Vulnerability-Lookup

RHSA-2009:0001

Vulnerability from csaf_redhat - Published: 2009-01-08 15:47 - Updated: 2025-11-21 17:34

Summary

Red Hat Security Advisory: kernel security update

Severity

Important

Notes

Topic: Updated kernel packages that fix a number of security issues are now available for Red Hat Enterprise Linux 2.1 running on 32-bit architectures. This update has been rated as having important security impact by the Red Hat Security Response Team.

Details: The kernel packages contain the Linux kernel, the core of any Linux operating system. These updated packages fix the following security issues: * a flaw was found in the IPv4 forwarding base. This could allow a local, unprivileged user to cause a denial of service. (CVE-2007-2172, Important) * a flaw was found in the handling of process death signals. This allowed a local, unprivileged user to send arbitrary signals to the suid-process executed by that user. Successful exploitation of this flaw depends on the structure of the suid-program and its signal handling. (CVE-2007-3848, Important) * when accessing kernel memory locations, certain Linux kernel drivers registering a fault handler did not perform required range checks. A local, unprivileged user could use this flaw to gain read or write access to arbitrary kernel memory, or possibly cause a denial of service. (CVE-2008-0007, Important) * a possible kernel memory leak was found in the Linux kernel Simple Internet Transition (SIT) INET6 implementation. This could allow a local, unprivileged user to cause a denial of service. (CVE-2008-2136, Important) * missing capability checks were found in the SBNI WAN driver which could allow a local, unprivileged user to bypass intended capability restrictions. (CVE-2008-3525, Important) * a flaw was found in the way files were written using truncate() or ftruncate(). This could allow a local, unprivileged user to acquire the privileges of a different group and obtain access to sensitive information. (CVE-2008-4210, Important) * a race condition in the mincore system core allowed a local, unprivileged user to cause a denial of service. (CVE-2006-4814, Moderate) * a flaw was found in the aacraid SCSI driver. This allowed a local, unprivileged user to make ioctl calls to the driver which should otherwise be restricted to privileged users. (CVE-2007-4308, Moderate) * two buffer overflow flaws were found in the Integrated Services Digital Network (ISDN) subsystem. A local, unprivileged user could use these flaws to cause a denial of service. (CVE-2007-6063, CVE-2007-6151, Moderate) * a flaw was found in the way core dump files were created. If a local, unprivileged user could make a root-owned process dump a core file into a user-writable directory, the user could gain read access to that core file, potentially compromising sensitive information. (CVE-2007-6206, Moderate) * a deficiency was found in the Linux kernel virtual file system (VFS) implementation. This could allow a local, unprivileged user to attempt file creation within deleted directories, possibly causing a denial of service. (CVE-2008-3275, Moderate) All users of Red Hat Enterprise Linux 2.1 on 32-bit architectures should upgrade to these updated packages which address these vulnerabilities. For this update to take effect, the system must be rebooted.

Terms of Use: This content is licensed under the Creative Commons Attribution 4.0 International License (https://creativecommons.org/licenses/by/4.0/). If you distribute this content, or a modified version of it, you must provide attribution to Red Hat Inc. and provide a link to the original.

CVE-2006-4814

The mincore function in the Linux kernel before 2.4.33.6 does not properly lock access to user space, which has unspecified impact and attack vectors, possibly related to a deadlock.

Vendor Fix Before applying this update, make sure that all previously-released errata relevant to your system have been applied. This update is available via Red Hat Network. Details on how to use the Red Hat Network to apply this update are available at http://kbase.redhat.com/faq/docs/DOC-11259 https://access.redhat.com/errata/RHSA-2009:0001

CVE-2007-2172

A typo in Linux kernel 2.6 before 2.6.21-rc6 and 2.4 before 2.4.35 causes RTA_MAX to be used as an array size instead of RTN_MAX, which leads to an "out of bound access" by the (1) dn_fib_props (dn_fib.c, DECNet) and (2) fib_props (fib_semantics.c, IPv4) functions.

CVE-2007-3848

Linux kernel 2.4.35 and other versions allows local users to send arbitrary signals to a child process that is running at higher privileges by causing a setuid-root parent process to die, which delivers an attacker-controlled parent process death signal (PR_SET_PDEATHSIG).

CVE-2007-4308

The (1) aac_cfg_open and (2) aac_compat_ioctl functions in the SCSI layer ioctl path in aacraid in the Linux kernel before 2.6.23-rc2 do not check permissions for ioctls, which might allow local users to cause a denial of service or gain privileges.

CVE-2007-6063

Buffer overflow in the isdn_net_setcfg function in isdn_net.c in Linux kernel 2.6.23 allows local users to have an unknown impact via a crafted argument to the isdn_ioctl function.

CVE-2007-6151

The isdn_ioctl function in isdn_common.c in Linux kernel 2.6.23 allows local users to cause a denial of service via a crafted ioctl struct in which iocts is not null terminated, which triggers a buffer overflow.

CVE-2007-6206

The do_coredump function in fs/exec.c in Linux kernel 2.4.x and 2.6.x up to 2.6.24-rc3, and possibly other versions, does not change the UID of a core dump file if it exists before a root process creates a core dump in the same location, which might allow local users to obtain sensitive information.

CVE-2008-0007

Linux kernel before 2.6.22.17, when using certain drivers that register a fault handler that does not perform range checks, allows local users to access kernel memory via an out-of-range offset.

CVE-2008-2136

Memory leak in the ipip6_rcv function in net/ipv6/sit.c in the Linux kernel 2.4 before 2.4.36.5 and 2.6 before 2.6.25.3 allows remote attackers to cause a denial of service (memory consumption) via network traffic to a Simple Internet Transition (SIT) tunnel interface, related to the pskb_may_pull and kfree_skb functions, and management of an skb reference count.

CWE-401 - Missing Release of Memory after Effective Lifetime

CVE-2008-3275

The (1) real_lookup and (2) __lookup_hash functions in fs/namei.c in the vfs implementation in the Linux kernel before 2.6.25.15 do not prevent creation of a child dentry for a deleted (aka S_DEAD) directory, which allows local users to cause a denial of service ("overflow" of the UBIFS orphan area) via a series of attempted file creations within deleted directories.

CVE-2008-3525

The sbni_ioctl function in drivers/net/wan/sbni.c in the wan subsystem in the Linux kernel 2.6.26.3 does not check for the CAP_NET_ADMIN capability before processing a (1) SIOCDEVRESINSTATS, (2) SIOCDEVSHWSTATE, (3) SIOCDEVENSLAVE, or (4) SIOCDEVEMANSIPATE ioctl request, which allows local users to bypass intended capability restrictions.

CVE-2008-4210

fs/open.c in the Linux kernel before 2.6.22 does not properly strip setuid and setgid bits when there is a write to a file, which allows local users to gain the privileges of a different group, and obtain sensitive information or possibly have unspecified other impact, by creating an executable file in a setgid directory through the (1) truncate or (2) ftruncate function in conjunction with memory-mapped I/O.

References

URL

Category

	https://access.redhat.com/errata/RHSA-2009:0001	self
	https://bugzilla.redhat.com/show_bug.cgi?id=250429	external
	https://access.redhat.com/security/updates/classi…	external
	https://bugzilla.redhat.com/show_bug.cgi?id=250972	external
	https://bugzilla.redhat.com/show_bug.cgi?id=252309	external
	https://bugzilla.redhat.com/show_bug.cgi?id=306971	external
	https://bugzilla.redhat.com/show_bug.cgi?id=392101	external
	https://bugzilla.redhat.com/show_bug.cgi?id=396861	external
	https://bugzilla.redhat.com/show_bug.cgi?id=425111	external
	https://bugzilla.redhat.com/show_bug.cgi?id=428961	external
	https://bugzilla.redhat.com/show_bug.cgi?id=446031	external
	https://bugzilla.redhat.com/show_bug.cgi?id=457858	external
	https://bugzilla.redhat.com/show_bug.cgi?id=460401	external
	https://bugzilla.redhat.com/show_bug.cgi?id=463661	external
	https://security.access.redhat.com/data/csaf/v2/a…	self
	https://access.redhat.com/security/cve/CVE-2006-4814	self
	https://bugzilla.redhat.com/show_bug.cgi?id=306971	external
	https://www.cve.org/CVERecord?id=CVE-2006-4814	external
	https://nvd.nist.gov/vuln/detail/CVE-2006-4814	external
	https://access.redhat.com/security/cve/CVE-2007-2172	self
	https://bugzilla.redhat.com/show_bug.cgi?id=250429	external
	https://www.cve.org/CVERecord?id=CVE-2007-2172	external
	https://nvd.nist.gov/vuln/detail/CVE-2007-2172	external
	https://access.redhat.com/security/cve/CVE-2007-3848	self
	https://bugzilla.redhat.com/show_bug.cgi?id=250972	external
	https://www.cve.org/CVERecord?id=CVE-2007-3848	external
	https://nvd.nist.gov/vuln/detail/CVE-2007-3848	external
	https://access.redhat.com/security/cve/CVE-2007-4308	self
	https://bugzilla.redhat.com/show_bug.cgi?id=252309	external
	https://www.cve.org/CVERecord?id=CVE-2007-4308	external
	https://nvd.nist.gov/vuln/detail/CVE-2007-4308	external
	https://access.redhat.com/security/cve/CVE-2007-6063	self
	https://bugzilla.redhat.com/show_bug.cgi?id=392101	external
	https://www.cve.org/CVERecord?id=CVE-2007-6063	external
	https://nvd.nist.gov/vuln/detail/CVE-2007-6063	external
	https://access.redhat.com/security/cve/CVE-2007-6151	self
	https://bugzilla.redhat.com/show_bug.cgi?id=425111	external
	https://www.cve.org/CVERecord?id=CVE-2007-6151	external
	https://nvd.nist.gov/vuln/detail/CVE-2007-6151	external
	https://access.redhat.com/security/cve/CVE-2007-6206	self
	https://bugzilla.redhat.com/show_bug.cgi?id=396861	external
	https://www.cve.org/CVERecord?id=CVE-2007-6206	external
	https://nvd.nist.gov/vuln/detail/CVE-2007-6206	external
	https://access.redhat.com/security/cve/CVE-2008-0007	self
	https://bugzilla.redhat.com/show_bug.cgi?id=428961	external
	https://www.cve.org/CVERecord?id=CVE-2008-0007	external
	https://nvd.nist.gov/vuln/detail/CVE-2008-0007	external
	https://access.redhat.com/security/cve/CVE-2008-2136	self
	https://bugzilla.redhat.com/show_bug.cgi?id=446031	external
	https://www.cve.org/CVERecord?id=CVE-2008-2136	external
	https://nvd.nist.gov/vuln/detail/CVE-2008-2136	external
	https://access.redhat.com/security/cve/CVE-2008-3275	self
	https://bugzilla.redhat.com/show_bug.cgi?id=457858	external
	https://www.cve.org/CVERecord?id=CVE-2008-3275	external
	https://nvd.nist.gov/vuln/detail/CVE-2008-3275	external
	https://access.redhat.com/security/cve/CVE-2008-3525	self
	https://bugzilla.redhat.com/show_bug.cgi?id=460401	external
	https://www.cve.org/CVERecord?id=CVE-2008-3525	external
	https://nvd.nist.gov/vuln/detail/CVE-2008-3525	external
	https://access.redhat.com/security/cve/CVE-2008-4210	self
	https://bugzilla.redhat.com/show_bug.cgi?id=463661	external
	https://www.cve.org/CVERecord?id=CVE-2008-4210	external
	https://nvd.nist.gov/vuln/detail/CVE-2008-4210	external

