-1"
            },
            {
              "name": "https://bugzilla.redhat.com/show_bug.cgi?id=396751",
              "refsource": "CONFIRM",
              "url": "https://bugzilla.redhat.com/show_bug.cgi?id=396751"
            },
            {
              "name": "DSA-1565",
              "refsource": "DEBIAN",
              "url": "http://www.debian.org/security/2008/dsa-1565"
            },
            {
              "name": "DSA-1504",
              "refsource": "DEBIAN",
              "url": "http://www.debian.org/security/2008/dsa-1504"
            },
            {
              "name": "28696",
              "refsource": "SECUNIA",
              "url": "http://secunia.com/advisories/28696"
            },
            {
              "name": "29236",
              "refsource": "SECUNIA",
              "url": "http://secunia.com/advisories/29236"
            },
            {
              "name": "30515",
              "refsource": "SECUNIA",
              "url": "http://secunia.com/advisories/30515"
            },
            {
              "name": "USN-614-1",
              "refsource": "UBUNTU",
              "url": "https://usn.ubuntu.com/614-1/"
            },
            {
              "name": "DSA-1503",
              "refsource": "DEBIAN",
              "url": "http://www.debian.org/security/2008/dsa-1503"
            },
            {
              "name": "28748",
              "refsource": "SECUNIA",
              "url": "http://secunia.com/advisories/28748"
            },
            {
              "name": "oval:org.mitre.oval:def:11215",
              "refsource": "OVAL",
              "url": "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A11215"
            },
            {
              "name": "29058",
              "refsource": "SECUNIA",
              "url": "http://secunia.com/advisories/29058"
            },
            {
              "name": "ADV-2008-0380",
              "refsource": "VUPEN",
              "url": "http://www.vupen.com/english/advisories/2008/0380"
            },
            {
              "name": "30769",
              "refsource": "SECUNIA",
              "url": "http://secunia.com/advisories/30769"
            },
            {
              "name": "30018",
              "refsource": "SECUNIA",
              "url": "http://secunia.com/advisories/30018"
            },
            {
              "name": "RHSA-2008:0055",
              "refsource": "REDHAT",
              "url": "http://rhn.redhat.com/errata/RHSA-2008-0055.html"
            },
            {
              "name": "[linux-kernel] 20071122 [PATCH] PPC: CHRP - fix possible NULL pointer dereference",
              "refsource": "MLIST",
              "url": "http://marc.info/?l=linux-kernel\u0026m=119576191029571\u0026w=2"
            }
          ]
        }
      }
    }
  },
  "cveMetadata": {
    "assignerOrgId": "8254265b-2729-46b6-b9e3-3dfca2d5bfca",
    "assignerShortName": "mitre",
    "cveId": "CVE-2007-6694",
    "datePublished": "2008-01-29T19:00:00.000Z",
    "dateReserved": "2008-01-29T00:00:00.000Z",
    "dateUpdated": "2024-08-07T16:18:20.892Z",
    "state": "PUBLISHED"
  },
  "dataType": "CVE_RECORD",
  "dataVersion": "5.1"
}

CVE-2008-0007 (GCVE-0-2008-0007)

Vulnerability from cvelistv5 – Published: 2008-02-08 01:00 – Updated: 2024-08-07 07:32

Summary

Linux kernel before 2.6.22.17, when using certain drivers that register a fault handler that does not perform range checks, allows local users to access kernel memory via an out-of-range offset.

Severity

No CVSS data available.