Acknowledgments

Nick Piggin

JSON

To clipboard

{
  "document": {
    "aggregate_severity": {
      "namespace": "https://access.redhat.com/security/updates/classification/",
      "text": "Important"
    },
    "category": "csaf_security_advisory",
    "csaf_version": "2.0",
    "distribution": {
      "text": "Copyright \u00a9 Red Hat, Inc. All rights reserved.",
      "tlp": {
        "label": "WHITE",
        "url": "https://www.first.org/tlp/"
      }
    },
    "lang": "en",
    "notes": [
      {
        "category": "summary",
        "text": "Updated kernel packages that fix a number of security issues are now\navailable for Red Hat Enterprise Linux 2.1 running on 32-bit architectures.\n\nThis update has been rated as having important security impact by the Red\nHat Security Response Team.",
        "title": "Topic"
      },
      {
        "category": "general",
        "text": "The kernel packages contain the Linux kernel, the core of any Linux\noperating system.\n\nThese updated packages fix the following security issues:\n\n* a flaw was found in the IPv4 forwarding base. This could allow a local,\nunprivileged user to cause a denial of service. (CVE-2007-2172,\nImportant)\n\n* a flaw was found in the handling of process death signals. This allowed a\nlocal, unprivileged user to send arbitrary signals to the suid-process\nexecuted by that user. Successful exploitation of this flaw depends on the\nstructure of the suid-program and its signal handling. (CVE-2007-3848,\nImportant)\n\n* when accessing kernel memory locations, certain Linux kernel drivers\nregistering a fault handler did not perform required range checks. A local,\nunprivileged user could use this flaw to gain read or write access to\narbitrary kernel memory, or possibly cause a denial of service.\n(CVE-2008-0007, Important)\n\n* a possible kernel memory leak was found in the Linux kernel Simple\nInternet Transition (SIT) INET6 implementation. This could allow a local,\nunprivileged user to cause a denial of service. (CVE-2008-2136, Important)\n\n* missing capability checks were found in the SBNI WAN driver which could\nallow a local, unprivileged user to bypass intended capability\nrestrictions. (CVE-2008-3525, Important)\n\n* a flaw was found in the way files were written using truncate() or\nftruncate(). This could allow a local, unprivileged user to acquire the\nprivileges of a different group and obtain access to sensitive information.\n(CVE-2008-4210, Important)\n\n* a race condition in the mincore system core allowed a local, unprivileged\nuser to cause a denial of service. (CVE-2006-4814, Moderate)\n\n* a flaw was found in the aacraid SCSI driver. This allowed a local,\nunprivileged user to make ioctl calls to the driver which should otherwise\nbe restricted to privileged users. (CVE-2007-4308, Moderate)\n\n* two buffer overflow flaws were found in the Integrated Services Digital\nNetwork (ISDN) subsystem. A local, unprivileged user could use these flaws\nto cause a denial of service. (CVE-2007-6063, CVE-2007-6151, Moderate)\n\n* a flaw was found in the way core dump files were created. If a local,\nunprivileged user could make a root-owned process dump a core file into a\nuser-writable directory, the user could gain read access to that core file,\npotentially compromising sensitive information. (CVE-2007-6206, Moderate)\n\n* a deficiency was found in the Linux kernel virtual file system (VFS)\nimplementation. This could allow a local, unprivileged user to attempt file\ncreation within deleted directories, possibly causing a denial of service.\n(CVE-2008-3275, Moderate)\n\nAll users of Red Hat Enterprise Linux 2.1 on 32-bit architectures should\nupgrade to these updated packages which address these vulnerabilities. For\nthis update to take effect, the system must be rebooted.",
        "title": "Details"
      },
      {
        "category": "legal_disclaimer",
        "text": "This content is licensed under the Creative Commons Attribution 4.0 International License (https://creativecommons.org/licenses/by/4.0/). If you distribute this content, or a modified version of it, you must provide attribution to Red Hat Inc. and provide a link to the original.",
        "title": "Terms of Use"
      }
    ],
    "publisher": {
      "category": "vendor",
      "contact_details": "https://access.redhat.com/security/team/contact/",
      "issuing_authority": "Red Hat Product Security is responsible for vulnerability handling across all Red Hat products and services.",
      "name": "Red Hat Product Security",
      "namespace": "https://www.redhat.com"
    },
    "references": [
      {
        "category": "self",
        "summary": "https://access.redhat.com/errata/RHSA-2009:0001",
        "url": "https://access.redhat.com/errata/RHSA-2009:0001"
      },
      {
        "category": "external",
        "summary": "250429",
        "url": "https://bugzilla.redhat.com/show_bug.cgi?id=250429"
      },
      {
        "category": "external",
        "summary": "https://access.redhat.com/security/updates/classification/#important",
        "url": "https://access.redhat.com/security/updates/classification/#important"
      },
      {
        "category": "external",
        "summary": "250972",
        "url": "https://bugzilla.redhat.com/show_bug.cgi?id=250972"
      },
      {
        "category": "external",
        "summary": "252309",
        "url": "https://bugzilla.redhat.com/show_bug.cgi?id=252309"
      },
      {
        "category": "external",
        "summary": "306971",
        "url": "https://bugzilla.redhat.com/show_bug.cgi?id=306971"
      },
      {
        "category": "external",
        "summary": "392101",
        "url": "https://bugzilla.redhat.com/show_bug.cgi?id=392101"
      },
      {
        "category": "external",
        "summary": "396861",
        "url": "https://bugzilla.redhat.com/show_bug.cgi?id=396861"
      },
      {
        "category": "external",
        "summary": "425111",
        "url": "https://bugzilla.redhat.com/show_bug.cgi?id=425111"
      },
      {
        "category": "external",
        "summary": "428961",
        "url": "https://bugzilla.redhat.com/show_bug.cgi?id=428961"
      },
      {
        "category": "external",
        "summary": "446031",
        "url": "https://bugzilla.redhat.com/show_bug.cgi?id=446031"
      },
      {
        "category": "external",
        "summary": "457858",
        "url": "https://bugzilla.redhat.com/show_bug.cgi?id=457858"
      },
      {
        "category": "external",
        "summary": "460401",
        "url": "https://bugzilla.redhat.com/show_bug.cgi?id=460401"
      },
      {
        "category": "external",
        "summary": "463661",
        "url": "https://bugzilla.redhat.com/show_bug.cgi?id=463661"
      },
      {
        "category": "self",
        "summary": "Canonical URL",
        "url": "https://security.access.redhat.com/data/csaf/v2/advisories/2009/rhsa-2009_0001.json"
      }
    ],
    "title": "Red Hat Security Advisory: kernel security update",
    "tracking": {
      "current_release_date": "2025-11-21T17:34:05+00:00",
      "generator": {
        "date": "2025-11-21T17:34:05+00:00",
        "engine": {
          "name": "Red Hat SDEngine",
          "version": "4.6.12"
        }
      },
      "id": "RHSA-2009:0001",
      "initial_release_date": "2009-01-08T15:47:00+00:00",
      "revision_history": [
        {
          "date": "2009-01-08T15:47:00+00:00",
          "number": "1",
          "summary": "Initial version"
        },
        {
          "date": "2009-01-08T10:47:52+00:00",
          "number": "2",
          "summary": "Last updated version"
        },
        {
          "date": "2025-11-21T17:34:05+00:00",
          "number": "3",
          "summary": "Last generated version"
        }
      ],
      "status": "final",
      "version": "3"
    }
  },
  "product_tree": {
    "branches": [
      {
        "branches": [
          {
            "branches": [
              {
                "category": "product_name",
                "name": "Red Hat Enterprise Linux AS (Advanced Server) version 2.1 ",
                "product": {
                  "name": "Red Hat Enterprise Linux AS (Advanced Server) version 2.1 ",
                  "product_id": "2.1AS",
                  "product_identification_helper": {
                    "cpe": "cpe:/o:redhat:enterprise_linux:2.1::as"
                  }
                }
              },
              {
                "category": "product_name",
                "name": "Red Hat Enterprise Linux ES version 2.1",
                "product": {
                  "name": "Red Hat Enterprise Linux ES version 2.1",
                  "product_id": "2.1ES",
                  "product_identification_helper": {
                    "cpe": "cpe:/o:redhat:enterprise_linux:2.1::es"
                  }
                }
              },
              {
                "category": "product_name",
                "name": "Red Hat Enterprise Linux WS version 2.1",
                "product": {
                  "name": "Red Hat Enterprise Linux WS version 2.1",
                  "product_id": "2.1WS",
                  "product_identification_helper": {
                    "cpe": "cpe:/o:redhat:enterprise_linux:2.1::ws"
                  }
                }
              }
            ],
            "category": "product_family",
            "name": "Red Hat Enterprise Linux"
          },
          {
            "branches": [
              {
                "category": "product_version",
                "name": "kernel-headers-0:2.4.9-e.74.i386",
                "product": {
                  "name": "kernel-headers-0:2.4.9-e.74.i386",
                  "product_id": "kernel-headers-0:2.4.9-e.74.i386",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/kernel-headers@2.4.9-e.74?arch=i386"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "kernel-source-0:2.4.9-e.74.i386",
                "product": {
                  "name": "kernel-source-0:2.4.9-e.74.i386",
                  "product_id": "kernel-source-0:2.4.9-e.74.i386",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/kernel-source@2.4.9-e.74?arch=i386"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "kernel-doc-0:2.4.9-e.74.i386",
                "product": {
                  "name": "kernel-doc-0:2.4.9-e.74.i386",
                  "product_id": "kernel-doc-0:2.4.9-e.74.i386",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/kernel-doc@2.4.9-e.74?arch=i386"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "kernel-BOOT-0:2.4.9-e.74.i386",
                "product": {
                  "name": "kernel-BOOT-0:2.4.9-e.74.i386",
                  "product_id": "kernel-BOOT-0:2.4.9-e.74.i386",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/kernel-BOOT@2.4.9-e.74?arch=i386"
                  }
                }
              }
            ],
            "category": "architecture",
            "name": "i386"
          },
          {
            "branches": [
              {
                "category": "product_version",
                "name": "kernel-smp-0:2.4.9-e.74.i686",
                "product": {
                  "name": "kernel-smp-0:2.4.9-e.74.i686",
                  "product_id": "kernel-smp-0:2.4.9-e.74.i686",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/kernel-smp@2.4.9-e.74?arch=i686"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "kernel-0:2.4.9-e.74.i686",
                "product": {
                  "name": "kernel-0:2.4.9-e.74.i686",
                  "product_id": "kernel-0:2.4.9-e.74.i686",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/kernel@2.4.9-e.74?arch=i686"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "kernel-debug-0:2.4.9-e.74.i686",
                "product": {
                  "name": "kernel-debug-0:2.4.9-e.74.i686",
                  "product_id": "kernel-debug-0:2.4.9-e.74.i686",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/kernel-debug@2.4.9-e.74?arch=i686"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "kernel-enterprise-0:2.4.9-e.74.i686",
                "product": {
                  "name": "kernel-enterprise-0:2.4.9-e.74.i686",
                  "product_id": "kernel-enterprise-0:2.4.9-e.74.i686",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/kernel-enterprise@2.4.9-e.74?arch=i686"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "kernel-summit-0:2.4.9-e.74.i686",
                "product": {
                  "name": "kernel-summit-0:2.4.9-e.74.i686",
                  "product_id": "kernel-summit-0:2.4.9-e.74.i686",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/kernel-summit@2.4.9-e.74?arch=i686"
                  }
                }
              }
            ],
            "category": "architecture",
            "name": "i686"
          },
          {
            "branches": [
              {
                "category": "product_version",
                "name": "kernel-smp-0:2.4.9-e.74.athlon",
                "product": {
                  "name": "kernel-smp-0:2.4.9-e.74.athlon",
                  "product_id": "kernel-smp-0:2.4.9-e.74.athlon",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/kernel-smp@2.4.9-e.74?arch=athlon"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "kernel-0:2.4.9-e.74.athlon",
                "product": {
                  "name": "kernel-0:2.4.9-e.74.athlon",
                  "product_id": "kernel-0:2.4.9-e.74.athlon",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/kernel@2.4.9-e.74?arch=athlon"
                  }
                }
              }
            ],
            "category": "architecture",
            "name": "athlon"
          },
          {
            "branches": [
              {
                "category": "product_version",
                "name": "kernel-0:2.4.9-e.74.src",
                "product": {
                  "name": "kernel-0:2.4.9-e.74.src",
                  "product_id": "kernel-0:2.4.9-e.74.src",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/kernel@2.4.9-e.74?arch=src"
                  }
                }
              }
            ],
            "category": "architecture",
            "name": "src"
          }
        ],
        "category": "vendor",
        "name": "Red Hat"
      }
    ],
    "relationships": [
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "kernel-0:2.4.9-e.74.athlon as a component of Red Hat Enterprise Linux AS (Advanced Server) version 2.1 ",
          "product_id": "2.1AS:kernel-0:2.4.9-e.74.athlon"
        },
        "product_reference": "kernel-0:2.4.9-e.74.athlon",
        "relates_to_product_reference": "2.1AS"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "kernel-0:2.4.9-e.74.i686 as a component of Red Hat Enterprise Linux AS (Advanced Server) version 2.1 ",
          "product_id": "2.1AS:kernel-0:2.4.9-e.74.i686"
        },
        "product_reference": "kernel-0:2.4.9-e.74.i686",
        "relates_to_product_reference": "2.1AS"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "kernel-0:2.4.9-e.74.src as a component of Red Hat Enterprise Linux AS (Advanced Server) version 2.1 ",
          "product_id": "2.1AS:kernel-0:2.4.9-e.74.src"
        },
        "product_reference": "kernel-0:2.4.9-e.74.src",
        "relates_to_product_reference": "2.1AS"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "kernel-BOOT-0:2.4.9-e.74.i386 as a component of Red Hat Enterprise Linux AS (Advanced Server) version 2.1 ",
          "product_id": "2.1AS:kernel-BOOT-0:2.4.9-e.74.i386"
        },
        "product_reference": "kernel-BOOT-0:2.4.9-e.74.i386",
        "relates_to_product_reference": "2.1AS"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "kernel-debug-0:2.4.9-e.74.i686 as a component of Red Hat Enterprise Linux AS (Advanced Server) version 2.1 ",
          "product_id": "2.1AS:kernel-debug-0:2.4.9-e.74.i686"
        },
        "product_reference": "kernel-debug-0:2.4.9-e.74.i686",
        "relates_to_product_reference": "2.1AS"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "kernel-doc-0:2.4.9-e.74.i386 as a component of Red Hat Enterprise Linux AS (Advanced Server) version 2.1 ",
          "product_id": "2.1AS:kernel-doc-0:2.4.9-e.74.i386"
        },
        "product_reference": "kernel-doc-0:2.4.9-e.74.i386",
        "relates_to_product_reference": "2.1AS"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "kernel-enterprise-0:2.4.9-e.74.i686 as a component of Red Hat Enterprise Linux AS (Advanced Server) version 2.1 ",
          "product_id": "2.1AS:kernel-enterprise-0:2.4.9-e.74.i686"
        },
        "product_reference": "kernel-enterprise-0:2.4.9-e.74.i686",
        "relates_to_product_reference": "2.1AS"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "kernel-headers-0:2.4.9-e.74.i386 as a component of Red Hat Enterprise Linux AS (Advanced Server) version 2.1 ",
          "product_id": "2.1AS:kernel-headers-0:2.4.9-e.74.i386"
        },
        "product_reference": "kernel-headers-0:2.4.9-e.74.i386",
        "relates_to_product_reference": "2.1AS"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "kernel-smp-0:2.4.9-e.74.athlon as a component of Red Hat Enterprise Linux AS (Advanced Server) version 2.1 ",
          "product_id": "2.1AS:kernel-smp-0:2.4.9-e.74.athlon"
        },
        "product_reference": "kernel-smp-0:2.4.9-e.74.athlon",
        "relates_to_product_reference": "2.1AS"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "kernel-smp-0:2.4.9-e.74.i686 as a component of Red Hat Enterprise Linux AS (Advanced Server) version 2.1 ",
          "product_id": "2.1AS:kernel-smp-0:2.4.9-e.74.i686"
        },
        "product_reference": "kernel-smp-0:2.4.9-e.74.i686",
        "relates_to_product_reference": "2.1AS"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "kernel-source-0:2.4.9-e.74.i386 as a component of Red Hat Enterprise Linux AS (Advanced Server) version 2.1 ",
          "product_id": "2.1AS:kernel-source-0:2.4.9-e.74.i386"
        },
        "product_reference": "kernel-source-0:2.4.9-e.74.i386",
        "relates_to_product_reference": "2.1AS"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "kernel-summit-0:2.4.9-e.74.i686 as a component of Red Hat Enterprise Linux AS (Advanced Server) version 2.1 ",
          "product_id": "2.1AS:kernel-summit-0:2.4.9-e.74.i686"
        },
        "product_reference": "kernel-summit-0:2.4.9-e.74.i686",
        "relates_to_product_reference": "2.1AS"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "kernel-0:2.4.9-e.74.athlon as a component of Red Hat Enterprise Linux ES version 2.1",
          "product_id": "2.1ES:kernel-0:2.4.9-e.74.athlon"
        },
        "product_reference": "kernel-0:2.4.9-e.74.athlon",
        "relates_to_product_reference": "2.1ES"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "kernel-0:2.4.9-e.74.i686 as a component of Red Hat Enterprise Linux ES version 2.1",
          "product_id": "2.1ES:kernel-0:2.4.9-e.74.i686"
        },
        "product_reference": "kernel-0:2.4.9-e.74.i686",
        "relates_to_product_reference": "2.1ES"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "kernel-0:2.4.9-e.74.src as a component of Red Hat Enterprise Linux ES version 2.1",
          "product_id": "2.1ES:kernel-0:2.4.9-e.74.src"
        },
        "product_reference": "kernel-0:2.4.9-e.74.src",
        "relates_to_product_reference": "2.1ES"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "kernel-BOOT-0:2.4.9-e.74.i386 as a component of Red Hat Enterprise Linux ES version 2.1",
          "product_id": "2.1ES:kernel-BOOT-0:2.4.9-e.74.i386"
        },
        "product_reference": "kernel-BOOT-0:2.4.9-e.74.i386",