CWE

Assigner

redhat redhat root

References

37 references

URL	Tags
http://securitytracker.com/id?1019357	vdb-entryx_refsource_SECTRACK
http://www.securityfocus.com/archive/1/487808/100…	mailing-listx_refsource_BUGTRAQ
http://lists.opensuse.org/opensuse-security-annou…	vendor-advisoryx_refsource_SUSE
http://www.kernel.org/pub/linux/kernel/v2.6/Chang…	x_refsource_CONFIRM
http://www.securityfocus.com/bid/27686	vdb-entryx_refsource_BID
http://secunia.com/advisories/28806	third-party-advisoryx_refsource_SECUNIA
http://www.redhat.com/support/errata/RHSA-2008-02…	vendor-advisoryx_refsource_REDHAT
http://www.ubuntu.com/usn/usn-618-1	vendor-advisoryx_refsource_UBUNTU
http://secunia.com/advisories/28826	third-party-advisoryx_refsource_SECUNIA
https://oval.cisecurity.org/repository/search/def…	vdb-entrysignaturex_refsource_OVAL
http://www.kernel.org/pub/linux/kernel/v2.6/Chang…	x_refsource_CONFIRM
http://www.debian.org/security/2008/dsa-1565	vendor-advisoryx_refsource_DEBIAN
http://www.mandriva.com/security/advisories?name=…	vendor-advisoryx_refsource_MANDRIVA
http://www.debian.org/security/2008/dsa-1504	vendor-advisoryx_refsource_DEBIAN
http://secunia.com/advisories/30116	third-party-advisoryx_refsource_SECUNIA
http://wiki.rpath.com/wiki/Advisories:rPSA-2008-0048	x_refsource_CONFIRM
http://www.redhat.com/support/errata/RHSA-2008-02…	vendor-advisoryx_refsource_REDHAT
http://lkml.org/lkml/2008/2/6/457	mailing-listx_refsource_MLIST
http://secunia.com/advisories/30110	third-party-advisoryx_refsource_SECUNIA
http://www.vupen.com/english/advisories/2008/2222…	vdb-entryx_refsource_VUPEN
http://secunia.com/advisories/33280	third-party-advisoryx_refsource_SECUNIA
http://www.mandriva.com/security/advisories?name=…	vendor-advisoryx_refsource_MANDRIVA
http://www.mandriva.com/security/advisories?name=…	vendor-advisoryx_refsource_MANDRIVA
http://www.mandriva.com/security/advisories?name=…	vendor-advisoryx_refsource_MANDRIVA
http://www.vupen.com/english/advisories/2008/0445…	vdb-entryx_refsource_VUPEN
http://lists.opensuse.org/opensuse-security-annou…	vendor-advisoryx_refsource_SUSE
http://www.debian.org/security/2008/dsa-1503	vendor-advisoryx_refsource_DEBIAN
http://secunia.com/advisories/29058	third-party-advisoryx_refsource_SECUNIA
http://www.redhat.com/support/errata/RHSA-2008-02…	vendor-advisoryx_refsource_REDHAT
http://www.securityfocus.com/bid/27705	vdb-entryx_refsource_BID
http://www.redhat.com/support/errata/RHSA-2008-07…	vendor-advisoryx_refsource_REDHAT
http://secunia.com/advisories/30769	third-party-advisoryx_refsource_SECUNIA
http://lists.vmware.com/pipermail/security-announ…	mailing-listx_refsource_MLIST
http://secunia.com/advisories/30018	third-party-advisoryx_refsource_SECUNIA
http://secunia.com/advisories/31246	third-party-advisoryx_refsource_SECUNIA
http://secunia.com/advisories/29570	third-party-advisoryx_refsource_SECUNIA
http://secunia.com/advisories/30112	third-party-advisoryx_refsource_SECUNIA

Date Public

2008-02-06 00:00

Show details on NVD website

JSON

To clipboard

{
  "containers": {
    "adp": [
      {
        "providerMetadata": {
          "dateUpdated": "2024-08-07T07:32:23.652Z",
          "orgId": "af854a3a-2127-422b-91ae-364da2661108",
          "shortName": "CVE"
        },
        "references": [
          {
            "name": "1019357",
            "tags": [
              "vdb-entry",
              "x_refsource_SECTRACK",
              "x_transferred"
            ],
            "url": "http://securitytracker.com/id?1019357"
          },
          {
            "name": "20080208 rPSA-2008-0048-1 kernel",
            "tags": [
              "mailing-list",
              "x_refsource_BUGTRAQ",
              "x_transferred"
            ],
            "url": "http://www.securityfocus.com/archive/1/487808/100/0/threaded"
          },
          {
            "name": "SUSE-SA:2008:017",
            "tags": [
              "vendor-advisory",
              "x_refsource_SUSE",
              "x_transferred"
            ],
            "url": "http://lists.opensuse.org/opensuse-security-announce/2008-03/msg00007.html"
          },
          {
            "tags": [
              "x_refsource_CONFIRM",
              "x_transferred"
            ],
            "url": "http://www.kernel.org/pub/linux/kernel/v2.6/ChangeLog-2.6.22.17"
          },
          {
            "name": "27686",
            "tags": [
              "vdb-entry",
              "x_refsource_BID",
              "x_transferred"
            ],
            "url": "http://www.securityfocus.com/bid/27686"
          },
          {
            "name": "28806",
            "tags": [
              "third-party-advisory",
              "x_refsource_SECUNIA",
              "x_transferred"
            ],
            "url": "http://secunia.com/advisories/28806"
          },
          {
            "name": "RHSA-2008:0237",
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT",
              "x_transferred"
            ],
            "url": "http://www.redhat.com/support/errata/RHSA-2008-0237.html"
          },
          {
            "name": "USN-618-1",
            "tags": [
              "vendor-advisory",
              "x_refsource_UBUNTU",
              "x_transferred"
            ],
            "url": "http://www.ubuntu.com/usn/usn-618-1"
          },
          {
            "name": "28826",
            "tags": [
              "third-party-advisory",
              "x_refsource_SECUNIA",
              "x_transferred"
            ],
            "url": "http://secunia.com/advisories/28826"
          },
          {
            "name": "oval:org.mitre.oval:def:9412",
            "tags": [
              "vdb-entry",
              "signature",
              "x_refsource_OVAL",
              "x_transferred"
            ],
            "url": "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A9412"
          },
          {
            "tags": [
              "x_refsource_CONFIRM",
              "x_transferred"
            ],
            "url": "http://www.kernel.org/pub/linux/kernel/v2.6/ChangeLog-2.6.24.1"
          },
          {
            "name": "DSA-1565",
            "tags": [
              "vendor-advisory",
              "x_refsource_DEBIAN",
              "x_transferred"
            ],
            "url": "http://www.debian.org/security/2008/dsa-1565"
          },
          {
            "name": "MDVSA-2008:112",
            "tags": [
              "vendor-advisory",
              "x_refsource_MANDRIVA",
              "x_transferred"
            ],
            "url": "http://www.mandriva.com/security/advisories?name=MDVSA-2008:112"
          },
          {
            "name": "DSA-1504",
            "tags": [
              "vendor-advisory",
              "x_refsource_DEBIAN",
              "x_transferred"
            ],
            "url": "http://www.debian.org/security/2008/dsa-1504"
          },
          {
            "name": "30116",
            "tags": [
              "third-party-advisory",
              "x_refsource_SECUNIA",
              "x_transferred"
            ],
            "url": "http://secunia.com/advisories/30116"
          },
          {
            "tags": [
              "x_refsource_CONFIRM",
              "x_transferred"
            ],
            "url": "http://wiki.rpath.com/wiki/Advisories:rPSA-2008-0048"
          },
          {
            "name": "RHSA-2008:0233",
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT",
              "x_transferred"
            ],
            "url": "http://www.redhat.com/support/errata/RHSA-2008-0233.html"
          },
          {
            "name": "[linux-kernel] 20080206 [patch 60/73] vm audit: add VM_DONTEXPAND to mmap for drivers that need it (CVE-2008-0007)",
            "tags": [
              "mailing-list",
              "x_refsource_MLIST",
              "x_transferred"
            ],