        "relates_to_product_reference": "2.1ES"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "kernel-debug-0:2.4.9-e.74.i686 as a component of Red Hat Enterprise Linux ES version 2.1",
          "product_id": "2.1ES:kernel-debug-0:2.4.9-e.74.i686"
        },
        "product_reference": "kernel-debug-0:2.4.9-e.74.i686",
        "relates_to_product_reference": "2.1ES"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "kernel-doc-0:2.4.9-e.74.i386 as a component of Red Hat Enterprise Linux ES version 2.1",
          "product_id": "2.1ES:kernel-doc-0:2.4.9-e.74.i386"
        },
        "product_reference": "kernel-doc-0:2.4.9-e.74.i386",
        "relates_to_product_reference": "2.1ES"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "kernel-enterprise-0:2.4.9-e.74.i686 as a component of Red Hat Enterprise Linux ES version 2.1",
          "product_id": "2.1ES:kernel-enterprise-0:2.4.9-e.74.i686"
        },
        "product_reference": "kernel-enterprise-0:2.4.9-e.74.i686",
        "relates_to_product_reference": "2.1ES"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "kernel-headers-0:2.4.9-e.74.i386 as a component of Red Hat Enterprise Linux ES version 2.1",
          "product_id": "2.1ES:kernel-headers-0:2.4.9-e.74.i386"
        },
        "product_reference": "kernel-headers-0:2.4.9-e.74.i386",
        "relates_to_product_reference": "2.1ES"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "kernel-smp-0:2.4.9-e.74.athlon as a component of Red Hat Enterprise Linux ES version 2.1",
          "product_id": "2.1ES:kernel-smp-0:2.4.9-e.74.athlon"
        },
        "product_reference": "kernel-smp-0:2.4.9-e.74.athlon",
        "relates_to_product_reference": "2.1ES"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "kernel-smp-0:2.4.9-e.74.i686 as a component of Red Hat Enterprise Linux ES version 2.1",
          "product_id": "2.1ES:kernel-smp-0:2.4.9-e.74.i686"
        },
        "product_reference": "kernel-smp-0:2.4.9-e.74.i686",
        "relates_to_product_reference": "2.1ES"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "kernel-source-0:2.4.9-e.74.i386 as a component of Red Hat Enterprise Linux ES version 2.1",
          "product_id": "2.1ES:kernel-source-0:2.4.9-e.74.i386"
        },
        "product_reference": "kernel-source-0:2.4.9-e.74.i386",
        "relates_to_product_reference": "2.1ES"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "kernel-summit-0:2.4.9-e.74.i686 as a component of Red Hat Enterprise Linux ES version 2.1",
          "product_id": "2.1ES:kernel-summit-0:2.4.9-e.74.i686"
        },
        "product_reference": "kernel-summit-0:2.4.9-e.74.i686",
        "relates_to_product_reference": "2.1ES"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "kernel-0:2.4.9-e.74.athlon as a component of Red Hat Enterprise Linux WS version 2.1",
          "product_id": "2.1WS:kernel-0:2.4.9-e.74.athlon"
        },
        "product_reference": "kernel-0:2.4.9-e.74.athlon",
        "relates_to_product_reference": "2.1WS"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "kernel-0:2.4.9-e.74.i686 as a component of Red Hat Enterprise Linux WS version 2.1",
          "product_id": "2.1WS:kernel-0:2.4.9-e.74.i686"
        },
        "product_reference": "kernel-0:2.4.9-e.74.i686",
        "relates_to_product_reference": "2.1WS"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "kernel-0:2.4.9-e.74.src as a component of Red Hat Enterprise Linux WS version 2.1",
          "product_id": "2.1WS:kernel-0:2.4.9-e.74.src"
        },
        "product_reference": "kernel-0:2.4.9-e.74.src",
        "relates_to_product_reference": "2.1WS"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "kernel-BOOT-0:2.4.9-e.74.i386 as a component of Red Hat Enterprise Linux WS version 2.1",
          "product_id": "2.1WS:kernel-BOOT-0:2.4.9-e.74.i386"
        },
        "product_reference": "kernel-BOOT-0:2.4.9-e.74.i386",
        "relates_to_product_reference": "2.1WS"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "kernel-debug-0:2.4.9-e.74.i686 as a component of Red Hat Enterprise Linux WS version 2.1",
          "product_id": "2.1WS:kernel-debug-0:2.4.9-e.74.i686"
        },
        "product_reference": "kernel-debug-0:2.4.9-e.74.i686",
        "relates_to_product_reference": "2.1WS"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "kernel-doc-0:2.4.9-e.74.i386 as a component of Red Hat Enterprise Linux WS version 2.1",
          "product_id": "2.1WS:kernel-doc-0:2.4.9-e.74.i386"
        },
        "product_reference": "kernel-doc-0:2.4.9-e.74.i386",
        "relates_to_product_reference": "2.1WS"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "kernel-enterprise-0:2.4.9-e.74.i686 as a component of Red Hat Enterprise Linux WS version 2.1",
          "product_id": "2.1WS:kernel-enterprise-0:2.4.9-e.74.i686"
        },
        "product_reference": "kernel-enterprise-0:2.4.9-e.74.i686",
        "relates_to_product_reference": "2.1WS"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "kernel-headers-0:2.4.9-e.74.i386 as a component of Red Hat Enterprise Linux WS version 2.1",
          "product_id": "2.1WS:kernel-headers-0:2.4.9-e.74.i386"
        },
        "product_reference": "kernel-headers-0:2.4.9-e.74.i386",
        "relates_to_product_reference": "2.1WS"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "kernel-smp-0:2.4.9-e.74.athlon as a component of Red Hat Enterprise Linux WS version 2.1",
          "product_id": "2.1WS:kernel-smp-0:2.4.9-e.74.athlon"
        },
        "product_reference": "kernel-smp-0:2.4.9-e.74.athlon",
        "relates_to_product_reference": "2.1WS"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "kernel-smp-0:2.4.9-e.74.i686 as a component of Red Hat Enterprise Linux WS version 2.1",
          "product_id": "2.1WS:kernel-smp-0:2.4.9-e.74.i686"
        },
        "product_reference": "kernel-smp-0:2.4.9-e.74.i686",
        "relates_to_product_reference": "2.1WS"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "kernel-source-0:2.4.9-e.74.i386 as a component of Red Hat Enterprise Linux WS version 2.1",
          "product_id": "2.1WS:kernel-source-0:2.4.9-e.74.i386"
        },
        "product_reference": "kernel-source-0:2.4.9-e.74.i386",
        "relates_to_product_reference": "2.1WS"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "kernel-summit-0:2.4.9-e.74.i686 as a component of Red Hat Enterprise Linux WS version 2.1",
          "product_id": "2.1WS:kernel-summit-0:2.4.9-e.74.i686"
        },
        "product_reference": "kernel-summit-0:2.4.9-e.74.i686",
        "relates_to_product_reference": "2.1WS"
      }
    ]
  },
  "vulnerabilities": [
    {
      "cve": "CVE-2006-4814",
      "discovery_date": "2006-02-09T00:00:00+00:00",
      "ids": [
        {
          "system_name": "Red Hat Bugzilla ID",
          "text": "306971"
        }
      ],
      "notes": [
        {
          "category": "description",
          "text": "The mincore function in the Linux kernel before 2.4.33.6 does not properly lock access to user space, which has unspecified impact and attack vectors, possibly related to a deadlock.",
          "title": "Vulnerability description"
        },
        {
          "category": "summary",
          "text": "kernel Race condition in mincore can cause \"ps -ef\" to hang",
          "title": "Vulnerability summary"
        },
        {
          "category": "other",
          "text": "Red Hat Enterprise Linux 5 is not vulnerable to this issue as it contains a backported patch.",
          "title": "Statement"
        }
      ],
      "product_status": {
        "fixed": [
          "2.1AS:kernel-0:2.4.9-e.74.athlon",
          "2.1AS:kernel-0:2.4.9-e.74.i686",
          "2.1AS:kernel-0:2.4.9-e.74.src",
          "2.1AS:kernel-BOOT-0:2.4.9-e.74.i386",
          "2.1AS:kernel-debug-0:2.4.9-e.74.i686",
          "2.1AS:kernel-doc-0:2.4.9-e.74.i386",
          "2.1AS:kernel-enterprise-0:2.4.9-e.74.i686",
          "2.1AS:kernel-headers-0:2.4.9-e.74.i386",
          "2.1AS:kernel-smp-0:2.4.9-e.74.athlon",
          "2.1AS:kernel-smp-0:2.4.9-e.74.i686",
          "2.1AS:kernel-source-0:2.4.9-e.74.i386",
          "2.1AS:kernel-summit-0:2.4.9-e.74.i686",
          "2.1ES:kernel-0:2.4.9-e.74.athlon",
          "2.1ES:kernel-0:2.4.9-e.74.i686",
          "2.1ES:kernel-0:2.4.9-e.74.src",
          "2.1ES:kernel-BOOT-0:2.4.9-e.74.i386",
          "2.1ES:kernel-debug-0:2.4.9-e.74.i686",
          "2.1ES:kernel-doc-0:2.4.9-e.74.i386",
          "2.1ES:kernel-enterprise-0:2.4.9-e.74.i686",
          "2.1ES:kernel-headers-0:2.4.9-e.74.i386",
          "2.1ES:kernel-smp-0:2.4.9-e.74.athlon",
          "2.1ES:kernel-smp-0:2.4.9-e.74.i686",
          "2.1ES:kernel-source-0:2.4.9-e.74.i386",
          "2.1ES:kernel-summit-0:2.4.9-e.74.i686",
          "2.1WS:kernel-0:2.4.9-e.74.athlon",
          "2.1WS:kernel-0:2.4.9-e.74.i686",
          "2.1WS:kernel-0:2.4.9-e.74.src",
          "2.1WS:kernel-BOOT-0:2.4.9-e.74.i386",
          "2.1WS:kernel-debug-0:2.4.9-e.74.i686",
          "2.1WS:kernel-doc-0:2.4.9-e.74.i386",
          "2.1WS:kernel-enterprise-0:2.4.9-e.74.i686",
          "2.1WS:kernel-headers-0:2.4.9-e.74.i386",
          "2.1WS:kernel-smp-0:2.4.9-e.74.athlon",
          "2.1WS:kernel-smp-0:2.4.9-e.74.i686",
          "2.1WS:kernel-source-0:2.4.9-e.74.i386",
          "2.1WS:kernel-summit-0:2.4.9-e.74.i686"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "Canonical URL",
          "url": "https://access.redhat.com/security/cve/CVE-2006-4814"
        },
        {
          "category": "external",
          "summary": "RHBZ#306971",
          "url": "https://bugzilla.redhat.com/show_bug.cgi?id=306971"
        },
        {
          "category": "external",
          "summary": "https://www.cve.org/CVERecord?id=CVE-2006-4814",
          "url": "https://www.cve.org/CVERecord?id=CVE-2006-4814"
        },
        {
          "category": "external",
          "summary": "https://nvd.nist.gov/vuln/detail/CVE-2006-4814",
          "url": "https://nvd.nist.gov/vuln/detail/CVE-2006-4814"
        }
      ],
      "release_date": "2006-12-14T00:00:00+00:00",
      "remediations": [
        {
          "category": "vendor_fix",
          "date": "2009-01-08T15:47:00+00:00",
          "details": "Before applying this update, make sure that all previously-released errata\nrelevant to your system have been applied.\n\nThis update is available via Red Hat Network. Details on how to use the Red\nHat Network to apply this update are available at\nhttp://kbase.redhat.com/faq/docs/DOC-11259",
          "product_ids": [
            "2.1AS:kernel-0:2.4.9-e.74.athlon",
            "2.1AS:kernel-0:2.4.9-e.74.i686",
            "2.1AS:kernel-0:2.4.9-e.74.src",
            "2.1AS:kernel-BOOT-0:2.4.9-e.74.i386",
            "2.1AS:kernel-debug-0:2.4.9-e.74.i686",
            "2.1AS:kernel-doc-0:2.4.9-e.74.i386",
            "2.1AS:kernel-enterprise-0:2.4.9-e.74.i686",
            "2.1AS:kernel-headers-0:2.4.9-e.74.i386",
            "2.1AS:kernel-smp-0:2.4.9-e.74.athlon",
            "2.1AS:kernel-smp-0:2.4.9-e.74.i686",
            "2.1AS:kernel-source-0:2.4.9-e.74.i386",
            "2.1AS:kernel-summit-0:2.4.9-e.74.i686",
            "2.1ES:kernel-0:2.4.9-e.74.athlon",
            "2.1ES:kernel-0:2.4.9-e.74.i686",
            "2.1ES:kernel-0:2.4.9-e.74.src",
            "2.1ES:kernel-BOOT-0:2.4.9-e.74.i386",
            "2.1ES:kernel-debug-0:2.4.9-e.74.i686",
            "2.1ES:kernel-doc-0:2.4.9-e.74.i386",
            "2.1ES:kernel-enterprise-0:2.4.9-e.74.i686",
            "2.1ES:kernel-headers-0:2.4.9-e.74.i386",
            "2.1ES:kernel-smp-0:2.4.9-e.74.athlon",
            "2.1ES:kernel-smp-0:2.4.9-e.74.i686",
            "2.1ES:kernel-source-0:2.4.9-e.74.i386",
            "2.1ES:kernel-summit-0:2.4.9-e.74.i686",
            "2.1WS:kernel-0:2.4.9-e.74.athlon",
            "2.1WS:kernel-0:2.4.9-e.74.i686",
            "2.1WS:kernel-0:2.4.9-e.74.src",
            "2.1WS:kernel-BOOT-0:2.4.9-e.74.i386",
            "2.1WS:kernel-debug-0:2.4.9-e.74.i686",
            "2.1WS:kernel-doc-0:2.4.9-e.74.i386",
            "2.1WS:kernel-enterprise-0:2.4.9-e.74.i686",
            "2.1WS:kernel-headers-0:2.4.9-e.74.i386",
            "2.1WS:kernel-smp-0:2.4.9-e.74.athlon",
            "2.1WS:kernel-smp-0:2.4.9-e.74.i686",
            "2.1WS:kernel-source-0:2.4.9-e.74.i386",
            "2.1WS:kernel-summit-0:2.4.9-e.74.i686"
          ],
          "restart_required": {
            "category": "none"
          },
          "url": "https://access.redhat.com/errata/RHSA-2009:0001"
        }
      ],
      "threats": [
        {
          "category": "impact",
          "details": "Moderate"
        }
      ],
      "title": "kernel Race condition in mincore can cause \"ps -ef\" to hang"
    },
    {
      "cve": "CVE-2007-2172",
      "discovery_date": "2007-04-13T00:00:00+00:00",
      "ids": [
        {
          "system_name": "Red Hat Bugzilla ID",
          "text": "250429"
        }
      ],
      "notes": [
        {
          "category": "description",
          "text": "A typo in Linux kernel 2.6 before 2.6.21-rc6 and 2.4 before 2.4.35 causes RTA_MAX to be used as an array size instead of RTN_MAX, which leads to an \"out of bound access\" by the (1) dn_fib_props (dn_fib.c, DECNet) and (2) fib_props (fib_semantics.c, IPv4) functions.",
          "title": "Vulnerability description"
        },
        {
          "category": "summary",
          "text": "fib_semantics.c out of bounds access vulnerability",
          "title": "Vulnerability summary"
        }
      ],
      "product_status": {
        "fixed": [
          "2.1AS:kernel-0:2.4.9-e.74.athlon",
          "2.1AS:kernel-0:2.4.9-e.74.i686",
          "2.1AS:kernel-0:2.4.9-e.74.src",
          "2.1AS:kernel-BOOT-0:2.4.9-e.74.i386",
          "2.1AS:kernel-debug-0:2.4.9-e.74.i686",
          "2.1AS:kernel-doc-0:2.4.9-e.74.i386",
          "2.1AS:kernel-enterprise-0:2.4.9-e.74.i686",
          "2.1AS:kernel-headers-0:2.4.9-e.74.i386",
          "2.1AS:kernel-smp-0:2.4.9-e.74.athlon",
          "2.1AS:kernel-smp-0:2.4.9-e.74.i686",
          "2.1AS:kernel-source-0:2.4.9-e.74.i386",
          "2.1AS:kernel-summit-0:2.4.9-e.74.i686",
          "2.1ES:kernel-0:2.4.9-e.74.athlon",
          "2.1ES:kernel-0:2.4.9-e.74.i686",
          "2.1ES:kernel-0:2.4.9-e.74.src",
          "2.1ES:kernel-BOOT-0:2.4.9-e.74.i386",
          "2.1ES:kernel-debug-0:2.4.9-e.74.i686",
          "2.1ES:kernel-doc-0:2.4.9-e.74.i386",
          "2.1ES:kernel-enterprise-0:2.4.9-e.74.i686",
          "2.1ES:kernel-headers-0:2.4.9-e.74.i386",
          "2.1ES:kernel-smp-0:2.4.9-e.74.athlon",
          "2.1ES:kernel-smp-0:2.4.9-e.74.i686",
          "2.1ES:kernel-source-0:2.4.9-e.74.i386",
          "2.1ES:kernel-summit-0:2.4.9-e.74.i686",
          "2.1WS:kernel-0:2.4.9-e.74.athlon",
          "2.1WS:kernel-0:2.4.9-e.74.i686",
          "2.1WS:kernel-0:2.4.9-e.74.src",
          "2.1WS:kernel-BOOT-0:2.4.9-e.74.i386",
          "2.1WS:kernel-debug-0:2.4.9-e.74.i686",
          "2.1WS:kernel-doc-0:2.4.9-e.74.i386",
          "2.1WS:kernel-enterprise-0:2.4.9-e.74.i686",
          "2.1WS:kernel-headers-0:2.4.9-e.74.i386",
          "2.1WS:kernel-smp-0:2.4.9-e.74.athlon",
          "2.1WS:kernel-smp-0:2.4.9-e.74.i686",
          "2.1WS:kernel-source-0:2.4.9-e.74.i386",
          "2.1WS:kernel-summit-0:2.4.9-e.74.i686"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "Canonical URL",
          "url": "https://access.redhat.com/security/cve/CVE-2007-2172"
        },
        {
          "category": "external",
          "summary": "RHBZ#250429",
          "url": "https://bugzilla.redhat.com/show_bug.cgi?id=250429"
        },
        {
          "category": "external",
          "summary": "https://www.cve.org/CVERecord?id=CVE-2007-2172",
          "url": "https://www.cve.org/CVERecord?id=CVE-2007-2172"
        },
        {
          "category": "external",
          "summary": "https://nvd.nist.gov/vuln/detail/CVE-2007-2172",
          "url": "https://nvd.nist.gov/vuln/detail/CVE-2007-2172"
        }
      ],
      "release_date": "2007-03-26T00:00:00+00:00",
      "remediations": [
        {
          "category": "vendor_fix",
          "date": "2009-01-08T15:47:00+00:00",
          "details": "Before applying this update, make sure that all previously-released errata\nrelevant to your system have been applied.\n\nThis update is available via Red Hat Network. Details on how to use the Red\nHat Network to apply this update are available at\nhttp://kbase.redhat.com/faq/docs/DOC-11259",
          "product_ids": [
            "2.1AS:kernel-0:2.4.9-e.74.athlon",
            "2.1AS:kernel-0:2.4.9-e.74.i686",
            "2.1AS:kernel-0:2.4.9-e.74.src",
            "2.1AS:kernel-BOOT-0:2.4.9-e.74.i386",
            "2.1AS:kernel-debug-0:2.4.9-e.74.i686",
            "2.1AS:kernel-doc-0:2.4.9-e.74.i386",
            "2.1AS:kernel-enterprise-0:2.4.9-e.74.i686",
            "2.1AS:kernel-headers-0:2.4.9-e.74.i386",
            "2.1AS:kernel-smp-0:2.4.9-e.74.athlon",
            "2.1AS:kernel-smp-0:2.4.9-e.74.i686",
            "2.1AS:kernel-source-0:2.4.9-e.74.i386",
            "2.1AS:kernel-summit-0:2.4.9-e.74.i686",
            "2.1ES:kernel-0:2.4.9-e.74.athlon",
            "2.1ES:kernel-0:2.4.9-e.74.i686",
            "2.1ES:kernel-0:2.4.9-e.74.src",
            "2.1ES:kernel-BOOT-0:2.4.9-e.74.i386",
            "2.1ES:kernel-debug-0:2.4.9-e.74.i686",
            "2.1ES:kernel-doc-0:2.4.9-e.74.i386",
            "2.1ES:kernel-enterprise-0:2.4.9-e.74.i686",
            "2.1ES:kernel-headers-0:2.4.9-e.74.i386",
            "2.1ES:kernel-smp-0:2.4.9-e.74.athlon",
            "2.1ES:kernel-smp-0:2.4.9-e.74.i686",
            "2.1ES:kernel-source-0:2.4.9-e.74.i386",
            "2.1ES:kernel-summit-0:2.4.9-e.74.i686",
            "2.1WS:kernel-0:2.4.9-e.74.athlon",
            "2.1WS:kernel-0:2.4.9-e.74.i686",
            "2.1WS:kernel-0:2.4.9-e.74.src",
            "2.1WS:kernel-BOOT-0:2.4.9-e.74.i386",
            "2.1WS:kernel-debug-0:2.4.9-e.74.i686",
            "2.1WS:kernel-doc-0:2.4.9-e.74.i386",
            "2.1WS:kernel-enterprise-0:2.4.9-e.74.i686",
            "2.1WS:kernel-headers-0:2.4.9-e.74.i386",
            "2.1WS:kernel-smp-0:2.4.9-e.74.athlon",
            "2.1WS:kernel-smp-0:2.4.9-e.74.i686",
            "2.1WS:kernel-source-0:2.4.9-e.74.i386",
            "2.1WS:kernel-summit-0:2.4.9-e.74.i686"
          ],
          "restart_required": {
            "category": "none"
          },
          "url": "https://access.redhat.com/errata/RHSA-2009:0001"
        }
      ],
      "threats": [
        {
          "category": "impact",
          "details": "Important"
        }
      ],
      "title": "fib_semantics.c out of bounds access vulnerability"
    },
    {
      "cve": "CVE-2007-3848",
      "discovery_date": "2007-07-27T00:00:00+00:00",
      "ids": [
        {
          "system_name": "Red Hat Bugzilla ID",
          "text": "250972"
        }
      ],
      "notes": [
        {
          "category": "description",
          "text": "Linux kernel 2.4.35 and other versions allows local users to send arbitrary signals to a child process that is running at higher privileges by causing a setuid-root parent process to die, which delivers an attacker-controlled parent process death signal (PR_SET_PDEATHSIG).",
          "title": "Vulnerability description"
        },
        {
          "category": "summary",
          "text": "Privilege escalation via PR_SET_PDEATHSIG",
          "title": "Vulnerability summary"
        }
      ],
      "product_status": {
        "fixed": [
          "2.1AS:kernel-0:2.4.9-e.74.athlon",
          "2.1AS:kernel-0:2.4.9-e.74.i686",
          "2.1AS:kernel-0:2.4.9-e.74.src",
          "2.1AS:kernel-BOOT-0:2.4.9-e.74.i386",
          "2.1AS:kernel-debug-0:2.4.9-e.74.i686",
          "2.1AS:kernel-doc-0:2.4.9-e.74.i386",
          "2.1AS:kernel-enterprise-0:2.4.9-e.74.i686",
          "2.1AS:kernel-headers-0:2.4.9-e.74.i386",
          "2.1AS:kernel-smp-0:2.4.9-e.74.athlon",
          "2.1AS:kernel-smp-0:2.4.9-e.74.i686",
          "2.1AS:kernel-source-0:2.4.9-e.74.i386",
          "2.1AS:kernel-summit-0:2.4.9-e.74.i686",
          "2.1ES:kernel-0:2.4.9-e.74.athlon",
          "2.1ES:kernel-0:2.4.9-e.74.i686",
          "2.1ES:kernel-0:2.4.9-e.74.src",
          "2.1ES:kernel-BOOT-0:2.4.9-e.74.i386",
          "2.1ES:kernel-debug-0:2.4.9-e.74.i686",
          "2.1ES:kernel-doc-0:2.4.9-e.74.i386",
          "2.1ES:kernel-enterprise-0:2.4.9-e.74.i686",
          "2.1ES:kernel-headers-0:2.4.9-e.74.i386",
          "2.1ES:kernel-smp-0:2.4.9-e.74.athlon",
          "2.1ES:kernel-smp-0:2.4.9-e.74.i686",
          "2.1ES:kernel-source-0:2.4.9-e.74.i386",
          "2.1ES:kernel-summit-0:2.4.9-e.74.i686",
          "2.1WS:kernel-0:2.4.9-e.74.athlon",
          "2.1WS:kernel-0:2.4.9-e.74.i686",
          "2.1WS:kernel-0:2.4.9-e.74.src",
          "2.1WS:kernel-BOOT-0:2.4.9-e.74.i386",
          "2.1WS:kernel-debug-0:2.4.9-e.74.i686",
          "2.1WS:kernel-doc-0:2.4.9-e.74.i386",
          "2.1WS:kernel-enterprise-0:2.4.9-e.74.i686",
          "2.1WS:kernel-headers-0:2.4.9-e.74.i386",
          "2.1WS:kernel-smp-0:2.4.9-e.74.athlon",
          "2.1WS:kernel-smp-0:2.4.9-e.74.i686",
          "2.1WS:kernel-source-0:2.4.9-e.74.i386",
          "2.1WS:kernel-summit-0:2.4.9-e.74.i686"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "Canonical URL",
          "url": "https://access.redhat.com/security/cve/CVE-2007-3848"
        },
        {
          "category": "external",
          "summary": "RHBZ#250972",
          "url": "https://bugzilla.redhat.com/show_bug.cgi?id=250972"
        },
        {
          "category": "external",
          "summary": "https://www.cve.org/CVERecord?id=CVE-2007-3848",
          "url": "https://www.cve.org/CVERecord?id=CVE-2007-3848"
        },
        {
          "category": "external",
          "summary": "https://nvd.nist.gov/vuln/detail/CVE-2007-3848",
          "url": "https://nvd.nist.gov/vuln/detail/CVE-2007-3848"
        }
      ],
      "release_date": "2007-08-14T00:00:00+00:00",
      "remediations": [
        {
          "category": "vendor_fix",
          "date": "2009-01-08T15:47:00+00:00",
          "details": "Before applying this update, make sure that all previously-released errata\nrelevant to your system have been applied.\n\nThis update is available via Red Hat Network. Details on how to use the Red\nHat Network to apply this update are available at\nhttp://kbase.redhat.com/faq/docs/DOC-11259",
          "product_ids": [
            "2.1AS:kernel-0:2.4.9-e.74.athlon",
            "2.1AS:kernel-0:2.4.9-e.74.i686",
            "2.1AS:kernel-0:2.4.9-e.74.src",
            "2.1AS:kernel-BOOT-0:2.4.9-e.74.i386",
            "2.1AS:kernel-debug-0:2.4.9-e.74.i686",
            "2.1AS:kernel-doc-0:2.4.9-e.74.i386",
            "2.1AS:kernel-enterprise-0:2.4.9-e.74.i686",
            "2.1AS:kernel-headers-0:2.4.9-e.74.i386",
            "2.1AS:kernel-smp-0:2.4.9-e.74.athlon",
            "2.1AS:kernel-smp-0:2.4.9-e.74.i686",
            "2.1AS:kernel-source-0:2.4.9-e.74.i386",
            "2.1AS:kernel-summit-0:2.4.9-e.74.i686",
            "2.1ES:kernel-0:2.4.9-e.74.athlon",
            "2.1ES:kernel-0:2.4.9-e.74.i686",
            "2.1ES:kernel-0:2.4.9-e.74.src",
            "2.1ES:kernel-BOOT-0:2.4.9-e.74.i386",
            "2.1ES:kernel-debug-0:2.4.9-e.74.i686",
            "2.1ES:kernel-doc-0:2.4.9-e.74.i386",
            "2.1ES:kernel-enterprise-0:2.4.9-e.74.i686",
            "2.1ES:kernel-headers-0:2.4.9-e.74.i386",
            "2.1ES:kernel-smp-0:2.4.9-e.74.athlon",
            "2.1ES:kernel-smp-0:2.4.9-e.74.i686",
            "2.1ES:kernel-source-0:2.4.9-e.74.i386",
            "2.1ES:kernel-summit-0:2.4.9-e.74.i686",
            "2.1WS:kernel-0:2.4.9-e.74.athlon",
            "2.1WS:kernel-0:2.4.9-e.74.i686",
            "2.1WS:kernel-0:2.4.9-e.74.src",
            "2.1WS:kernel-BOOT-0:2.4.9-e.74.i386",
            "2.1WS:kernel-debug-0:2.4.9-e.74.i686",
            "2.1WS:kernel-doc-0:2.4.9-e.74.i386",
            "2.1WS:kernel-enterprise-0:2.4.9-e.74.i686",
            "2.1WS:kernel-headers-0:2.4.9-e.74.i386",
            "2.1WS:kernel-smp-0:2.4.9-e.74.athlon",
            "2.1WS:kernel-smp-0:2.4.9-e.74.i686",
            "2.1WS:kernel-source-0:2.4.9-e.74.i386",
            "2.1WS:kernel-summit-0:2.4.9-e.74.i686"
          ],
          "restart_required": {
            "category": "none"
          },
          "url": "https://access.redhat.com/errata/RHSA-2009:0001"
        }
      ],
      "threats": [
        {
          "category": "impact",
          "details": "Important"
        }
      ],
      "title": "Privilege escalation via PR_SET_PDEATHSIG"
    },
    {
      "cve": "CVE-2007-4308",
      "discovery_date": "2007-07-23T00:00:00+00:00",
      "ids": [
        {
          "system_name": "Red Hat Bugzilla ID",
          "text": "252309"
        }
      ],
      "notes": [
        {
          "category": "description",
          "text": "The (1) aac_cfg_open and (2) aac_compat_ioctl functions in the SCSI layer ioctl path in aacraid in the Linux kernel before 2.6.23-rc2 do not check permissions for ioctls, which might allow local users to cause a denial of service or gain privileges.",
          "title": "Vulnerability description"
        },
        {
          "category": "summary",
          "text": "kernel: Missing ioctl() permission checks in aacraid driver",
          "title": "Vulnerability summary"
        }
      ],
      "product_status": {
        "fixed": [
          "2.1AS:kernel-0:2.4.9-e.74.athlon",
          "2.1AS:kernel-0:2.4.9-e.74.i686",
          "2.1AS:kernel-0:2.4.9-e.74.src",
          "2.1AS:kernel-BOOT-0:2.4.9-e.74.i386",
          "2.1AS:kernel-debug-0:2.4.9-e.74.i686",
          "2.1AS:kernel-doc-0:2.4.9-e.74.i386",
          "2.1AS:kernel-enterprise-0:2.4.9-e.74.i686",
          "2.1AS:kernel-headers-0:2.4.9-e.74.i386",
          "2.1AS:kernel-smp-0:2.4.9-e.74.athlon",
          "2.1AS:kernel-smp-0:2.4.9-e.74.i686",
          "2.1AS:kernel-source-0:2.4.9-e.74.i386",
          "2.1AS:kernel-summit-0:2.4.9-e.74.i686",
          "2.1ES:kernel-0:2.4.9-e.74.athlon",
          "2.1ES:kernel-0:2.4.9-e.74.i686",
          "2.1ES:kernel-0:2.4.9-e.74.src",
          "2.1ES:kernel-BOOT-0:2.4.9-e.74.i386",
          "2.1ES:kernel-debug-0:2.4.9-e.74.i686",
          "2.1ES:kernel-doc-0:2.4.9-e.74.i386",
          "2.1ES:kernel-enterprise-0:2.4.9-e.74.i686",
          "2.1ES:kernel-headers-0:2.4.9-e.74.i386",
          "2.1ES:kernel-smp-0:2.4.9-e.74.athlon",
          "2.1ES:kernel-smp-0:2.4.9-e.74.i686",
          "2.1ES:kernel-source-0:2.4.9-e.74.i386",
          "2.1ES:kernel-summit-0:2.4.9-e.74.i686",
          "2.1WS:kernel-0:2.4.9-e.74.athlon",
          "2.1WS:kernel-0:2.4.9-e.74.i686",
          "2.1WS:kernel-0:2.4.9-e.74.src",
          "2.1WS:kernel-BOOT-0:2.4.9-e.74.i386",
          "2.1WS:kernel-debug-0:2.4.9-e.74.i686",
          "2.1WS:kernel-doc-0:2.4.9-e.74.i386",
          "2.1WS:kernel-enterprise-0:2.4.9-e.74.i686",
          "2.1WS:kernel-headers-0:2.4.9-e.74.i386",
          "2.1WS:kernel-smp-0:2.4.9-e.74.athlon",
          "2.1WS:kernel-smp-0:2.4.9-e.74.i686",
          "2.1WS:kernel-source-0:2.4.9-e.74.i386",
          "2.1WS:kernel-summit-0:2.4.9-e.74.i686"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "Canonical URL",
          "url": "https://access.redhat.com/security/cve/CVE-2007-4308"
        },
        {
          "category": "external",
          "summary": "RHBZ#252309",
          "url": "https://bugzilla.redhat.com/show_bug.cgi?id=252309"
        },
        {
          "category": "external",
          "summary": "https://www.cve.org/CVERecord?id=CVE-2007-4308",
          "url": "https://www.cve.org/CVERecord?id=CVE-2007-4308"
        },
        {
          "category": "external",
          "summary": "https://nvd.nist.gov/vuln/detail/CVE-2007-4308",
          "url": "https://nvd.nist.gov/vuln/detail/CVE-2007-4308"
        }
      ],
      "release_date": "2007-07-23T00:00:00+00:00",
      "remediations": [
        {
          "category": "vendor_fix",
          "date": "2009-01-08T15:47:00+00:00",
          "details": "Before applying this update, make sure that all previously-released errata\nrelevant to your system have been applied.\n\nThis update is available via Red Hat Network. Details on how to use the Red\nHat Network to apply this update are available at\nhttp://kbase.redhat.com/faq/docs/DOC-11259",
          "product_ids": [
            "2.1AS:kernel-0:2.4.9-e.74.athlon",
            "2.1AS:kernel-0:2.4.9-e.74.i686",
            "2.1AS:kernel-0:2.4.9-e.74.src",
            "2.1AS:kernel-BOOT-0:2.4.9-e.74.i386",
            "2.1AS:kernel-debug-0:2.4.9-e.74.i686",
            "2.1AS:kernel-doc-0:2.4.9-e.74.i386",
            "2.1AS:kernel-enterprise-0:2.4.9-e.74.i686",
            "2.1AS:kernel-headers-0:2.4.9-e.74.i386",
            "2.1AS:kernel-smp-0:2.4.9-e.74.athlon",
            "2.1AS:kernel-smp-0:2.4.9-e.74.i686",
            "2.1AS:kernel-source-0:2.4.9-e.74.i386",
            "2.1AS:kernel-summit-0:2.4.9-e.74.i686",
            "2.1ES:kernel-0:2.4.9-e.74.athlon",
            "2.1ES:kernel-0:2.4.9-e.74.i686",
            "2.1ES:kernel-0:2.4.9-e.74.src",
            "2.1ES:kernel-BOOT-0:2.4.9-e.74.i386",
            "2.1ES:kernel-debug-0:2.4.9-e.74.i686",
            "2.1ES:kernel-doc-0:2.4.9-e.74.i386",
            "2.1ES:kernel-enterprise-0:2.4.9-e.74.i686",
            "2.1ES:kernel-headers-0:2.4.9-e.74.i386",
            "2.1ES:kernel-smp-0:2.4.9-e.74.athlon",
            "2.1ES:kernel-smp-0:2.4.9-e.74.i686",
            "2.1ES:kernel-source-0:2.4.9-e.74.i386",
            "2.1ES:kernel-summit-0:2.4.9-e.74.i686",
            "2.1WS:kernel-0:2.4.9-e.74.athlon",
            "2.1WS:kernel-0:2.4.9-e.74.i686",
            "2.1WS:kernel-0:2.4.9-e.74.src",
            "2.1WS:kernel-BOOT-0:2.4.9-e.74.i386",
            "2.1WS:kernel-debug-0:2.4.9-e.74.i686",
            "2.1WS:kernel-doc-0:2.4.9-e.74.i386",
            "2.1WS:kernel-enterprise-0:2.4.9-e.74.i686",
            "2.1WS:kernel-headers-0:2.4.9-e.74.i386",
            "2.1WS:kernel-smp-0:2.4.9-e.74.athlon",
            "2.1WS:kernel-smp-0:2.4.9-e.74.i686",
            "2.1WS:kernel-source-0:2.4.9-e.74.i386",
            "2.1WS:kernel-summit-0:2.4.9-e.74.i686"
          ],
          "restart_required": {
            "category": "none"
          },
          "url": "https://access.redhat.com/errata/RHSA-2009:0001"
        }
      ],
      "threats": [
        {
          "category": "impact",
          "details": "Moderate"
        }
      ],
      "title": "kernel: Missing ioctl() permission checks in aacraid driver"
    },
    {
      "cve": "CVE-2007-6063",
      "discovery_date": "2007-11-20T00:00:00+00:00",
      "ids": [
        {
          "system_name": "Red Hat Bugzilla ID",
          "text": "392101"
        }
      ],
      "notes": [
        {
          "category": "description",
          "text": "Buffer overflow in the isdn_net_setcfg function in isdn_net.c in Linux kernel 2.6.23 allows local users to have an unknown impact via a crafted argument to the isdn_ioctl function.",
          "title": "Vulnerability description"
        },
        {
          "category": "summary",
          "text": "Linux Kernel isdn_net_setcfg buffer overflow",
          "title": "Vulnerability summary"
        }
      ],
      "product_status": {
        "fixed": [
          "2.1AS:kernel-0:2.4.9-e.74.athlon",
          "2.1AS:kernel-0:2.4.9-e.74.i686",
          "2.1AS:kernel-0:2.4.9-e.74.src",
          "2.1AS:kernel-BOOT-0:2.4.9-e.74.i386",
          "2.1AS:kernel-debug-0:2.4.9-e.74.i686",
          "2.1AS:kernel-doc-0:2.4.9-e.74.i386",
          "2.1AS:kernel-enterprise-0:2.4.9-e.74.i686",
          "2.1AS:kernel-headers-0:2.4.9-e.74.i386",
          "2.1AS:kernel-smp-0:2.4.9-e.74.athlon",
          "2.1AS:kernel-smp-0:2.4.9-e.74.i686",
          "2.1AS:kernel-source-0:2.4.9-e.74.i386",
          "2.1AS:kernel-summit-0:2.4.9-e.74.i686",
          "2.1ES:kernel-0:2.4.9-e.74.athlon",
          "2.1ES:kernel-0:2.4.9-e.74.i686",
          "2.1ES:kernel-0:2.4.9-e.74.src",
          "2.1ES:kernel-BOOT-0:2.4.9-e.74.i386",
          "2.1ES:kernel-debug-0:2.4.9-e.74.i686",
          "2.1ES:kernel-doc-0:2.4.9-e.74.i386",
          "2.1ES:kernel-enterprise-0:2.4.9-e.74.i686",
          "2.1ES:kernel-headers-0:2.4.9-e.74.i386",
          "2.1ES:kernel-smp-0:2.4.9-e.74.athlon",
          "2.1ES:kernel-smp-0:2.4.9-e.74.i686",
          "2.1ES:kernel-source-0:2.4.9-e.74.i386",
          "2.1ES:kernel-summit-0:2.4.9-e.74.i686",
          "2.1WS:kernel-0:2.4.9-e.74.athlon",
          "2.1WS:kernel-0:2.4.9-e.74.i686",
          "2.1WS:kernel-0:2.4.9-e.74.src",
          "2.1WS:kernel-BOOT-0:2.4.9-e.74.i386",
          "2.1WS:kernel-debug-0:2.4.9-e.74.i686",
          "2.1WS:kernel-doc-0:2.4.9-e.74.i386",
          "2.1WS:kernel-enterprise-0:2.4.9-e.74.i686",
          "2.1WS:kernel-headers-0:2.4.9-e.74.i386",
          "2.1WS:kernel-smp-0:2.4.9-e.74.athlon",
          "2.1WS:kernel-smp-0:2.4.9-e.74.i686",
          "2.1WS:kernel-source-0:2.4.9-e.74.i386",
          "2.1WS:kernel-summit-0:2.4.9-e.74.i686"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "Canonical URL",
          "url": "https://access.redhat.com/security/cve/CVE-2007-6063"
        },
        {
          "category": "external",
          "summary": "RHBZ#392101",
          "url": "https://bugzilla.redhat.com/show_bug.cgi?id=392101"
        },
        {
          "category": "external",
          "summary": "https://www.cve.org/CVERecord?id=CVE-2007-6063",
          "url": "https://www.cve.org/CVERecord?id=CVE-2007-6063"
        },
        {
          "category": "external",
          "summary": "https://nvd.nist.gov/vuln/detail/CVE-2007-6063",
          "url": "https://nvd.nist.gov/vuln/detail/CVE-2007-6063"
        }
      ],
      "release_date": "2007-11-20T00:00:00+00:00",
      "remediations": [
        {
          "category": "vendor_fix",
          "date": "2009-01-08T15:47:00+00:00",
          "details": "Before applying this update, make sure that all previously-released errata\nrelevant to your system have been applied.\n\nThis update is available via Red Hat Network. Details on how to use the Red\nHat Network to apply this update are available at\nhttp://kbase.redhat.com/faq/docs/DOC-11259",
          "product_ids": [
            "2.1AS:kernel-0:2.4.9-e.74.athlon",
            "2.1AS:kernel-0:2.4.9-e.74.i686",
            "2.1AS:kernel-0:2.4.9-e.74.src",
            "2.1AS:kernel-BOOT-0:2.4.9-e.74.i386",
            "2.1AS:kernel-debug-0:2.4.9-e.74.i686",
            "2.1AS:kernel-doc-0:2.4.9-e.74.i386",
            "2.1AS:kernel-enterprise-0:2.4.9-e.74.i686",
            "2.1AS:kernel-headers-0:2.4.9-e.74.i386",
            "2.1AS:kernel-smp-0:2.4.9-e.74.athlon",
            "2.1AS:kernel-smp-0:2.4.9-e.74.i686",
            "2.1AS:kernel-source-0:2.4.9-e.74.i386",
            "2.1AS:kernel-summit-0:2.4.9-e.74.i686",
            "2.1ES:kernel-0:2.4.9-e.74.athlon",
            "2.1ES:kernel-0:2.4.9-e.74.i686",
            "2.1ES:kernel-0:2.4.9-e.74.src",
            "2.1ES:kernel-BOOT-0:2.4.9-e.74.i386",
            "2.1ES:kernel-debug-0:2.4.9-e.74.i686",
            "2.1ES:kernel-doc-0:2.4.9-e.74.i386",
            "2.1ES:kernel-enterprise-0:2.4.9-e.74.i686",
            "2.1ES:kernel-headers-0:2.4.9-e.74.i386",
            "2.1ES:kernel-smp-0:2.4.9-e.74.athlon",
            "2.1ES:kernel-smp-0:2.4.9-e.74.i686",
            "2.1ES:kernel-source-0:2.4.9-e.74.i386",
            "2.1ES:kernel-summit-0:2.4.9-e.74.i686",
            "2.1WS:kernel-0:2.4.9-e.74.athlon",
            "2.1WS:kernel-0:2.4.9-e.74.i686",
            "2.1WS:kernel-0:2.4.9-e.74.src",
            "2.1WS:kernel-BOOT-0:2.4.9-e.74.i386",
            "2.1WS:kernel-debug-0:2.4.9-e.74.i686",
            "2.1WS:kernel-doc-0:2.4.9-e.74.i386",
            "2.1WS:kernel-enterprise-0:2.4.9-e.74.i686",
            "2.1WS:kernel-headers-0:2.4.9-e.74.i386",
            "2.1WS:kernel-smp-0:2.4.9-e.74.athlon",
            "2.1WS:kernel-smp-0:2.4.9-e.74.i686",
            "2.1WS:kernel-source-0:2.4.9-e.74.i386",
            "2.1WS:kernel-summit-0:2.4.9-e.74.i686"
          ],
          "restart_required": {
            "category": "none"
          },
          "url": "https://access.redhat.com/errata/RHSA-2009:0001"
        }
      ],
      "threats": [
        {
          "category": "impact",
          "details": "Moderate"
        }
      ],
      "title": "Linux Kernel isdn_net_setcfg buffer overflow"
    },
    {
      "cve": "CVE-2007-6151",
      "discovery_date": "2007-12-01T00:00:00+00:00",
      "ids": [
        {
          "system_name": "Red Hat Bugzilla ID",
          "text": "425111"
        }
      ],
      "notes": [
        {
          "category": "description",
          "text": "The isdn_ioctl function in isdn_common.c in Linux kernel 2.6.23 allows local users to cause a denial of service via a crafted ioctl struct in which iocts is not null terminated, which triggers a buffer overflow.",
          "title": "Vulnerability description"
        },
        {
          "category": "summary",
          "text": "I4L: fix isdn_ioctl memory issue",
          "title": "Vulnerability summary"
        }
      ],
      "product_status": {
        "fixed": [
          "2.1AS:kernel-0:2.4.9-e.74.athlon",
          "2.1AS:kernel-0:2.4.9-e.74.i686",
          "2.1AS:kernel-0:2.4.9-e.74.src",
          "2.1AS:kernel-BOOT-0:2.4.9-e.74.i386",
          "2.1AS:kernel-debug-0:2.4.9-e.74.i686",
          "2.1AS:kernel-doc-0:2.4.9-e.74.i386",
          "2.1AS:kernel-enterprise-0:2.4.9-e.74.i686",
          "2.1AS:kernel-headers-0:2.4.9-e.74.i386",
          "2.1AS:kernel-smp-0:2.4.9-e.74.athlon",
          "2.1AS:kernel-smp-0:2.4.9-e.74.i686",
          "2.1AS:kernel-source-0:2.4.9-e.74.i386",
          "2.1AS:kernel-summit-0:2.4.9-e.74.i686",
          "2.1ES:kernel-0:2.4.9-e.74.athlon",
          "2.1ES:kernel-0:2.4.9-e.74.i686",
          "2.1ES:kernel-0:2.4.9-e.74.src",
          "2.1ES:kernel-BOOT-0:2.4.9-e.74.i386",
          "2.1ES:kernel-debug-0:2.4.9-e.74.i686",
          "2.1ES:kernel-doc-0:2.4.9-e.74.i386",
          "2.1ES:kernel-enterprise-0:2.4.9-e.74.i686",
          "2.1ES:kernel-headers-0:2.4.9-e.74.i386",
          "2.1ES:kernel-smp-0:2.4.9-e.74.athlon",
          "2.1ES:kernel-smp-0:2.4.9-e.74.i686",
          "2.1ES:kernel-source-0:2.4.9-e.74.i386",
          "2.1ES:kernel-summit-0:2.4.9-e.74.i686",
          "2.1WS:kernel-0:2.4.9-e.74.athlon",
          "2.1WS:kernel-0:2.4.9-e.74.i686",
          "2.1WS:kernel-0:2.4.9-e.74.src",
          "2.1WS:kernel-BOOT-0:2.4.9-e.74.i386",
          "2.1WS:kernel-debug-0:2.4.9-e.74.i686",
          "2.1WS:kernel-doc-0:2.4.9-e.74.i386",
          "2.1WS:kernel-enterprise-0:2.4.9-e.74.i686",
          "2.1WS:kernel-headers-0:2.4.9-e.74.i386",
          "2.1WS:kernel-smp-0:2.4.9-e.74.athlon",
          "2.1WS:kernel-smp-0:2.4.9-e.74.i686",
          "2.1WS:kernel-source-0:2.4.9-e.74.i386",
          "2.1WS:kernel-summit-0:2.4.9-e.74.i686"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "Canonical URL",
          "url": "https://access.redhat.com/security/cve/CVE-2007-6151"
        },
        {
          "category": "external",
          "summary": "RHBZ#425111",
          "url": "https://bugzilla.redhat.com/show_bug.cgi?id=425111"
        },
        {
          "category": "external",
          "summary": "https://www.cve.org/CVERecord?id=CVE-2007-6151",