            "url": "http://lkml.org/lkml/2008/2/6/457"
          },
          {
            "name": "30110",
            "tags": [
              "third-party-advisory",
              "x_refsource_SECUNIA",
              "x_transferred"
            ],
            "url": "http://secunia.com/advisories/30110"
          },
          {
            "name": "ADV-2008-2222",
            "tags": [
              "vdb-entry",
              "x_refsource_VUPEN",
              "x_transferred"
            ],
            "url": "http://www.vupen.com/english/advisories/2008/2222/references"
          },
          {
            "name": "33280",
            "tags": [
              "third-party-advisory",
              "x_refsource_SECUNIA",
              "x_transferred"
            ],
            "url": "http://secunia.com/advisories/33280"
          },
          {
            "name": "MDVSA-2008:044",
            "tags": [
              "vendor-advisory",
              "x_refsource_MANDRIVA",
              "x_transferred"
            ],
            "url": "http://www.mandriva.com/security/advisories?name=MDVSA-2008:044"
          },
          {
            "name": "MDVSA-2008:072",
            "tags": [
              "vendor-advisory",
              "x_refsource_MANDRIVA",
              "x_transferred"
            ],
            "url": "http://www.mandriva.com/security/advisories?name=MDVSA-2008:072"
          },
          {
            "name": "MDVSA-2008:174",
            "tags": [
              "vendor-advisory",
              "x_refsource_MANDRIVA",
              "x_transferred"
            ],
            "url": "http://www.mandriva.com/security/advisories?name=MDVSA-2008:174"
          },
          {
            "name": "ADV-2008-0445",
            "tags": [
              "vdb-entry",
              "x_refsource_VUPEN",
              "x_transferred"
            ],
            "url": "http://www.vupen.com/english/advisories/2008/0445/references"
          },
          {
            "name": "SUSE-SA:2008:006",
            "tags": [
              "vendor-advisory",
              "x_refsource_SUSE",
              "x_transferred"
            ],
            "url": "http://lists.opensuse.org/opensuse-security-announce/2008-02/msg00002.html"
          },
          {
            "name": "DSA-1503",
            "tags": [
              "vendor-advisory",
              "x_refsource_DEBIAN",
              "x_transferred"
            ],
            "url": "http://www.debian.org/security/2008/dsa-1503"
          },
          {
            "name": "29058",
            "tags": [
              "third-party-advisory",
              "x_refsource_SECUNIA",
              "x_transferred"
            ],
            "url": "http://secunia.com/advisories/29058"
          },
          {
            "name": "RHSA-2008:0211",
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT",
              "x_transferred"
            ],
            "url": "http://www.redhat.com/support/errata/RHSA-2008-0211.html"
          },
          {
            "name": "27705",
            "tags": [
              "vdb-entry",
              "x_refsource_BID",
              "x_transferred"
            ],
            "url": "http://www.securityfocus.com/bid/27705"
          },
          {
            "name": "RHSA-2008:0787",
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT",
              "x_transferred"
            ],
            "url": "http://www.redhat.com/support/errata/RHSA-2008-0787.html"
          },
          {
            "name": "30769",
            "tags": [
              "third-party-advisory",
              "x_refsource_SECUNIA",
              "x_transferred"
            ],
            "url": "http://secunia.com/advisories/30769"
          },
          {
            "name": "[Security-announce] 20080728 VMSA-2008-00011 Updated ESX service console packages for Samba and vmnix",
            "tags": [
              "mailing-list",
              "x_refsource_MLIST",
              "x_transferred"
            ],
            "url": "http://lists.vmware.com/pipermail/security-announce/2008/000023.html"
          },
          {
            "name": "30018",
            "tags": [
              "third-party-advisory",
              "x_refsource_SECUNIA",
              "x_transferred"
            ],
            "url": "http://secunia.com/advisories/30018"
          },
          {
            "name": "31246",
            "tags": [
              "third-party-advisory",
              "x_refsource_SECUNIA",
              "x_transferred"
            ],
            "url": "http://secunia.com/advisories/31246"
          },
          {
            "name": "29570",
            "tags": [
              "third-party-advisory",
              "x_refsource_SECUNIA",
              "x_transferred"
            ],
            "url": "http://secunia.com/advisories/29570"
          },
          {