          "url": "https://www.cve.org/CVERecord?id=CVE-2007-6151"
        },
        {
          "category": "external",
          "summary": "https://nvd.nist.gov/vuln/detail/CVE-2007-6151",
          "url": "https://nvd.nist.gov/vuln/detail/CVE-2007-6151"
        }
      ],
      "release_date": "2007-12-01T00:00:00+00:00",
      "remediations": [
        {
          "category": "vendor_fix",
          "date": "2009-01-08T15:47:00+00:00",
          "details": "Before applying this update, make sure that all previously-released errata\nrelevant to your system have been applied.\n\nThis update is available via Red Hat Network. Details on how to use the Red\nHat Network to apply this update are available at\nhttp://kbase.redhat.com/faq/docs/DOC-11259",
          "product_ids": [
            "2.1AS:kernel-0:2.4.9-e.74.athlon",
            "2.1AS:kernel-0:2.4.9-e.74.i686",
            "2.1AS:kernel-0:2.4.9-e.74.src",
            "2.1AS:kernel-BOOT-0:2.4.9-e.74.i386",
            "2.1AS:kernel-debug-0:2.4.9-e.74.i686",
            "2.1AS:kernel-doc-0:2.4.9-e.74.i386",
            "2.1AS:kernel-enterprise-0:2.4.9-e.74.i686",
            "2.1AS:kernel-headers-0:2.4.9-e.74.i386",
            "2.1AS:kernel-smp-0:2.4.9-e.74.athlon",
            "2.1AS:kernel-smp-0:2.4.9-e.74.i686",
            "2.1AS:kernel-source-0:2.4.9-e.74.i386",
            "2.1AS:kernel-summit-0:2.4.9-e.74.i686",
            "2.1ES:kernel-0:2.4.9-e.74.athlon",
            "2.1ES:kernel-0:2.4.9-e.74.i686",
            "2.1ES:kernel-0:2.4.9-e.74.src",
            "2.1ES:kernel-BOOT-0:2.4.9-e.74.i386",
            "2.1ES:kernel-debug-0:2.4.9-e.74.i686",
            "2.1ES:kernel-doc-0:2.4.9-e.74.i386",
            "2.1ES:kernel-enterprise-0:2.4.9-e.74.i686",
            "2.1ES:kernel-headers-0:2.4.9-e.74.i386",
            "2.1ES:kernel-smp-0:2.4.9-e.74.athlon",
            "2.1ES:kernel-smp-0:2.4.9-e.74.i686",
            "2.1ES:kernel-source-0:2.4.9-e.74.i386",
            "2.1ES:kernel-summit-0:2.4.9-e.74.i686",
            "2.1WS:kernel-0:2.4.9-e.74.athlon",
            "2.1WS:kernel-0:2.4.9-e.74.i686",
            "2.1WS:kernel-0:2.4.9-e.74.src",
            "2.1WS:kernel-BOOT-0:2.4.9-e.74.i386",
            "2.1WS:kernel-debug-0:2.4.9-e.74.i686",
            "2.1WS:kernel-doc-0:2.4.9-e.74.i386",
            "2.1WS:kernel-enterprise-0:2.4.9-e.74.i686",
            "2.1WS:kernel-headers-0:2.4.9-e.74.i386",
            "2.1WS:kernel-smp-0:2.4.9-e.74.athlon",
            "2.1WS:kernel-smp-0:2.4.9-e.74.i686",
            "2.1WS:kernel-source-0:2.4.9-e.74.i386",
            "2.1WS:kernel-summit-0:2.4.9-e.74.i686"
          ],
          "restart_required": {
            "category": "none"
          },
          "url": "https://access.redhat.com/errata/RHSA-2009:0001"
        }
      ],
      "threats": [
        {
          "category": "impact",
          "details": "Low"
        }
      ],
      "title": "I4L: fix isdn_ioctl memory issue"
    },
    {
      "cve": "CVE-2007-6206",
      "discovery_date": "2004-07-10T00:00:00+00:00",
      "ids": [
        {
          "system_name": "Red Hat Bugzilla ID",
          "text": "396861"
        }
      ],
      "notes": [
        {
          "category": "description",
          "text": "The do_coredump function in fs/exec.c in Linux kernel 2.4.x and 2.6.x up to 2.6.24-rc3, and possibly other versions, does not change the UID of a core dump file if it exists before a root process creates a core dump in the same location, which might allow local users to obtain sensitive information.",
          "title": "Vulnerability description"
        },
        {
          "category": "summary",
          "text": "Issue with core dump owner",
          "title": "Vulnerability summary"
        }
      ],
      "product_status": {
        "fixed": [
          "2.1AS:kernel-0:2.4.9-e.74.athlon",
          "2.1AS:kernel-0:2.4.9-e.74.i686",
          "2.1AS:kernel-0:2.4.9-e.74.src",
          "2.1AS:kernel-BOOT-0:2.4.9-e.74.i386",
          "2.1AS:kernel-debug-0:2.4.9-e.74.i686",
          "2.1AS:kernel-doc-0:2.4.9-e.74.i386",
          "2.1AS:kernel-enterprise-0:2.4.9-e.74.i686",
          "2.1AS:kernel-headers-0:2.4.9-e.74.i386",
          "2.1AS:kernel-smp-0:2.4.9-e.74.athlon",
          "2.1AS:kernel-smp-0:2.4.9-e.74.i686",
          "2.1AS:kernel-source-0:2.4.9-e.74.i386",
          "2.1AS:kernel-summit-0:2.4.9-e.74.i686",
          "2.1ES:kernel-0:2.4.9-e.74.athlon",
          "2.1ES:kernel-0:2.4.9-e.74.i686",
          "2.1ES:kernel-0:2.4.9-e.74.src",
          "2.1ES:kernel-BOOT-0:2.4.9-e.74.i386",
          "2.1ES:kernel-debug-0:2.4.9-e.74.i686",
          "2.1ES:kernel-doc-0:2.4.9-e.74.i386",
          "2.1ES:kernel-enterprise-0:2.4.9-e.74.i686",
          "2.1ES:kernel-headers-0:2.4.9-e.74.i386",
          "2.1ES:kernel-smp-0:2.4.9-e.74.athlon",
          "2.1ES:kernel-smp-0:2.4.9-e.74.i686",
          "2.1ES:kernel-source-0:2.4.9-e.74.i386",
          "2.1ES:kernel-summit-0:2.4.9-e.74.i686",
          "2.1WS:kernel-0:2.4.9-e.74.athlon",
          "2.1WS:kernel-0:2.4.9-e.74.i686",
          "2.1WS:kernel-0:2.4.9-e.74.src",
          "2.1WS:kernel-BOOT-0:2.4.9-e.74.i386",
          "2.1WS:kernel-debug-0:2.4.9-e.74.i686",
          "2.1WS:kernel-doc-0:2.4.9-e.74.i386",
          "2.1WS:kernel-enterprise-0:2.4.9-e.74.i686",
          "2.1WS:kernel-headers-0:2.4.9-e.74.i386",
          "2.1WS:kernel-smp-0:2.4.9-e.74.athlon",
          "2.1WS:kernel-smp-0:2.4.9-e.74.i686",
          "2.1WS:kernel-source-0:2.4.9-e.74.i386",
          "2.1WS:kernel-summit-0:2.4.9-e.74.i686"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "Canonical URL",
          "url": "https://access.redhat.com/security/cve/CVE-2007-6206"
        },
        {
          "category": "external",
          "summary": "RHBZ#396861",
          "url": "https://bugzilla.redhat.com/show_bug.cgi?id=396861"
        },
        {
          "category": "external",
          "summary": "https://www.cve.org/CVERecord?id=CVE-2007-6206",
          "url": "https://www.cve.org/CVERecord?id=CVE-2007-6206"
        },
        {
          "category": "external",
          "summary": "https://nvd.nist.gov/vuln/detail/CVE-2007-6206",
          "url": "https://nvd.nist.gov/vuln/detail/CVE-2007-6206"
        }
      ],
      "release_date": "2004-07-10T00:00:00+00:00",
      "remediations": [
        {
          "category": "vendor_fix",
          "date": "2009-01-08T15:47:00+00:00",
          "details": "Before applying this update, make sure that all previously-released errata\nrelevant to your system have been applied.\n\nThis update is available via Red Hat Network. Details on how to use the Red\nHat Network to apply this update are available at\nhttp://kbase.redhat.com/faq/docs/DOC-11259",
          "product_ids": [
            "2.1AS:kernel-0:2.4.9-e.74.athlon",
            "2.1AS:kernel-0:2.4.9-e.74.i686",
            "2.1AS:kernel-0:2.4.9-e.74.src",
            "2.1AS:kernel-BOOT-0:2.4.9-e.74.i386",
            "2.1AS:kernel-debug-0:2.4.9-e.74.i686",
            "2.1AS:kernel-doc-0:2.4.9-e.74.i386",
            "2.1AS:kernel-enterprise-0:2.4.9-e.74.i686",
            "2.1AS:kernel-headers-0:2.4.9-e.74.i386",
            "2.1AS:kernel-smp-0:2.4.9-e.74.athlon",
            "2.1AS:kernel-smp-0:2.4.9-e.74.i686",
            "2.1AS:kernel-source-0:2.4.9-e.74.i386",
            "2.1AS:kernel-summit-0:2.4.9-e.74.i686",
            "2.1ES:kernel-0:2.4.9-e.74.athlon",
            "2.1ES:kernel-0:2.4.9-e.74.i686",
            "2.1ES:kernel-0:2.4.9-e.74.src",
            "2.1ES:kernel-BOOT-0:2.4.9-e.74.i386",
            "2.1ES:kernel-debug-0:2.4.9-e.74.i686",
            "2.1ES:kernel-doc-0:2.4.9-e.74.i386",
            "2.1ES:kernel-enterprise-0:2.4.9-e.74.i686",
            "2.1ES:kernel-headers-0:2.4.9-e.74.i386",
            "2.1ES:kernel-smp-0:2.4.9-e.74.athlon",
            "2.1ES:kernel-smp-0:2.4.9-e.74.i686",
            "2.1ES:kernel-source-0:2.4.9-e.74.i386",
            "2.1ES:kernel-summit-0:2.4.9-e.74.i686",
            "2.1WS:kernel-0:2.4.9-e.74.athlon",
            "2.1WS:kernel-0:2.4.9-e.74.i686",
            "2.1WS:kernel-0:2.4.9-e.74.src",
            "2.1WS:kernel-BOOT-0:2.4.9-e.74.i386",
            "2.1WS:kernel-debug-0:2.4.9-e.74.i686",
            "2.1WS:kernel-doc-0:2.4.9-e.74.i386",
            "2.1WS:kernel-enterprise-0:2.4.9-e.74.i686",
            "2.1WS:kernel-headers-0:2.4.9-e.74.i386",
            "2.1WS:kernel-smp-0:2.4.9-e.74.athlon",
            "2.1WS:kernel-smp-0:2.4.9-e.74.i686",
            "2.1WS:kernel-source-0:2.4.9-e.74.i386",
            "2.1WS:kernel-summit-0:2.4.9-e.74.i686"
          ],
          "restart_required": {
            "category": "none"
          },
          "url": "https://access.redhat.com/errata/RHSA-2009:0001"
        }
      ],
      "threats": [
        {
          "category": "impact",
          "details": "Moderate"
        }
      ],
      "title": "Issue with core dump owner"
    },
    {
      "acknowledgments": [
        {
          "names": [
            "Nick Piggin"
          ]
        }
      ],
      "cve": "CVE-2008-0007",
      "discovery_date": "2008-01-16T00:00:00+00:00",
      "ids": [
        {
          "system_name": "Red Hat Bugzilla ID",
          "text": "428961"
        }
      ],
      "notes": [
        {
          "category": "description",
          "text": "Linux kernel before 2.6.22.17, when using certain drivers that register a fault handler that does not perform range checks, allows local users to access kernel memory via an out-of-range offset.",
          "title": "Vulnerability description"
        },
        {
          "category": "summary",
          "text": "kernel: insufficient range checks in fault handlers with mremap",
          "title": "Vulnerability summary"
        }
      ],
      "product_status": {
        "fixed": [
          "2.1AS:kernel-0:2.4.9-e.74.athlon",
          "2.1AS:kernel-0:2.4.9-e.74.i686",
          "2.1AS:kernel-0:2.4.9-e.74.src",
          "2.1AS:kernel-BOOT-0:2.4.9-e.74.i386",
          "2.1AS:kernel-debug-0:2.4.9-e.74.i686",
          "2.1AS:kernel-doc-0:2.4.9-e.74.i386",
          "2.1AS:kernel-enterprise-0:2.4.9-e.74.i686",
          "2.1AS:kernel-headers-0:2.4.9-e.74.i386",
          "2.1AS:kernel-smp-0:2.4.9-e.74.athlon",
          "2.1AS:kernel-smp-0:2.4.9-e.74.i686",
          "2.1AS:kernel-source-0:2.4.9-e.74.i386",
          "2.1AS:kernel-summit-0:2.4.9-e.74.i686",
          "2.1ES:kernel-0:2.4.9-e.74.athlon",
          "2.1ES:kernel-0:2.4.9-e.74.i686",
          "2.1ES:kernel-0:2.4.9-e.74.src",
          "2.1ES:kernel-BOOT-0:2.4.9-e.74.i386",
          "2.1ES:kernel-debug-0:2.4.9-e.74.i686",
          "2.1ES:kernel-doc-0:2.4.9-e.74.i386",
          "2.1ES:kernel-enterprise-0:2.4.9-e.74.i686",
          "2.1ES:kernel-headers-0:2.4.9-e.74.i386",
          "2.1ES:kernel-smp-0:2.4.9-e.74.athlon",
          "2.1ES:kernel-smp-0:2.4.9-e.74.i686",
          "2.1ES:kernel-source-0:2.4.9-e.74.i386",
          "2.1ES:kernel-summit-0:2.4.9-e.74.i686",
          "2.1WS:kernel-0:2.4.9-e.74.athlon",
          "2.1WS:kernel-0:2.4.9-e.74.i686",
          "2.1WS:kernel-0:2.4.9-e.74.src",
          "2.1WS:kernel-BOOT-0:2.4.9-e.74.i386",
          "2.1WS:kernel-debug-0:2.4.9-e.74.i686",
          "2.1WS:kernel-doc-0:2.4.9-e.74.i386",
          "2.1WS:kernel-enterprise-0:2.4.9-e.74.i686",
          "2.1WS:kernel-headers-0:2.4.9-e.74.i386",
          "2.1WS:kernel-smp-0:2.4.9-e.74.athlon",
          "2.1WS:kernel-smp-0:2.4.9-e.74.i686",
          "2.1WS:kernel-source-0:2.4.9-e.74.i386",
          "2.1WS:kernel-summit-0:2.4.9-e.74.i686"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "Canonical URL",
          "url": "https://access.redhat.com/security/cve/CVE-2008-0007"
        },
        {
          "category": "external",
          "summary": "RHBZ#428961",
          "url": "https://bugzilla.redhat.com/show_bug.cgi?id=428961"
        },
        {
          "category": "external",
          "summary": "https://www.cve.org/CVERecord?id=CVE-2008-0007",
          "url": "https://www.cve.org/CVERecord?id=CVE-2008-0007"
        },
        {
          "category": "external",
          "summary": "https://nvd.nist.gov/vuln/detail/CVE-2008-0007",
          "url": "https://nvd.nist.gov/vuln/detail/CVE-2008-0007"
        }
      ],
      "release_date": "2008-02-08T00:00:00+00:00",
      "remediations": [
        {
          "category": "vendor_fix",
          "date": "2009-01-08T15:47:00+00:00",
          "details": "Before applying this update, make sure that all previously-released errata\nrelevant to your system have been applied.\n\nThis update is available via Red Hat Network. Details on how to use the Red\nHat Network to apply this update are available at\nhttp://kbase.redhat.com/faq/docs/DOC-11259",
          "product_ids": [
            "2.1AS:kernel-0:2.4.9-e.74.athlon",
            "2.1AS:kernel-0:2.4.9-e.74.i686",
            "2.1AS:kernel-0:2.4.9-e.74.src",
            "2.1AS:kernel-BOOT-0:2.4.9-e.74.i386",
            "2.1AS:kernel-debug-0:2.4.9-e.74.i686",
            "2.1AS:kernel-doc-0:2.4.9-e.74.i386",
            "2.1AS:kernel-enterprise-0:2.4.9-e.74.i686",
            "2.1AS:kernel-headers-0:2.4.9-e.74.i386",
            "2.1AS:kernel-smp-0:2.4.9-e.74.athlon",
            "2.1AS:kernel-smp-0:2.4.9-e.74.i686",
            "2.1AS:kernel-source-0:2.4.9-e.74.i386",
            "2.1AS:kernel-summit-0:2.4.9-e.74.i686",
            "2.1ES:kernel-0:2.4.9-e.74.athlon",
            "2.1ES:kernel-0:2.4.9-e.74.i686",
            "2.1ES:kernel-0:2.4.9-e.74.src",
            "2.1ES:kernel-BOOT-0:2.4.9-e.74.i386",
            "2.1ES:kernel-debug-0:2.4.9-e.74.i686",
            "2.1ES:kernel-doc-0:2.4.9-e.74.i386",
            "2.1ES:kernel-enterprise-0:2.4.9-e.74.i686",
            "2.1ES:kernel-headers-0:2.4.9-e.74.i386",
            "2.1ES:kernel-smp-0:2.4.9-e.74.athlon",
            "2.1ES:kernel-smp-0:2.4.9-e.74.i686",
            "2.1ES:kernel-source-0:2.4.9-e.74.i386",
            "2.1ES:kernel-summit-0:2.4.9-e.74.i686",
            "2.1WS:kernel-0:2.4.9-e.74.athlon",
            "2.1WS:kernel-0:2.4.9-e.74.i686",
            "2.1WS:kernel-0:2.4.9-e.74.src",
            "2.1WS:kernel-BOOT-0:2.4.9-e.74.i386",
            "2.1WS:kernel-debug-0:2.4.9-e.74.i686",
            "2.1WS:kernel-doc-0:2.4.9-e.74.i386",
            "2.1WS:kernel-enterprise-0:2.4.9-e.74.i686",
            "2.1WS:kernel-headers-0:2.4.9-e.74.i386",
            "2.1WS:kernel-smp-0:2.4.9-e.74.athlon",
            "2.1WS:kernel-smp-0:2.4.9-e.74.i686",
            "2.1WS:kernel-source-0:2.4.9-e.74.i386",
            "2.1WS:kernel-summit-0:2.4.9-e.74.i686"
          ],
          "restart_required": {
            "category": "none"
          },
          "url": "https://access.redhat.com/errata/RHSA-2009:0001"
        }
      ],
      "threats": [
        {
          "category": "impact",
          "details": "Important"
        }
      ],
      "title": "kernel: insufficient range checks in fault handlers with mremap"
    },
    {
      "cve": "CVE-2008-2136",
      "cwe": {
        "id": "CWE-401",
        "name": "Missing Release of Memory after Effective Lifetime"
      },
      "discovery_date": "2008-05-09T00:00:00+00:00",
      "ids": [
        {
          "system_name": "Red Hat Bugzilla ID",
          "text": "446031"
        }
      ],
      "notes": [
        {
          "category": "description",
          "text": "Memory leak in the ipip6_rcv function in net/ipv6/sit.c in the Linux kernel 2.4 before 2.4.36.5 and 2.6 before 2.6.25.3 allows remote attackers to cause a denial of service (memory consumption) via network traffic to a Simple Internet Transition (SIT) tunnel interface, related to the pskb_may_pull and kfree_skb functions, and management of an skb reference count.",
          "title": "Vulnerability description"
        },
        {
          "category": "summary",
          "text": "kernel: sit memory leak",
          "title": "Vulnerability summary"
        }
      ],
      "product_status": {
        "fixed": [
          "2.1AS:kernel-0:2.4.9-e.74.athlon",
          "2.1AS:kernel-0:2.4.9-e.74.i686",
          "2.1AS:kernel-0:2.4.9-e.74.src",
          "2.1AS:kernel-BOOT-0:2.4.9-e.74.i386",
          "2.1AS:kernel-debug-0:2.4.9-e.74.i686",
          "2.1AS:kernel-doc-0:2.4.9-e.74.i386",
          "2.1AS:kernel-enterprise-0:2.4.9-e.74.i686",
          "2.1AS:kernel-headers-0:2.4.9-e.74.i386",
          "2.1AS:kernel-smp-0:2.4.9-e.74.athlon",
          "2.1AS:kernel-smp-0:2.4.9-e.74.i686",
          "2.1AS:kernel-source-0:2.4.9-e.74.i386",
          "2.1AS:kernel-summit-0:2.4.9-e.74.i686",
          "2.1ES:kernel-0:2.4.9-e.74.athlon",
          "2.1ES:kernel-0:2.4.9-e.74.i686",
          "2.1ES:kernel-0:2.4.9-e.74.src",
          "2.1ES:kernel-BOOT-0:2.4.9-e.74.i386",
          "2.1ES:kernel-debug-0:2.4.9-e.74.i686",
          "2.1ES:kernel-doc-0:2.4.9-e.74.i386",
          "2.1ES:kernel-enterprise-0:2.4.9-e.74.i686",
          "2.1ES:kernel-headers-0:2.4.9-e.74.i386",
          "2.1ES:kernel-smp-0:2.4.9-e.74.athlon",
          "2.1ES:kernel-smp-0:2.4.9-e.74.i686",
          "2.1ES:kernel-source-0:2.4.9-e.74.i386",
          "2.1ES:kernel-summit-0:2.4.9-e.74.i686",
          "2.1WS:kernel-0:2.4.9-e.74.athlon",
          "2.1WS:kernel-0:2.4.9-e.74.i686",
          "2.1WS:kernel-0:2.4.9-e.74.src",
          "2.1WS:kernel-BOOT-0:2.4.9-e.74.i386",
          "2.1WS:kernel-debug-0:2.4.9-e.74.i686",
          "2.1WS:kernel-doc-0:2.4.9-e.74.i386",
          "2.1WS:kernel-enterprise-0:2.4.9-e.74.i686",
          "2.1WS:kernel-headers-0:2.4.9-e.74.i386",
          "2.1WS:kernel-smp-0:2.4.9-e.74.athlon",
          "2.1WS:kernel-smp-0:2.4.9-e.74.i686",
          "2.1WS:kernel-source-0:2.4.9-e.74.i386",
          "2.1WS:kernel-summit-0:2.4.9-e.74.i686"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "Canonical URL",
          "url": "https://access.redhat.com/security/cve/CVE-2008-2136"
        },
        {
          "category": "external",
          "summary": "RHBZ#446031",
          "url": "https://bugzilla.redhat.com/show_bug.cgi?id=446031"
        },
        {
          "category": "external",
          "summary": "https://www.cve.org/CVERecord?id=CVE-2008-2136",
          "url": "https://www.cve.org/CVERecord?id=CVE-2008-2136"
        },
        {
          "category": "external",
          "summary": "https://nvd.nist.gov/vuln/detail/CVE-2008-2136",
          "url": "https://nvd.nist.gov/vuln/detail/CVE-2008-2136"
        }
      ],
      "release_date": "2008-05-09T00:00:00+00:00",
      "remediations": [
        {
          "category": "vendor_fix",
          "date": "2009-01-08T15:47:00+00:00",
          "details": "Before applying this update, make sure that all previously-released errata\nrelevant to your system have been applied.\n\nThis update is available via Red Hat Network. Details on how to use the Red\nHat Network to apply this update are available at\nhttp://kbase.redhat.com/faq/docs/DOC-11259",
          "product_ids": [
            "2.1AS:kernel-0:2.4.9-e.74.athlon",
            "2.1AS:kernel-0:2.4.9-e.74.i686",
            "2.1AS:kernel-0:2.4.9-e.74.src",
            "2.1AS:kernel-BOOT-0:2.4.9-e.74.i386",
            "2.1AS:kernel-debug-0:2.4.9-e.74.i686",
            "2.1AS:kernel-doc-0:2.4.9-e.74.i386",
            "2.1AS:kernel-enterprise-0:2.4.9-e.74.i686",
            "2.1AS:kernel-headers-0:2.4.9-e.74.i386",
            "2.1AS:kernel-smp-0:2.4.9-e.74.athlon",
            "2.1AS:kernel-smp-0:2.4.9-e.74.i686",
            "2.1AS:kernel-source-0:2.4.9-e.74.i386",
            "2.1AS:kernel-summit-0:2.4.9-e.74.i686",
            "2.1ES:kernel-0:2.4.9-e.74.athlon",
            "2.1ES:kernel-0:2.4.9-e.74.i686",
            "2.1ES:kernel-0:2.4.9-e.74.src",
            "2.1ES:kernel-BOOT-0:2.4.9-e.74.i386",
            "2.1ES:kernel-debug-0:2.4.9-e.74.i686",
            "2.1ES:kernel-doc-0:2.4.9-e.74.i386",
            "2.1ES:kernel-enterprise-0:2.4.9-e.74.i686",
            "2.1ES:kernel-headers-0:2.4.9-e.74.i386",
            "2.1ES:kernel-smp-0:2.4.9-e.74.athlon",
            "2.1ES:kernel-smp-0:2.4.9-e.74.i686",
            "2.1ES:kernel-source-0:2.4.9-e.74.i386",
            "2.1ES:kernel-summit-0:2.4.9-e.74.i686",
            "2.1WS:kernel-0:2.4.9-e.74.athlon",
            "2.1WS:kernel-0:2.4.9-e.74.i686",
            "2.1WS:kernel-0:2.4.9-e.74.src",
            "2.1WS:kernel-BOOT-0:2.4.9-e.74.i386",
            "2.1WS:kernel-debug-0:2.4.9-e.74.i686",
            "2.1WS:kernel-doc-0:2.4.9-e.74.i386",
            "2.1WS:kernel-enterprise-0:2.4.9-e.74.i686",
            "2.1WS:kernel-headers-0:2.4.9-e.74.i386",
            "2.1WS:kernel-smp-0:2.4.9-e.74.athlon",
            "2.1WS:kernel-smp-0:2.4.9-e.74.i686",
            "2.1WS:kernel-source-0:2.4.9-e.74.i386",
            "2.1WS:kernel-summit-0:2.4.9-e.74.i686"
          ],
          "restart_required": {
            "category": "none"
          },
          "url": "https://access.redhat.com/errata/RHSA-2009:0001"
        }
      ],
      "threats": [
        {
          "category": "impact",
          "details": "Important"
        }
      ],
      "title": "kernel: sit memory leak"
    },
    {
      "cve": "CVE-2008-3275",
      "discovery_date": "2008-08-05T00:00:00+00:00",
      "ids": [
        {
          "system_name": "Red Hat Bugzilla ID",
          "text": "457858"
        }
      ],
      "notes": [
        {
          "category": "description",
          "text": "The (1) real_lookup and (2) __lookup_hash functions in fs/namei.c in the vfs implementation in the Linux kernel before 2.6.25.15 do not prevent creation of a child dentry for a deleted (aka S_DEAD) directory, which allows local users to cause a denial of service (\"overflow\" of the UBIFS orphan area) via a series of attempted file creations within deleted directories.",
          "title": "Vulnerability description"
        },
        {
          "category": "summary",
          "text": "Linux kernel local filesystem DoS",
          "title": "Vulnerability summary"
        }
      ],
      "product_status": {
        "fixed": [
          "2.1AS:kernel-0:2.4.9-e.74.athlon",
          "2.1AS:kernel-0:2.4.9-e.74.i686",
          "2.1AS:kernel-0:2.4.9-e.74.src",
          "2.1AS:kernel-BOOT-0:2.4.9-e.74.i386",
          "2.1AS:kernel-debug-0:2.4.9-e.74.i686",
          "2.1AS:kernel-doc-0:2.4.9-e.74.i386",
          "2.1AS:kernel-enterprise-0:2.4.9-e.74.i686",
          "2.1AS:kernel-headers-0:2.4.9-e.74.i386",
          "2.1AS:kernel-smp-0:2.4.9-e.74.athlon",
          "2.1AS:kernel-smp-0:2.4.9-e.74.i686",
          "2.1AS:kernel-source-0:2.4.9-e.74.i386",
          "2.1AS:kernel-summit-0:2.4.9-e.74.i686",
          "2.1ES:kernel-0:2.4.9-e.74.athlon",
          "2.1ES:kernel-0:2.4.9-e.74.i686",
          "2.1ES:kernel-0:2.4.9-e.74.src",
          "2.1ES:kernel-BOOT-0:2.4.9-e.74.i386",
          "2.1ES:kernel-debug-0:2.4.9-e.74.i686",
          "2.1ES:kernel-doc-0:2.4.9-e.74.i386",
          "2.1ES:kernel-enterprise-0:2.4.9-e.74.i686",
          "2.1ES:kernel-headers-0:2.4.9-e.74.i386",
          "2.1ES:kernel-smp-0:2.4.9-e.74.athlon",
          "2.1ES:kernel-smp-0:2.4.9-e.74.i686",
          "2.1ES:kernel-source-0:2.4.9-e.74.i386",
          "2.1ES:kernel-summit-0:2.4.9-e.74.i686",
          "2.1WS:kernel-0:2.4.9-e.74.athlon",
          "2.1WS:kernel-0:2.4.9-e.74.i686",
          "2.1WS:kernel-0:2.4.9-e.74.src",
          "2.1WS:kernel-BOOT-0:2.4.9-e.74.i386",
          "2.1WS:kernel-debug-0:2.4.9-e.74.i686",
          "2.1WS:kernel-doc-0:2.4.9-e.74.i386",
          "2.1WS:kernel-enterprise-0:2.4.9-e.74.i686",
          "2.1WS:kernel-headers-0:2.4.9-e.74.i386",
          "2.1WS:kernel-smp-0:2.4.9-e.74.athlon",
          "2.1WS:kernel-smp-0:2.4.9-e.74.i686",
          "2.1WS:kernel-source-0:2.4.9-e.74.i386",
          "2.1WS:kernel-summit-0:2.4.9-e.74.i686"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "Canonical URL",
          "url": "https://access.redhat.com/security/cve/CVE-2008-3275"
        },
        {
          "category": "external",
          "summary": "RHBZ#457858",
          "url": "https://bugzilla.redhat.com/show_bug.cgi?id=457858"
        },
        {
          "category": "external",
          "summary": "https://www.cve.org/CVERecord?id=CVE-2008-3275",
          "url": "https://www.cve.org/CVERecord?id=CVE-2008-3275"
        },
        {
          "category": "external",
          "summary": "https://nvd.nist.gov/vuln/detail/CVE-2008-3275",
          "url": "https://nvd.nist.gov/vuln/detail/CVE-2008-3275"
        }
      ],
      "release_date": "2008-07-02T00:00:00+00:00",
      "remediations": [
        {
          "category": "vendor_fix",
          "date": "2009-01-08T15:47:00+00:00",
          "details": "Before applying this update, make sure that all previously-released errata\nrelevant to your system have been applied.\n\nThis update is available via Red Hat Network. Details on how to use the Red\nHat Network to apply this update are available at\nhttp://kbase.redhat.com/faq/docs/DOC-11259",
          "product_ids": [
            "2.1AS:kernel-0:2.4.9-e.74.athlon",
            "2.1AS:kernel-0:2.4.9-e.74.i686",
            "2.1AS:kernel-0:2.4.9-e.74.src",
            "2.1AS:kernel-BOOT-0:2.4.9-e.74.i386",
            "2.1AS:kernel-debug-0:2.4.9-e.74.i686",
            "2.1AS:kernel-doc-0:2.4.9-e.74.i386",
            "2.1AS:kernel-enterprise-0:2.4.9-e.74.i686",
            "2.1AS:kernel-headers-0:2.4.9-e.74.i386",
            "2.1AS:kernel-smp-0:2.4.9-e.74.athlon",
            "2.1AS:kernel-smp-0:2.4.9-e.74.i686",
            "2.1AS:kernel-source-0:2.4.9-e.74.i386",
            "2.1AS:kernel-summit-0:2.4.9-e.74.i686",
            "2.1ES:kernel-0:2.4.9-e.74.athlon",
            "2.1ES:kernel-0:2.4.9-e.74.i686",
            "2.1ES:kernel-0:2.4.9-e.74.src",
            "2.1ES:kernel-BOOT-0:2.4.9-e.74.i386",
            "2.1ES:kernel-debug-0:2.4.9-e.74.i686",
            "2.1ES:kernel-doc-0:2.4.9-e.74.i386",
            "2.1ES:kernel-enterprise-0:2.4.9-e.74.i686",
            "2.1ES:kernel-headers-0:2.4.9-e.74.i386",
            "2.1ES:kernel-smp-0:2.4.9-e.74.athlon",
            "2.1ES:kernel-smp-0:2.4.9-e.74.i686",
            "2.1ES:kernel-source-0:2.4.9-e.74.i386",
            "2.1ES:kernel-summit-0:2.4.9-e.74.i686",
            "2.1WS:kernel-0:2.4.9-e.74.athlon",
            "2.1WS:kernel-0:2.4.9-e.74.i686",
            "2.1WS:kernel-0:2.4.9-e.74.src",
            "2.1WS:kernel-BOOT-0:2.4.9-e.74.i386",
            "2.1WS:kernel-debug-0:2.4.9-e.74.i686",
            "2.1WS:kernel-doc-0:2.4.9-e.74.i386",
            "2.1WS:kernel-enterprise-0:2.4.9-e.74.i686",
            "2.1WS:kernel-headers-0:2.4.9-e.74.i386",
            "2.1WS:kernel-smp-0:2.4.9-e.74.athlon",
            "2.1WS:kernel-smp-0:2.4.9-e.74.i686",
            "2.1WS:kernel-source-0:2.4.9-e.74.i386",
            "2.1WS:kernel-summit-0:2.4.9-e.74.i686"
          ],
          "restart_required": {
            "category": "none"
          },
          "url": "https://access.redhat.com/errata/RHSA-2009:0001"
        }
      ],
      "threats": [
        {
          "category": "impact",
          "details": "Moderate"
        }
      ],
      "title": "Linux kernel local filesystem DoS"
    },
    {
      "cve": "CVE-2008-3525",
      "discovery_date": "2008-08-26T00:00:00+00:00",
      "ids": [
        {
          "system_name": "Red Hat Bugzilla ID",
          "text": "460401"
        }
      ],
      "notes": [
        {
          "category": "description",
          "text": "The sbni_ioctl function in drivers/net/wan/sbni.c in the wan subsystem in the Linux kernel 2.6.26.3 does not check for the CAP_NET_ADMIN capability before processing a (1) SIOCDEVRESINSTATS, (2) SIOCDEVSHWSTATE, (3) SIOCDEVENSLAVE, or (4) SIOCDEVEMANSIPATE ioctl request, which allows local users to bypass intended capability restrictions.",
          "title": "Vulnerability description"
        },
        {
          "category": "summary",
          "text": "kernel: missing capability checks in sbni_ioctl()",
          "title": "Vulnerability summary"
        }
      ],
      "product_status": {
        "fixed": [
          "2.1AS:kernel-0:2.4.9-e.74.athlon",
          "2.1AS:kernel-0:2.4.9-e.74.i686",
          "2.1AS:kernel-0:2.4.9-e.74.src",
          "2.1AS:kernel-BOOT-0:2.4.9-e.74.i386",
          "2.1AS:kernel-debug-0:2.4.9-e.74.i686",
          "2.1AS:kernel-doc-0:2.4.9-e.74.i386",
          "2.1AS:kernel-enterprise-0:2.4.9-e.74.i686",
          "2.1AS:kernel-headers-0:2.4.9-e.74.i386",
          "2.1AS:kernel-smp-0:2.4.9-e.74.athlon",
          "2.1AS:kernel-smp-0:2.4.9-e.74.i686",
          "2.1AS:kernel-source-0:2.4.9-e.74.i386",
          "2.1AS:kernel-summit-0:2.4.9-e.74.i686",
          "2.1ES:kernel-0:2.4.9-e.74.athlon",
          "2.1ES:kernel-0:2.4.9-e.74.i686",
          "2.1ES:kernel-0:2.4.9-e.74.src",
          "2.1ES:kernel-BOOT-0:2.4.9-e.74.i386",
          "2.1ES:kernel-debug-0:2.4.9-e.74.i686",
          "2.1ES:kernel-doc-0:2.4.9-e.74.i386",
          "2.1ES:kernel-enterprise-0:2.4.9-e.74.i686",
          "2.1ES:kernel-headers-0:2.4.9-e.74.i386",
          "2.1ES:kernel-smp-0:2.4.9-e.74.athlon",
          "2.1ES:kernel-smp-0:2.4.9-e.74.i686",
          "2.1ES:kernel-source-0:2.4.9-e.74.i386",
          "2.1ES:kernel-summit-0:2.4.9-e.74.i686",
          "2.1WS:kernel-0:2.4.9-e.74.athlon",
          "2.1WS:kernel-0:2.4.9-e.74.i686",
          "2.1WS:kernel-0:2.4.9-e.74.src",
          "2.1WS:kernel-BOOT-0:2.4.9-e.74.i386",
          "2.1WS:kernel-debug-0:2.4.9-e.74.i686",
          "2.1WS:kernel-doc-0:2.4.9-e.74.i386",
          "2.1WS:kernel-enterprise-0:2.4.9-e.74.i686",
          "2.1WS:kernel-headers-0:2.4.9-e.74.i386",
          "2.1WS:kernel-smp-0:2.4.9-e.74.athlon",
          "2.1WS:kernel-smp-0:2.4.9-e.74.i686",
          "2.1WS:kernel-source-0:2.4.9-e.74.i386",
          "2.1WS:kernel-summit-0:2.4.9-e.74.i686"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "Canonical URL",
          "url": "https://access.redhat.com/security/cve/CVE-2008-3525"
        },
        {
          "category": "external",
          "summary": "RHBZ#460401",
          "url": "https://bugzilla.redhat.com/show_bug.cgi?id=460401"
        },
        {
          "category": "external",
          "summary": "https://www.cve.org/CVERecord?id=CVE-2008-3525",
          "url": "https://www.cve.org/CVERecord?id=CVE-2008-3525"
        },
        {
          "category": "external",
          "summary": "https://nvd.nist.gov/vuln/detail/CVE-2008-3525",
          "url": "https://nvd.nist.gov/vuln/detail/CVE-2008-3525"
        }
      ],
      "release_date": "2008-08-27T00:00:00+00:00",
      "remediations": [
        {
          "category": "vendor_fix",
          "date": "2009-01-08T15:47:00+00:00",
          "details": "Before applying this update, make sure that all previously-released errata\nrelevant to your system have been applied.\n\nThis update is available via Red Hat Network. Details on how to use the Red\nHat Network to apply this update are available at\nhttp://kbase.redhat.com/faq/docs/DOC-11259",
          "product_ids": [
            "2.1AS:kernel-0:2.4.9-e.74.athlon",
            "2.1AS:kernel-0:2.4.9-e.74.i686",
            "2.1AS:kernel-0:2.4.9-e.74.src",
            "2.1AS:kernel-BOOT-0:2.4.9-e.74.i386",
            "2.1AS:kernel-debug-0:2.4.9-e.74.i686",
            "2.1AS:kernel-doc-0:2.4.9-e.74.i386",
            "2.1AS:kernel-enterprise-0:2.4.9-e.74.i686",
            "2.1AS:kernel-headers-0:2.4.9-e.74.i386",
            "2.1AS:kernel-smp-0:2.4.9-e.74.athlon",
            "2.1AS:kernel-smp-0:2.4.9-e.74.i686",
            "2.1AS:kernel-source-0:2.4.9-e.74.i386",
            "2.1AS:kernel-summit-0:2.4.9-e.74.i686",
            "2.1ES:kernel-0:2.4.9-e.74.athlon",
            "2.1ES:kernel-0:2.4.9-e.74.i686",
            "2.1ES:kernel-0:2.4.9-e.74.src",
            "2.1ES:kernel-BOOT-0:2.4.9-e.74.i386",
            "2.1ES:kernel-debug-0:2.4.9-e.74.i686",
            "2.1ES:kernel-doc-0:2.4.9-e.74.i386",
            "2.1ES:kernel-enterprise-0:2.4.9-e.74.i686",
            "2.1ES:kernel-headers-0:2.4.9-e.74.i386",
            "2.1ES:kernel-smp-0:2.4.9-e.74.athlon",
            "2.1ES:kernel-smp-0:2.4.9-e.74.i686",
            "2.1ES:kernel-source-0:2.4.9-e.74.i386",
            "2.1ES:kernel-summit-0:2.4.9-e.74.i686",
            "2.1WS:kernel-0:2.4.9-e.74.athlon",
            "2.1WS:kernel-0:2.4.9-e.74.i686",
            "2.1WS:kernel-0:2.4.9-e.74.src",
            "2.1WS:kernel-BOOT-0:2.4.9-e.74.i386",
            "2.1WS:kernel-debug-0:2.4.9-e.74.i686",
            "2.1WS:kernel-doc-0:2.4.9-e.74.i386",
            "2.1WS:kernel-enterprise-0:2.4.9-e.74.i686",
            "2.1WS:kernel-headers-0:2.4.9-e.74.i386",
            "2.1WS:kernel-smp-0:2.4.9-e.74.athlon",
            "2.1WS:kernel-smp-0:2.4.9-e.74.i686",
            "2.1WS:kernel-source-0:2.4.9-e.74.i386",
            "2.1WS:kernel-summit-0:2.4.9-e.74.i686"
          ],
          "restart_required": {
            "category": "none"
          },
          "url": "https://access.redhat.com/errata/RHSA-2009:0001"
        }
      ],
      "threats": [
        {
          "category": "impact",
          "details": "Important"
        }
      ],
      "title": "kernel: missing capability checks in sbni_ioctl()"
    },
    {
      "cve": "CVE-2008-4210",
      "discovery_date": "2008-09-24T00:00:00+00:00",
      "ids": [
        {
          "system_name": "Red Hat Bugzilla ID",
          "text": "463661"
        }
      ],
      "notes": [
        {
          "category": "description",
          "text": "fs/open.c in the Linux kernel before 2.6.22 does not properly strip setuid and setgid bits when there is a write to a file, which allows local users to gain the privileges of a different group, and obtain sensitive information or possibly have unspecified other impact, by creating an executable file in a setgid directory through the (1) truncate or (2) ftruncate function in conjunction with memory-mapped I/O.",
          "title": "Vulnerability description"
        },
        {
          "category": "summary",
          "text": "kernel: open() call allows setgid bit when user is not in new file\u0027s group",
          "title": "Vulnerability summary"
        }
      ],
      "product_status": {
        "fixed": [
          "2.1AS:kernel-0:2.4.9-e.74.athlon",
          "2.1AS:kernel-0:2.4.9-e.74.i686",
          "2.1AS:kernel-0:2.4.9-e.74.src",
          "2.1AS:kernel-BOOT-0:2.4.9-e.74.i386",
          "2.1AS:kernel-debug-0:2.4.9-e.74.i686",
          "2.1AS:kernel-doc-0:2.4.9-e.74.i386",
          "2.1AS:kernel-enterprise-0:2.4.9-e.74.i686",
          "2.1AS:kernel-headers-0:2.4.9-e.74.i386",
          "2.1AS:kernel-smp-0:2.4.9-e.74.athlon",
          "2.1AS:kernel-smp-0:2.4.9-e.74.i686",
          "2.1AS:kernel-source-0:2.4.9-e.74.i386",
          "2.1AS:kernel-summit-0:2.4.9-e.74.i686",
          "2.1ES:kernel-0:2.4.9-e.74.athlon",
          "2.1ES:kernel-0:2.4.9-e.74.i686",
          "2.1ES:kernel-0:2.4.9-e.74.src",
          "2.1ES:kernel-BOOT-0:2.4.9-e.74.i386",
          "2.1ES:kernel-debug-0:2.4.9-e.74.i686",
          "2.1ES:kernel-doc-0:2.4.9-e.74.i386",
          "2.1ES:kernel-enterprise-0:2.4.9-e.74.i686",
          "2.1ES:kernel-headers-0:2.4.9-e.74.i386",
          "2.1ES:kernel-smp-0:2.4.9-e.74.athlon",
          "2.1ES:kernel-smp-0:2.4.9-e.74.i686",
          "2.1ES:kernel-source-0:2.4.9-e.74.i386",
          "2.1ES:kernel-summit-0:2.4.9-e.74.i686",
          "2.1WS:kernel-0:2.4.9-e.74.athlon",
          "2.1WS:kernel-0:2.4.9-e.74.i686",
          "2.1WS:kernel-0:2.4.9-e.74.src",
          "2.1WS:kernel-BOOT-0:2.4.9-e.74.i386",
          "2.1WS:kernel-debug-0:2.4.9-e.74.i686",
          "2.1WS:kernel-doc-0:2.4.9-e.74.i386",
          "2.1WS:kernel-enterprise-0:2.4.9-e.74.i686",
          "2.1WS:kernel-headers-0:2.4.9-e.74.i386",
          "2.1WS:kernel-smp-0:2.4.9-e.74.athlon",
          "2.1WS:kernel-smp-0:2.4.9-e.74.i686",
          "2.1WS:kernel-source-0:2.4.9-e.74.i386",
          "2.1WS:kernel-summit-0:2.4.9-e.74.i686"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "Canonical URL",
          "url": "https://access.redhat.com/security/cve/CVE-2008-4210"
        },
        {
          "category": "external",
          "summary": "RHBZ#463661",
          "url": "https://bugzilla.redhat.com/show_bug.cgi?id=463661"
        },
        {
          "category": "external",
          "summary": "https://www.cve.org/CVERecord?id=CVE-2008-4210",
          "url": "https://www.cve.org/CVERecord?id=CVE-2008-4210"
        },
        {
          "category": "external",
          "summary": "https://nvd.nist.gov/vuln/detail/CVE-2008-4210",
          "url": "https://nvd.nist.gov/vuln/detail/CVE-2008-4210"
        }
      ],
      "release_date": "2007-05-02T00:00:00+00:00",
      "remediations": [
        {
          "category": "vendor_fix",
          "date": "2009-01-08T15:47:00+00:00",
          "details": "Before applying this update, make sure that all previously-released errata\nrelevant to your system have been applied.\n\nThis update is available via Red Hat Network. Details on how to use the Red\nHat Network to apply this update are available at\nhttp://kbase.redhat.com/faq/docs/DOC-11259",
          "product_ids": [
            "2.1AS:kernel-0:2.4.9-e.74.athlon",
            "2.1AS:kernel-0:2.4.9-e.74.i686",
            "2.1AS:kernel-0:2.4.9-e.74.src",
            "2.1AS:kernel-BOOT-0:2.4.9-e.74.i386",
            "2.1AS:kernel-debug-0:2.4.9-e.74.i686",
            "2.1AS:kernel-doc-0:2.4.9-e.74.i386",
            "2.1AS:kernel-enterprise-0:2.4.9-e.74.i686",
            "2.1AS:kernel-headers-0:2.4.9-e.74.i386",
            "2.1AS:kernel-smp-0:2.4.9-e.74.athlon",
            "2.1AS:kernel-smp-0:2.4.9-e.74.i686",
            "2.1AS:kernel-source-0:2.4.9-e.74.i386",
            "2.1AS:kernel-summit-0:2.4.9-e.74.i686",
            "2.1ES:kernel-0:2.4.9-e.74.athlon",
            "2.1ES:kernel-0:2.4.9-e.74.i686",
            "2.1ES:kernel-0:2.4.9-e.74.src",
            "2.1ES:kernel-BOOT-0:2.4.9-e.74.i386",
            "2.1ES:kernel-debug-0:2.4.9-e.74.i686",
            "2.1ES:kernel-doc-0:2.4.9-e.74.i386",
            "2.1ES:kernel-enterprise-0:2.4.9-e.74.i686",
            "2.1ES:kernel-headers-0:2.4.9-e.74.i386",
            "2.1ES:kernel-smp-0:2.4.9-e.74.athlon",
            "2.1ES:kernel-smp-0:2.4.9-e.74.i686",
            "2.1ES:kernel-source-0:2.4.9-e.74.i386",
            "2.1ES:kernel-summit-0:2.4.9-e.74.i686",
            "2.1WS:kernel-0:2.4.9-e.74.athlon",
            "2.1WS:kernel-0:2.4.9-e.74.i686",
            "2.1WS:kernel-0:2.4.9-e.74.src",
            "2.1WS:kernel-BOOT-0:2.4.9-e.74.i386",
            "2.1WS:kernel-debug-0:2.4.9-e.74.i686",
            "2.1WS:kernel-doc-0:2.4.9-e.74.i386",
            "2.1WS:kernel-enterprise-0:2.4.9-e.74.i686",
            "2.1WS:kernel-headers-0:2.4.9-e.74.i386",
            "2.1WS:kernel-smp-0:2.4.9-e.74.athlon",
            "2.1WS:kernel-smp-0:2.4.9-e.74.i686",
            "2.1WS:kernel-source-0:2.4.9-e.74.i386",
            "2.1WS:kernel-summit-0:2.4.9-e.74.i686"
          ],
          "restart_required": {
            "category": "none"
          },
          "url": "https://access.redhat.com/errata/RHSA-2009:0001"
        }
      ],
      "threats": [
        {
          "category": "impact",
          "details": "Important"
        }
      ],
      "title": "kernel: open() call allows setgid bit when user is not in new file\u0027s group"
    }
  ]
}