            "name": "30112",
            "tags": [
              "third-party-advisory",
              "x_refsource_SECUNIA",
              "x_transferred"
            ],
            "url": "http://secunia.com/advisories/30112"
          }
        ],
        "title": "CVE Program Container"
      }
    ],
    "cna": {
      "affected": [
        {
          "product": "n/a",
          "vendor": "n/a",
          "versions": [
            {
              "status": "affected",
              "version": "n/a"
            }
          ]
        }
      ],
      "datePublic": "2008-02-06T00:00:00.000Z",
      "descriptions": [
        {
          "lang": "en",
          "value": "Linux kernel before 2.6.22.17, when using certain drivers that register a fault handler that does not perform range checks, allows local users to access kernel memory via an out-of-range offset."
        }
      ],
      "problemTypes": [
        {
          "descriptions": [
            {
              "description": "n/a",
              "lang": "en",
              "type": "text"
            }
          ]
        }
      ],
      "providerMetadata": {
        "dateUpdated": "2018-10-15T20:57:01.000Z",
        "orgId": "53f830b8-0a3f-465b-8143-3b8a9948e749",
        "shortName": "redhat"
      },
      "references": [
        {
          "name": "1019357",
          "tags": [
            "vdb-entry",
            "x_refsource_SECTRACK"
          ],
          "url": "http://securitytracker.com/id?1019357"
        },
        {
          "name": "20080208 rPSA-2008-0048-1 kernel",
          "tags": [
            "mailing-list",
            "x_refsource_BUGTRAQ"
          ],
          "url": "http://www.securityfocus.com/archive/1/487808/100/0/threaded"
        },
        {
          "name": "SUSE-SA:2008:017",
          "tags": [
            "vendor-advisory",
            "x_refsource_SUSE"
          ],
          "url": "http://lists.opensuse.org/opensuse-security-announce/2008-03/msg00007.html"
        },
        {
          "tags": [
            "x_refsource_CONFIRM"
          ],
          "url": "http://www.kernel.org/pub/linux/kernel/v2.6/ChangeLog-2.6.22.17"
        },
        {
          "name": "27686",
          "tags": [
            "vdb-entry",
            "x_refsource_BID"
          ],
          "url": "http://www.securityfocus.com/bid/27686"
        },
        {
          "name": "28806",
          "tags": [
            "third-party-advisory",
            "x_refsource_SECUNIA"
          ],
          "url": "http://secunia.com/advisories/28806"
        },
        {
          "name": "RHSA-2008:0237",
          "tags": [
            "vendor-advisory",
            "x_refsource_REDHAT"
          ],
          "url": "http://www.redhat.com/support/errata/RHSA-2008-0237.html"
        },
        {
          "name": "USN-618-1",
          "tags": [
            "vendor-advisory",
            "x_refsource_UBUNTU"
          ],
          "url": "http://www.ubuntu.com/usn/usn-618-1"
        },
        {
          "name": "28826",
          "tags": [
            "third-party-advisory",
            "x_refsource_SECUNIA"
          ],
          "url": "http://secunia.com/advisories/28826"
        },
        {
          "name": "oval:org.mitre.oval:def:9412",
          "tags": [
            "vdb-entry",
            "signature",
            "x_refsource_OVAL"
          ],
          "url": "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A9412"
        },
        {
          "tags": [
            "x_refsource_CONFIRM"
          ],
          "url": "http://www.kernel.org/pub/linux/kernel/v2.6/ChangeLog-2.6.24.1"
        },
        {
          "name": "DSA-1565",
          "tags": [
            "vendor-advisory",
            "x_refsource_DEBIAN"
          ],
          "url": "http://www.debian.org/security/2008/dsa-1565"
        },
        {
          "name": "MDVSA-2008:112",
          "tags": [
            "vendor-advisory",
            "x_refsource_MANDRIVA"
          ],
          "url": "http://www.mandriva.com/security/advisories?name=MDVSA-2008:112"
        },
        {
          "name": "DSA-1504",
          "tags": [
            "vendor-advisory",
            "x_refsource_DEBIAN"
          ],
          "url": "http://www.debian.org/security/2008/dsa-1504"
        },
        {
          "name": "30116",
          "tags": [
            "third-party-advisory",
            "x_refsource_SECUNIA"
          ],
          "url": "http://secunia.com/advisories/30116"
        },
        {
          "tags": [
            "x_refsource_CONFIRM"
          ],
          "url": "http://wiki.rpath.com/wiki/Advisories:rPSA-2008-0048"
        },
        {
          "name": "RHSA-2008:0233",
          "tags": [
            "vendor-advisory",
            "x_refsource_REDHAT"
          ],
          "url": "http://www.redhat.com/support/errata/RHSA-2008-0233.html"
        },
        {