CVE-2008-0007 (GCVE-0-2008-0007)

Vulnerability from cvelistv5 – Published: 2008-02-08 01:00 – Updated: 2024-08-07 07:32

Summary

Linux kernel before 2.6.22.17, when using certain drivers that register a fault handler that does not perform range checks, allows local users to access kernel memory via an out-of-range offset.

Severity ?

No CVSS data available.

CWE

Assigner

redhat

References

URL

Tags

	http://securitytracker.com/id?1019357	vdb-entryx_refsource_SECTRACK
	http://www.securityfocus.com/archive/1/487808/100…	mailing-listx_refsource_BUGTRAQ
	http://lists.opensuse.org/opensuse-security-annou…	vendor-advisoryx_refsource_SUSE
	http://www.kernel.org/pub/linux/kernel/v2.6/Chang…	x_refsource_CONFIRM
	http://www.securityfocus.com/bid/27686	vdb-entryx_refsource_BID
	http://secunia.com/advisories/28806	third-party-advisoryx_refsource_SECUNIA
	http://www.redhat.com/support/errata/RHSA-2008-02…	vendor-advisoryx_refsource_REDHAT
	http://www.ubuntu.com/usn/usn-618-1	vendor-advisoryx_refsource_UBUNTU
	http://secunia.com/advisories/28826	third-party-advisoryx_refsource_SECUNIA
	https://oval.cisecurity.org/repository/search/def…	vdb-entrysignaturex_refsource_OVAL
	http://www.kernel.org/pub/linux/kernel/v2.6/Chang…	x_refsource_CONFIRM
	http://www.debian.org/security/2008/dsa-1565	vendor-advisoryx_refsource_DEBIAN
	http://www.mandriva.com/security/advisories?name=…	vendor-advisoryx_refsource_MANDRIVA
	http://www.debian.org/security/2008/dsa-1504	vendor-advisoryx_refsource_DEBIAN
	http://secunia.com/advisories/30116	third-party-advisoryx_refsource_SECUNIA
	http://wiki.rpath.com/wiki/Advisories:rPSA-2008-0048	x_refsource_CONFIRM
	http://www.redhat.com/support/errata/RHSA-2008-02…	vendor-advisoryx_refsource_REDHAT
	http://lkml.org/lkml/2008/2/6/457	mailing-listx_refsource_MLIST
	http://secunia.com/advisories/30110	third-party-advisoryx_refsource_SECUNIA
	http://www.vupen.com/english/advisories/2008/2222…	vdb-entryx_refsource_VUPEN
	http://secunia.com/advisories/33280	third-party-advisoryx_refsource_SECUNIA
	http://www.mandriva.com/security/advisories?name=…	vendor-advisoryx_refsource_MANDRIVA
	http://www.mandriva.com/security/advisories?name=…	vendor-advisoryx_refsource_MANDRIVA
	http://www.mandriva.com/security/advisories?name=…	vendor-advisoryx_refsource_MANDRIVA
	http://www.vupen.com/english/advisories/2008/0445…	vdb-entryx_refsource_VUPEN
	http://lists.opensuse.org/opensuse-security-annou…	vendor-advisoryx_refsource_SUSE
	http://www.debian.org/security/2008/dsa-1503	vendor-advisoryx_refsource_DEBIAN
	http://secunia.com/advisories/29058	third-party-advisoryx_refsource_SECUNIA
	http://www.redhat.com/support/errata/RHSA-2008-02…	vendor-advisoryx_refsource_REDHAT
	http://www.securityfocus.com/bid/27705	vdb-entryx_refsource_BID
	http://www.redhat.com/support/errata/RHSA-2008-07…	vendor-advisoryx_refsource_REDHAT
	http://secunia.com/advisories/30769	third-party-advisoryx_refsource_SECUNIA
	http://lists.vmware.com/pipermail/security-announ…	mailing-listx_refsource_MLIST
	http://secunia.com/advisories/30018	third-party-advisoryx_refsource_SECUNIA
	http://secunia.com/advisories/31246	third-party-advisoryx_refsource_SECUNIA
	http://secunia.com/advisories/29570	third-party-advisoryx_refsource_SECUNIA
	http://secunia.com/advisories/30112	third-party-advisoryx_refsource_SECUNIA

Date Public ?

2008-02-06 00:00

Show details on NVD website

JSON

To clipboard

{
  "containers": {
    "adp": [
      {
        "providerMetadata": {
          "dateUpdated": "2024-08-07T07:32:23.652Z",
          "orgId": "af854a3a-2127-422b-91ae-364da2661108",
          "shortName": "CVE"
        },
        "references": [
          {
            "name": "1019357",
            "tags": [
              "vdb-entry",
              "x_refsource_SECTRACK",
              "x_transferred"
            ],
            "url": "http://securitytracker.com/id?1019357"
          },
          {
            "name": "20080208 rPSA-2008-0048-1 kernel",
            "tags": [
              "mailing-list",
              "x_refsource_BUGTRAQ",
              "x_transferred"
            ],
            "url": "http://www.securityfocus.com/archive/1/487808/100/0/threaded"
          },
          {
            "name": "SUSE-SA:2008:017",
            "tags": [
              "vendor-advisory",
              "x_refsource_SUSE",
              "x_transferred"
            ],
            "url": "http://lists.opensuse.org/opensuse-security-announce/2008-03/msg00007.html"
          },
          {
            "tags": [
              "x_refsource_CONFIRM",
              "x_transferred"
            ],
            "url": "http://www.kernel.org/pub/linux/kernel/v2.6/ChangeLog-2.6.22.17"
          },
          {
            "name": "27686",
            "tags": [
              "vdb-entry",
              "x_refsource_BID",
              "x_transferred"
            ],
            "url": "http://www.securityfocus.com/bid/27686"
          },
          {
            "name": "28806",
            "tags": [
              "third-party-advisory",
              "x_refsource_SECUNIA",
              "x_transferred"
            ],
            "url": "http://secunia.com/advisories/28806"
          },
          {
            "name": "RHSA-2008:0237",
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT",
              "x_transferred"
            ],
            "url": "http://www.redhat.com/support/errata/RHSA-2008-0237.html"
          },
          {
            "name": "USN-618-1",
            "tags": [
              "vendor-advisory",
              "x_refsource_UBUNTU",
              "x_transferred"
            ],
            "url": "http://www.ubuntu.com/usn/usn-618-1"
          },
          {
            "name": "28826",
            "tags": [
              "third-party-advisory",
              "x_refsource_SECUNIA",
              "x_transferred"
            ],
            "url": "http://secunia.com/advisories/28826"
          },
          {
            "name": "oval:org.mitre.oval:def:9412",
            "tags": [
              "vdb-entry",
              "signature",
              "x_refsource_OVAL",
              "x_transferred"
            ],
            "url": "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A9412"
          },
          {
            "tags": [
              "x_refsource_CONFIRM",
              "x_transferred"
            ],
            "url": "http://www.kernel.org/pub/linux/kernel/v2.6/ChangeLog-2.6.24.1"
          },
          {
            "name": "DSA-1565",
            "tags": [
              "vendor-advisory",
              "x_refsource_DEBIAN",
              "x_transferred"
            ],
            "url": "http://www.debian.org/security/2008/dsa-1565"
          },
          {
            "name": "MDVSA-2008:112",
            "tags": [
              "vendor-advisory",
              "x_refsource_MANDRIVA",
              "x_transferred"
            ],
            "url": "http://www.mandriva.com/security/advisories?name=MDVSA-2008:112"
          },
          {
            "name": "DSA-1504",
            "tags": [
              "vendor-advisory",
              "x_refsource_DEBIAN",
              "x_transferred"
            ],
            "url": "http://www.debian.org/security/2008/dsa-1504"
          },
          {
            "name": "30116",
            "tags": [
              "third-party-advisory",
              "x_refsource_SECUNIA",
              "x_transferred"
            ],
            "url": "http://secunia.com/advisories/30116"
          },
          {
            "tags": [
              "x_refsource_CONFIRM",
              "x_transferred"
            ],
            "url": "http://wiki.rpath.com/wiki/Advisories:rPSA-2008-0048"
          },
          {
            "name": "RHSA-2008:0233",
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT",
              "x_transferred"
            ],
            "url": "http://www.redhat.com/support/errata/RHSA-2008-0233.html"
          },
          {
            "name": "[linux-kernel] 20080206 [patch 60/73] vm audit: add VM_DONTEXPAND to mmap for drivers that need it (CVE-2008-0007)",
            "tags": [
              "mailing-list",
              "x_refsource_MLIST",
              "x_transferred"
            ],
            "url": "http://lkml.org/lkml/2008/2/6/457"
          },
          {
            "name": "30110",
            "tags": [
              "third-party-advisory",
              "x_refsource_SECUNIA",
              "x_transferred"
            ],
            "url": "http://secunia.com/advisories/30110"
          },
          {
            "name": "ADV-2008-2222",
            "tags": [
              "vdb-entry",
              "x_refsource_VUPEN",
              "x_transferred"
            ],
            "url": "http://www.vupen.com/english/advisories/2008/2222/references"
          },
          {
            "name": "33280",
            "tags": [
              "third-party-advisory",
              "x_refsource_SECUNIA",
              "x_transferred"
            ],
            "url": "http://secunia.com/advisories/33280"
          },
          {
            "name": "MDVSA-2008:044",
            "tags": [
              "vendor-advisory",
              "x_refsource_MANDRIVA",
              "x_transferred"
            ],
            "url": "http://www.mandriva.com/security/advisories?name=MDVSA-2008:044"
          },
          {
            "name": "MDVSA-2008:072",
            "tags": [
              "vendor-advisory",
              "x_refsource_MANDRIVA",
              "x_transferred"
            ],
            "url": "http://www.mandriva.com/security/advisories?name=MDVSA-2008:072"
          },
          {
            "name": "MDVSA-2008:174",
            "tags": [
              "vendor-advisory",
              "x_refsource_MANDRIVA",
              "x_transferred"
            ],
            "url": "http://www.mandriva.com/security/advisories?name=MDVSA-2008:174"
          },
          {
            "name": "ADV-2008-0445",
            "tags": [
              "vdb-entry",
              "x_refsource_VUPEN",
              "x_transferred"
            ],
            "url": "http://www.vupen.com/english/advisories/2008/0445/references"
          },
          {
            "name": "SUSE-SA:2008:006",
            "tags": [
              "vendor-advisory",
              "x_refsource_SUSE",
              "x_transferred"
            ],
            "url": "http://lists.opensuse.org/opensuse-security-announce/2008-02/msg00002.html"
          },
          {
            "name": "DSA-1503",
            "tags": [
              "vendor-advisory",
              "x_refsource_DEBIAN",
              "x_transferred"
            ],
            "url": "http://www.debian.org/security/2008/dsa-1503"
          },
          {
            "name": "29058",
            "tags": [
              "third-party-advisory",
              "x_refsource_SECUNIA",
              "x_transferred"
            ],
            "url": "http://secunia.com/advisories/29058"
          },
          {
            "name": "RHSA-2008:0211",
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT",
              "x_transferred"
            ],
            "url": "http://www.redhat.com/support/errata/RHSA-2008-0211.html"
          },
          {
            "name": "27705",
            "tags": [
              "vdb-entry",
              "x_refsource_BID",
              "x_transferred"
            ],
            "url": "http://www.securityfocus.com/bid/27705"
          },
          {
            "name": "RHSA-2008:0787",
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT",
              "x_transferred"
            ],
            "url": "http://www.redhat.com/support/errata/RHSA-2008-0787.html"
          },
          {
            "name": "30769",
            "tags": [
              "third-party-advisory",
              "x_refsource_SECUNIA",
              "x_transferred"
            ],
            "url": "http://secunia.com/advisories/30769"
          },
          {
            "name": "[Security-announce] 20080728 VMSA-2008-00011 Updated ESX service console packages for Samba and vmnix",
            "tags": [
              "mailing-list",
              "x_refsource_MLIST",
              "x_transferred"
            ],
            "url": "http://lists.vmware.com/pipermail/security-announce/2008/000023.html"
          },
          {
            "name": "30018",
            "tags": [
              "third-party-advisory",
              "x_refsource_SECUNIA",
              "x_transferred"
            ],
            "url": "http://secunia.com/advisories/30018"
          },
          {
            "name": "31246",
            "tags": [
              "third-party-advisory",
              "x_refsource_SECUNIA",
              "x_transferred"
            ],
            "url": "http://secunia.com/advisories/31246"
          },
          {
            "name": "29570",
            "tags": [
              "third-party-advisory",
              "x_refsource_SECUNIA",
              "x_transferred"
            ],
            "url": "http://secunia.com/advisories/29570"
          },
          {
            "name": "30112",
            "tags": [
              "third-party-advisory",
              "x_refsource_SECUNIA",
              "x_transferred"
            ],
            "url": "http://secunia.com/advisories/30112"
          }
        ],
        "title": "CVE Program Container"
      }
    ],
    "cna": {
      "affected": [
        {
          "product": "n/a",
          "vendor": "n/a",
          "versions": [
            {
              "status": "affected",
              "version": "n/a"
            }
          ]
        }
      ],
      "datePublic": "2008-02-06T00:00:00.000Z",
      "descriptions": [
        {
          "lang": "en",
          "value": "Linux kernel before 2.6.22.17, when using certain drivers that register a fault handler that does not perform range checks, allows local users to access kernel memory via an out-of-range offset."
        }
      ],
      "problemTypes": [
        {
          "descriptions": [
            {
              "description": "n/a",
              "lang": "en",
              "type": "text"
            }
          ]
        }
      ],
      "providerMetadata": {
        "dateUpdated": "2018-10-15T20:57:01.000Z",
        "orgId": "53f830b8-0a3f-465b-8143-3b8a9948e749",
        "shortName": "redhat"
      },
      "references": [
        {
          "name": "1019357",
          "tags": [
            "vdb-entry",
            "x_refsource_SECTRACK"
          ],
          "url": "http://securitytracker.com/id?1019357"
        },
        {
          "name": "20080208 rPSA-2008-0048-1 kernel",
          "tags": [
            "mailing-list",
            "x_refsource_BUGTRAQ"
          ],
          "url": "http://www.securityfocus.com/archive/1/487808/100/0/threaded"
        },
        {
          "name": "SUSE-SA:2008:017",
          "tags": [
            "vendor-advisory",
            "x_refsource_SUSE"
          ],
          "url": "http://lists.opensuse.org/opensuse-security-announce/2008-03/msg00007.html"
        },
        {
          "tags": [
            "x_refsource_CONFIRM"
          ],
          "url": "http://www.kernel.org/pub/linux/kernel/v2.6/ChangeLog-2.6.22.17"
        },
        {
          "name": "27686",
          "tags": [
            "vdb-entry",
            "x_refsource_BID"
          ],
          "url": "http://www.securityfocus.com/bid/27686"
        },
        {
          "name": "28806",
          "tags": [
            "third-party-advisory",
            "x_refsource_SECUNIA"
          ],
          "url": "http://secunia.com/advisories/28806"
        },
        {
          "name": "RHSA-2008:0237",
          "tags": [
            "vendor-advisory",
            "x_refsource_REDHAT"
          ],
          "url": "http://www.redhat.com/support/errata/RHSA-2008-0237.html"
        },
        {
          "name": "USN-618-1",
          "tags": [
            "vendor-advisory",
            "x_refsource_UBUNTU"
          ],
          "url": "http://www.ubuntu.com/usn/usn-618-1"
        },
        {
          "name": "28826",
          "tags": [
            "third-party-advisory",
            "x_refsource_SECUNIA"
          ],
          "url": "http://secunia.com/advisories/28826"
        },
        {
          "name": "oval:org.mitre.oval:def:9412",
          "tags": [
            "vdb-entry",
            "signature",
            "x_refsource_OVAL"
          ],
          "url": "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A9412"
        },
        {
          "tags": [
            "x_refsource_CONFIRM"
          ],
          "url": "http://www.kernel.org/pub/linux/kernel/v2.6/ChangeLog-2.6.24.1"
        },
        {
          "name": "DSA-1565",
          "tags": [
            "vendor-advisory",
            "x_refsource_DEBIAN"
          ],
          "url": "http://www.debian.org/security/2008/dsa-1565"
        },
        {
          "name": "MDVSA-2008:112",
          "tags": [
            "vendor-advisory",
            "x_refsource_MANDRIVA"
          ],
          "url": "http://www.mandriva.com/security/advisories?name=MDVSA-2008:112"
        },
        {
          "name": "DSA-1504",
          "tags": [
            "vendor-advisory",
            "x_refsource_DEBIAN"
          ],
          "url": "http://www.debian.org/security/2008/dsa-1504"
        },
        {
          "name": "30116",
          "tags": [
            "third-party-advisory",
            "x_refsource_SECUNIA"
          ],
          "url": "http://secunia.com/advisories/30116"
        },
        {
          "tags": [
            "x_refsource_CONFIRM"
          ],
          "url": "http://wiki.rpath.com/wiki/Advisories:rPSA-2008-0048"
        },
        {
          "name": "RHSA-2008:0233",
          "tags": [
            "vendor-advisory",
            "x_refsource_REDHAT"
          ],
          "url": "http://www.redhat.com/support/errata/RHSA-2008-0233.html"
        },
        {
          "name": "[linux-kernel] 20080206 [patch 60/73] vm audit: add VM_DONTEXPAND to mmap for drivers that need it (CVE-2008-0007)",
          "tags": [
            "mailing-list",
            "x_refsource_MLIST"
          ],
          "url": "http://lkml.org/lkml/2008/2/6/457"
        },
        {
          "name": "30110",
          "tags": [
            "third-party-advisory",
            "x_refsource_SECUNIA"
          ],
          "url": "http://secunia.com/advisories/30110"
        },
        {
          "name": "ADV-2008-2222",
          "tags": [
            "vdb-entry",
            "x_refsource_VUPEN"
          ],
          "url": "http://www.vupen.com/english/advisories/2008/2222/references"
        },
        {
          "name": "33280",
          "tags": [
            "third-party-advisory",
            "x_refsource_SECUNIA"
          ],
          "url": "http://secunia.com/advisories/33280"
        },
        {
          "name": "MDVSA-2008:044",
          "tags": [
            "vendor-advisory",
            "x_refsource_MANDRIVA"
          ],
          "url": "http://www.mandriva.com/security/advisories?name=MDVSA-2008:044"
        },
        {
          "name": "MDVSA-2008:072",
          "tags": [
            "vendor-advisory",
            "x_refsource_MANDRIVA"
          ],
          "url": "http://www.mandriva.com/security/advisories?name=MDVSA-2008:072"
        },
        {
          "name": "MDVSA-2008:174",
          "tags": [
            "vendor-advisory",
            "x_refsource_MANDRIVA"
          ],
          "url": "http://www.mandriva.com/security/advisories?name=MDVSA-2008:174"
        },
        {
          "name": "ADV-2008-0445",
          "tags": [
            "vdb-entry",
            "x_refsource_VUPEN"
          ],
          "url": "http://www.vupen.com/english/advisories/2008/0445/references"
        },
        {
          "name": "SUSE-SA:2008:006",
          "tags": [
            "vendor-advisory",
            "x_refsource_SUSE"
          ],
          "url": "http://lists.opensuse.org/opensuse-security-announce/2008-02/msg00002.html"
        },
        {
          "name": "DSA-1503",
          "tags": [
            "vendor-advisory",
            "x_refsource_DEBIAN"
          ],
          "url": "http://www.debian.org/security/2008/dsa-1503"
        },
        {
          "name": "29058",
          "tags": [
            "third-party-advisory",
            "x_refsource_SECUNIA"
          ],
          "url": "http://secunia.com/advisories/29058"
        },
        {
          "name": "RHSA-2008:0211",
          "tags": [
            "vendor-advisory",
            "x_refsource_REDHAT"
          ],
          "url": "http://www.redhat.com/support/errata/RHSA-2008-0211.html"
        },
        {
          "name": "27705",
          "tags": [
            "vdb-entry",
            "x_refsource_BID"
          ],
          "url": "http://www.securityfocus.com/bid/27705"
        },
        {
          "name": "RHSA-2008:0787",
          "tags": [
            "vendor-advisory",
            "x_refsource_REDHAT"
          ],
          "url": "http://www.redhat.com/support/errata/RHSA-2008-0787.html"
        },
        {
          "name": "30769",
          "tags": [
            "third-party-advisory",
            "x_refsource_SECUNIA"
          ],
          "url": "http://secunia.com/advisories/30769"
        },
        {
          "name": "[Security-announce] 20080728 VMSA-2008-00011 Updated ESX service console packages for Samba and vmnix",
          "tags": [
            "mailing-list",
            "x_refsource_MLIST"
          ],
          "url": "http://lists.vmware.com/pipermail/security-announce/2008/000023.html"
        },
        {
          "name": "30018",
          "tags": [
            "third-party-advisory",
            "x_refsource_SECUNIA"
          ],
          "url": "http://secunia.com/advisories/30018"
        },
        {
          "name": "31246",
          "tags": [
            "third-party-advisory",
            "x_refsource_SECUNIA"
          ],
          "url": "http://secunia.com/advisories/31246"
        },
        {
          "name": "29570",
          "tags": [
            "third-party-advisory",
            "x_refsource_SECUNIA"
          ],
          "url": "http://secunia.com/advisories/29570"
        },
        {
          "name": "30112",
          "tags": [
            "third-party-advisory",
            "x_refsource_SECUNIA"
          ],
          "url": "http://secunia.com/advisories/30112"
        }
      ]
    }
  },
  "cveMetadata": {
    "assignerOrgId": "53f830b8-0a3f-465b-8143-3b8a9948e749",
    "assignerShortName": "redhat",
    "cveId": "CVE-2008-0007",
    "datePublished": "2008-02-08T01:00:00.000Z",
    "dateReserved": "2007-12-03T00:00:00.000Z",
    "dateUpdated": "2024-08-07T07:32:23.652Z",
    "state": "PUBLISHED"
  },
  "dataType": "CVE_RECORD",
  "dataVersion": "5.1"
}