          "name": "[linux-kernel] 20080206 [patch 60/73] vm audit: add VM_DONTEXPAND to mmap for drivers that need it (CVE-2008-0007)",
          "tags": [
            "mailing-list",
            "x_refsource_MLIST"
          ],
          "url": "http://lkml.org/lkml/2008/2/6/457"
        },
        {
          "name": "30110",
          "tags": [
            "third-party-advisory",
            "x_refsource_SECUNIA"
          ],
          "url": "http://secunia.com/advisories/30110"
        },
        {
          "name": "ADV-2008-2222",
          "tags": [
            "vdb-entry",
            "x_refsource_VUPEN"
          ],
          "url": "http://www.vupen.com/english/advisories/2008/2222/references"
        },
        {
          "name": "33280",
          "tags": [
            "third-party-advisory",
            "x_refsource_SECUNIA"
          ],
          "url": "http://secunia.com/advisories/33280"
        },
        {
          "name": "MDVSA-2008:044",
          "tags": [
            "vendor-advisory",
            "x_refsource_MANDRIVA"
          ],
          "url": "http://www.mandriva.com/security/advisories?name=MDVSA-2008:044"
        },
        {
          "name": "MDVSA-2008:072",
          "tags": [
            "vendor-advisory",
            "x_refsource_MANDRIVA"
          ],
          "url": "http://www.mandriva.com/security/advisories?name=MDVSA-2008:072"
        },
        {
          "name": "MDVSA-2008:174",
          "tags": [
            "vendor-advisory",
            "x_refsource_MANDRIVA"
          ],
          "url": "http://www.mandriva.com/security/advisories?name=MDVSA-2008:174"
        },
        {
          "name": "ADV-2008-0445",
          "tags": [
            "vdb-entry",
            "x_refsource_VUPEN"
          ],
          "url": "http://www.vupen.com/english/advisories/2008/0445/references"
        },
        {
          "name": "SUSE-SA:2008:006",
          "tags": [
            "vendor-advisory",
            "x_refsource_SUSE"
          ],
          "url": "http://lists.opensuse.org/opensuse-security-announce/2008-02/msg00002.html"
        },
        {
          "name": "DSA-1503",
          "tags": [
            "vendor-advisory",
            "x_refsource_DEBIAN"
          ],
          "url": "http://www.debian.org/security/2008/dsa-1503"
        },
        {
          "name": "29058",
          "tags": [
            "third-party-advisory",
            "x_refsource_SECUNIA"
          ],
          "url": "http://secunia.com/advisories/29058"
        },
        {
          "name": "RHSA-2008:0211",
          "tags": [
            "vendor-advisory",
            "x_refsource_REDHAT"
          ],
          "url": "http://www.redhat.com/support/errata/RHSA-2008-0211.html"
        },
        {
          "name": "27705",
          "tags": [
            "vdb-entry",
            "x_refsource_BID"
          ],
          "url": "http://www.securityfocus.com/bid/27705"
        },
        {
          "name": "RHSA-2008:0787",
          "tags": [
            "vendor-advisory",
            "x_refsource_REDHAT"
          ],
          "url": "http://www.redhat.com/support/errata/RHSA-2008-0787.html"
        },
        {
          "name": "30769",
          "tags": [
            "third-party-advisory",
            "x_refsource_SECUNIA"
          ],
          "url": "http://secunia.com/advisories/30769"
        },
        {
          "name": "[Security-announce] 20080728 VMSA-2008-00011 Updated ESX service console packages for Samba and vmnix",
          "tags": [
            "mailing-list",
            "x_refsource_MLIST"
          ],
          "url": "http://lists.vmware.com/pipermail/security-announce/2008/000023.html"
        },
        {
          "name": "30018",
          "tags": [
            "third-party-advisory",
            "x_refsource_SECUNIA"
          ],
          "url": "http://secunia.com/advisories/30018"
        },
        {
          "name": "31246",
          "tags": [
            "third-party-advisory",
            "x_refsource_SECUNIA"
          ],
          "url": "http://secunia.com/advisories/31246"
        },
        {
          "name": "29570",
          "tags": [
            "third-party-advisory",
            "x_refsource_SECUNIA"
          ],
          "url": "http://secunia.com/advisories/29570"
        },
        {
          "name": "30112",
          "tags": [
            "third-party-advisory",
            "x_refsource_SECUNIA"
          ],
          "url": "http://secunia.com/advisories/30112"
        }
      ]
    }
  },
  "cveMetadata": {
    "assignerOrgId": "53f830b8-0a3f-465b-8143-3b8a9948e749",
    "assignerShortName": "redhat",
    "cveId": "CVE-2008-0007",
    "datePublished": "2008-02-08T01:00:00.000Z",
    "dateReserved": "2007-12-03T00:00:00.000Z",
    "dateUpdated": "2024-08-07T07:32:23.652Z",
    "state": "PUBLISHED"
  },
  "dataType": "CVE_RECORD",
  "dataVersion": "5.1"
}

Sightings

Author	Source	Type	Date	Other

Nomenclature

Seen: The vulnerability was mentioned, discussed, or observed by the user.
Confirmed: The vulnerability has been validated from an analyst's perspective.
Published Proof of Concept: A public proof of concept is available for this vulnerability.
Exploited: The vulnerability was observed as exploited by the user who reported the sighting.
Patched: The vulnerability was observed as successfully patched by the user who reported the sighting.
Not exploited: The vulnerability was not observed as exploited by the user who reported the sighting.
Not confirmed: The user expressed doubt about the validity of the vulnerability.
Not patched: The vulnerability was not observed as successfully patched by the user who reported the sighting.

Detection rules are retrieved from Rulezet.

The MITRE ATT&CK techniques below are AI-generated suggestions, inferred from the description of the vulnerability by the CIRCL/vulnerability-attack-technique-classification-roberta-base model, served locally by ML-Gateway. They have not been verified by an analyst and are provided for guidance only.
The approach is described in our paper Mapping CVEs to MITRE ATT&CK Techniques: A Curated Gold-Set Classifier and the Limits of LLM-Assisted Label Expansion.
Browse all ATT&CK techniques and the vulnerabilities related to each.

Related by attack behaviour

Vulnerabilities whose description is nearest to this one in the vector space of the CIRCL/vulnerability-attack-technique-biencoder model. This is a similarity search over the bi-encoder space (plain cosine), not a classification, and it has no measured accuracy.

Action not permitted

BDU:2015-03640 (CVE-2004-2731)

CVE-2007-2525 (GCVE-0-2007-2525)

CVE-2007-3848 (GCVE-0-2007-3848)

CVE-2007-4308 (GCVE-0-2007-4308)

CVE-2007-4311 (GCVE-0-2007-4311)

CVE-2007-5093 (GCVE-0-2007-5093)

CVE-2007-6063 (GCVE-0-2007-6063)

CVE-2007-6151 (GCVE-0-2007-6151)

CVE-2007-6206 (GCVE-0-2007-6206)

CVE-2007-6694 (GCVE-0-2007-6694)

CVE-2008-0007 (GCVE-0-2008-0007)

Tags

Sightings

Nomenclature

Related by attack behaviour