CVE-2007-6063 (GCVE-0-2007-6063)

Vulnerability from cvelistv5 – Published: 2007-11-21 00:00 – Updated: 2024-08-07 15:54

Summary

Buffer overflow in the isdn_net_setcfg function in isdn_net.c in Linux kernel 2.6.23 allows local users to have an unknown impact via a crafted argument to the isdn_ioctl function.

Severity ?

No CVSS data available.

CWE

Assigner

mitre

References

URL

Tags

	http://bugzilla.kernel.org/show_bug.cgi?id=9416	x_refsource_CONFIRM
	http://secunia.com/advisories/28806	third-party-advisoryx_refsource_SECUNIA
	http://www.securityfocus.com/bid/26605	vdb-entryx_refsource_BID
	http://www.redhat.com/support/errata/RHSA-2008-01…	vendor-advisoryx_refsource_REDHAT
	http://www.debian.org/security/2007/dsa-1436	vendor-advisoryx_refsource_DEBIAN
	http://www.vupen.com/english/advisories/2007/4046	vdb-entryx_refsource_VUPEN
	http://secunia.com/advisories/28141	third-party-advisoryx_refsource_SECUNIA
	http://secunia.com/advisories/28706	third-party-advisoryx_refsource_SECUNIA
	http://www.mandriva.com/security/advisories?name=…	vendor-advisoryx_refsource_MANDRIVA
	http://www.debian.org/security/2008/dsa-1504	vendor-advisoryx_refsource_DEBIAN
	http://www.mandriva.com/security/advisories?name=…	vendor-advisoryx_refsource_MANDRIVA
	http://secunia.com/advisories/27912	third-party-advisoryx_refsource_SECUNIA
	https://oval.cisecurity.org/repository/search/def…	vdb-entrysignaturex_refsource_OVAL
	http://secunia.com/advisories/33280	third-party-advisoryx_refsource_SECUNIA
	http://secunia.com/advisories/29236	third-party-advisoryx_refsource_SECUNIA
	http://lists.opensuse.org/opensuse-security-annou…	vendor-advisoryx_refsource_SUSE
	http://lists.opensuse.org/opensuse-security-annou…	vendor-advisoryx_refsource_SUSE
	http://www.debian.org/security/2008/dsa-1503	vendor-advisoryx_refsource_DEBIAN
	http://secunia.com/advisories/27842	third-party-advisoryx_refsource_SECUNIA
	http://secunia.com/advisories/28748	third-party-advisoryx_refsource_SECUNIA
	http://www.ubuntu.com/usn/usn-574-1	vendor-advisoryx_refsource_UBUNTU
	http://secunia.com/advisories/29058	third-party-advisoryx_refsource_SECUNIA
	http://www.redhat.com/support/errata/RHSA-2008-09…	vendor-advisoryx_refsource_REDHAT
	http://secunia.com/advisories/28971	third-party-advisoryx_refsource_SECUNIA
	http://www.redhat.com/support/errata/RHSA-2008-07…	vendor-advisoryx_refsource_REDHAT
	http://www.ubuntu.com/usn/usn-578-1	vendor-advisoryx_refsource_UBUNTU
	http://rhn.redhat.com/errata/RHSA-2008-0055.html	vendor-advisoryx_refsource_REDHAT
	https://oval.cisecurity.org/repository/search/def…	vdb-entrysignaturex_refsource_OVAL
	http://secunia.com/advisories/33201	third-party-advisoryx_refsource_SECUNIA

Date Public ?

2007-11-20 00:00

Show details on NVD website

JSON

To clipboard

{
  "containers": {
    "adp": [
      {
        "providerMetadata": {
          "dateUpdated": "2024-08-07T15:54:26.990Z",
          "orgId": "af854a3a-2127-422b-91ae-364da2661108",
          "shortName": "CVE"
        },
        "references": [
          {
            "tags": [
              "x_refsource_CONFIRM",
              "x_transferred"
            ],
            "url": "http://bugzilla.kernel.org/show_bug.cgi?id=9416"
          },
          {
            "name": "28806",
            "tags": [
              "third-party-advisory",
              "x_refsource_SECUNIA",
              "x_transferred"
            ],
            "url": "http://secunia.com/advisories/28806"
          },
          {
            "name": "26605",
            "tags": [
              "vdb-entry",
              "x_refsource_BID",
              "x_transferred"
            ],
            "url": "http://www.securityfocus.com/bid/26605"
          },
          {
            "name": "RHSA-2008:0154",
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT",
              "x_transferred"
            ],
            "url": "http://www.redhat.com/support/errata/RHSA-2008-0154.html"
          },
          {
            "name": "DSA-1436",
            "tags": [
              "vendor-advisory",
              "x_refsource_DEBIAN",
              "x_transferred"
            ],
            "url": "http://www.debian.org/security/2007/dsa-1436"
          },
          {
            "name": "ADV-2007-4046",
            "tags": [
              "vdb-entry",
              "x_refsource_VUPEN",
              "x_transferred"
            ],
            "url": "http://www.vupen.com/english/advisories/2007/4046"
          },
          {
            "name": "28141",
            "tags": [
              "third-party-advisory",
              "x_refsource_SECUNIA",
              "x_transferred"
            ],
            "url": "http://secunia.com/advisories/28141"
          },
          {
            "name": "28706",
            "tags": [
              "third-party-advisory",
              "x_refsource_SECUNIA",
              "x_transferred"
            ],
            "url": "http://secunia.com/advisories/28706"
          },
          {
            "name": "MDVSA-2008:112",
            "tags": [
              "vendor-advisory",
              "x_refsource_MANDRIVA",
              "x_transferred"
            ],
            "url": "http://www.mandriva.com/security/advisories?name=MDVSA-2008:112"
          },
          {
            "name": "DSA-1504",
            "tags": [
              "vendor-advisory",
              "x_refsource_DEBIAN",
              "x_transferred"
            ],
            "url": "http://www.debian.org/security/2008/dsa-1504"
          },
          {
            "name": "MDVSA-2008:008",
            "tags": [
              "vendor-advisory",
              "x_refsource_MANDRIVA",
              "x_transferred"
            ],
            "url": "http://www.mandriva.com/security/advisories?name=MDVSA-2008:008"
          },
          {
            "name": "27912",
            "tags": [
              "third-party-advisory",
              "x_refsource_SECUNIA",
              "x_transferred"
            ],
            "url": "http://secunia.com/advisories/27912"
          },
          {
            "name": "oval:org.mitre.oval:def:9846",
            "tags": [
              "vdb-entry",
              "signature",
              "x_refsource_OVAL",
              "x_transferred"
            ],
            "url": "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A9846"
          },
          {
            "name": "33280",
            "tags": [
              "third-party-advisory",
              "x_refsource_SECUNIA",
              "x_transferred"
            ],
            "url": "http://secunia.com/advisories/33280"
          },
          {
            "name": "29236",
            "tags": [
              "third-party-advisory",
              "x_refsource_SECUNIA",
              "x_transferred"
            ],
            "url": "http://secunia.com/advisories/29236"
          },
          {
            "name": "SUSE-SA:2007:064",
            "tags": [
              "vendor-advisory",
              "x_refsource_SUSE",
              "x_transferred"
            ],
            "url": "http://lists.opensuse.org/opensuse-security-announce/2007-12/msg00001.html"
          },
          {
            "name": "SUSE-SA:2008:006",
            "tags": [
              "vendor-advisory",
              "x_refsource_SUSE",
              "x_transferred"
            ],
            "url": "http://lists.opensuse.org/opensuse-security-announce/2008-02/msg00002.html"
          },
          {
            "name": "DSA-1503",
            "tags": [
              "vendor-advisory",
              "x_refsource_DEBIAN",
              "x_transferred"
            ],
            "url": "http://www.debian.org/security/2008/dsa-1503"
          },
          {
            "name": "27842",
            "tags": [
              "third-party-advisory",
              "x_refsource_SECUNIA",
              "x_transferred"
            ],
            "url": "http://secunia.com/advisories/27842"
          },
          {
            "name": "28748",
            "tags": [
              "third-party-advisory",
              "x_refsource_SECUNIA",
              "x_transferred"
            ],
            "url": "http://secunia.com/advisories/28748"
          },
          {
            "name": "USN-574-1",
            "tags": [
              "vendor-advisory",
              "x_refsource_UBUNTU",
              "x_transferred"
            ],
            "url": "http://www.ubuntu.com/usn/usn-574-1"
          },
          {
            "name": "29058",
            "tags": [
              "third-party-advisory",
              "x_refsource_SECUNIA",
              "x_transferred"
            ],
            "url": "http://secunia.com/advisories/29058"
          },
          {
            "name": "RHSA-2008:0973",
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT",
              "x_transferred"
            ],
            "url": "http://www.redhat.com/support/errata/RHSA-2008-0973.html"
          },
          {
            "name": "28971",
            "tags": [
              "third-party-advisory",
              "x_refsource_SECUNIA",
              "x_transferred"
            ],
            "url": "http://secunia.com/advisories/28971"
          },
          {
            "name": "RHSA-2008:0787",
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT",
              "x_transferred"
            ],
            "url": "http://www.redhat.com/support/errata/RHSA-2008-0787.html"
          },
          {
            "name": "USN-578-1",
            "tags": [
              "vendor-advisory",
              "x_refsource_UBUNTU",
              "x_transferred"
            ],
            "url": "http://www.ubuntu.com/usn/usn-578-1"
          },
          {
            "name": "RHSA-2008:0055",
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT",
              "x_transferred"
            ],
            "url": "http://rhn.redhat.com/errata/RHSA-2008-0055.html"
          },
          {
            "name": "oval:org.mitre.oval:def:6514",
            "tags": [
              "vdb-entry",
              "signature",
              "x_refsource_OVAL",
              "x_transferred"
            ],
            "url": "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A6514"
          },
          {
            "name": "33201",
            "tags": [
              "third-party-advisory",
              "x_refsource_SECUNIA",
              "x_transferred"
            ],
            "url": "http://secunia.com/advisories/33201"
          }
        ],
        "title": "CVE Program Container"
      }
    ],
    "cna": {
      "affected": [
        {
          "product": "n/a",
          "vendor": "n/a",
          "versions": [
            {
              "status": "affected",
              "version": "n/a"
            }
          ]
        }
      ],
      "datePublic": "2007-11-20T00:00:00.000Z",
      "descriptions": [
        {
          "lang": "en",
          "value": "Buffer overflow in the isdn_net_setcfg function in isdn_net.c in Linux kernel 2.6.23 allows local users to have an unknown impact via a crafted argument to the isdn_ioctl function."
        }
      ],
      "problemTypes": [
        {
          "descriptions": [
            {
              "description": "n/a",
              "lang": "en",
              "type": "text"
            }
          ]
        }
      ],
      "providerMetadata": {
        "dateUpdated": "2017-09-28T12:57:01.000Z",
        "orgId": "8254265b-2729-46b6-b9e3-3dfca2d5bfca",
        "shortName": "mitre"
      },
      "references": [
        {
          "tags": [
            "x_refsource_CONFIRM"
          ],
          "url": "http://bugzilla.kernel.org/show_bug.cgi?id=9416"
        },
        {
          "name": "28806",
          "tags": [
            "third-party-advisory",
            "x_refsource_SECUNIA"
          ],
          "url": "http://secunia.com/advisories/28806"
        },
        {
          "name": "26605",
          "tags": [
            "vdb-entry",
            "x_refsource_BID"
          ],
          "url": "http://www.securityfocus.com/bid/26605"
        },
        {
          "name": "RHSA-2008:0154",
          "tags": [
            "vendor-advisory",
            "x_refsource_REDHAT"
          ],
          "url": "http://www.redhat.com/support/errata/RHSA-2008-0154.html"
        },
        {
          "name": "DSA-1436",
          "tags": [
            "vendor-advisory",
            "x_refsource_DEBIAN"
          ],
          "url": "http://www.debian.org/security/2007/dsa-1436"
        },
        {
          "name": "ADV-2007-4046",
          "tags": [
            "vdb-entry",
            "x_refsource_VUPEN"
          ],
          "url": "http://www.vupen.com/english/advisories/2007/4046"
        },
        {
          "name": "28141",
          "tags": [
            "third-party-advisory",
            "x_refsource_SECUNIA"
          ],
          "url": "http://secunia.com/advisories/28141"
        },
        {
          "name": "28706",
          "tags": [
            "third-party-advisory",
            "x_refsource_SECUNIA"
          ],
          "url": "http://secunia.com/advisories/28706"
        },
        {
          "name": "MDVSA-2008:112",
          "tags": [
            "vendor-advisory",
            "x_refsource_MANDRIVA"
          ],
          "url": "http://www.mandriva.com/security/advisories?name=MDVSA-2008:112"
        },
        {
          "name": "DSA-1504",
          "tags": [
            "vendor-advisory",
            "x_refsource_DEBIAN"
          ],
          "url": "http://www.debian.org/security/2008/dsa-1504"
        },
        {
          "name": "MDVSA-2008:008",
          "tags": [
            "vendor-advisory",
            "x_refsource_MANDRIVA"
          ],
          "url": "http://www.mandriva.com/security/advisories?name=MDVSA-2008:008"
        },
        {
          "name": "27912",
          "tags": [
            "third-party-advisory",
            "x_refsource_SECUNIA"
          ],
          "url": "http://secunia.com/advisories/27912"
        },
        {
          "name": "oval:org.mitre.oval:def:9846",
          "tags": [
            "vdb-entry",
            "signature",
            "x_refsource_OVAL"
          ],
          "url": "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A9846"
        },
        {
          "name": "33280",
          "tags": [
            "third-party-advisory",
            "x_refsource_SECUNIA"
          ],
          "url": "http://secunia.com/advisories/33280"
        },
        {
          "name": "29236",
          "tags": [
            "third-party-advisory",
            "x_refsource_SECUNIA"
          ],
          "url": "http://secunia.com/advisories/29236"
        },
        {
          "name": "SUSE-SA:2007:064",
          "tags": [
            "vendor-advisory",
            "x_refsource_SUSE"
          ],
          "url": "http://lists.opensuse.org/opensuse-security-announce/2007-12/msg00001.html"
        },
        {
          "name": "SUSE-SA:2008:006",
          "tags": [
            "vendor-advisory",
            "x_refsource_SUSE"
          ],
          "url": "http://lists.opensuse.org/opensuse-security-announce/2008-02/msg00002.html"
        },
        {
          "name": "DSA-1503",
          "tags": [
            "vendor-advisory",
            "x_refsource_DEBIAN"
          ],
          "url": "http://www.debian.org/security/2008/dsa-1503"
        },
        {
          "name": "27842",
          "tags": [
            "third-party-advisory",
            "x_refsource_SECUNIA"
          ],
          "url": "http://secunia.com/advisories/27842"
        },
        {
          "name": "28748",
          "tags": [
            "third-party-advisory",
            "x_refsource_SECUNIA"
          ],
          "url": "http://secunia.com/advisories/28748"
        },
        {
          "name": "USN-574-1",
          "tags": [
            "vendor-advisory",
            "x_refsource_UBUNTU"
          ],
          "url": "http://www.ubuntu.com/usn/usn-574-1"
        },
        {
          "name": "29058",
          "tags": [
            "third-party-advisory",
            "x_refsource_SECUNIA"
          ],
          "url": "http://secunia.com/advisories/29058"
        },
        {
          "name": "RHSA-2008:0973",
          "tags": [
            "vendor-advisory",
            "x_refsource_REDHAT"
          ],
          "url": "http://www.redhat.com/support/errata/RHSA-2008-0973.html"
        },
        {
          "name": "28971",
          "tags": [
            "third-party-advisory",
            "x_refsource_SECUNIA"
          ],
          "url": "http://secunia.com/advisories/28971"
        },
        {
          "name": "RHSA-2008:0787",
          "tags": [
            "vendor-advisory",
            "x_refsource_REDHAT"
          ],
          "url": "http://www.redhat.com/support/errata/RHSA-2008-0787.html"
        },
        {
          "name": "USN-578-1",
          "tags": [
            "vendor-advisory",
            "x_refsource_UBUNTU"
          ],
          "url": "http://www.ubuntu.com/usn/usn-578-1"
        },
        {
          "name": "RHSA-2008:0055",
          "tags": [
            "vendor-advisory",
            "x_refsource_REDHAT"
          ],
          "url": "http://rhn.redhat.com/errata/RHSA-2008-0055.html"
        },
        {
          "name": "oval:org.mitre.oval:def:6514",
          "tags": [
            "vdb-entry",
            "signature",
            "x_refsource_OVAL"
          ],
          "url": "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A6514"
        },
        {
          "name": "33201",
          "tags": [
            "third-party-advisory",
            "x_refsource_SECUNIA"
          ],
          "url": "http://secunia.com/advisories/33201"
        }
      ],
      "x_legacyV4Record": {
        "CVE_data_meta": {
          "ASSIGNER": "cve@mitre.org",
          "ID": "CVE-2007-6063",
          "STATE": "PUBLIC"
        },
        "affects": {
          "vendor": {
            "vendor_data": [
              {
                "product": {
                  "product_data": [
                    {
                      "product_name": "n/a",
                      "version": {
                        "version_data": [
                          {
                            "version_value": "n/a"
                          }
                        ]
                      }
                    }
                  ]
                },
                "vendor_name": "n/a"
              }
            ]
          }
        },
        "data_format": "MITRE",
        "data_type": "CVE",
        "data_version": "4.0",
        "description": {
          "description_data": [
            {
              "lang": "eng",
              "value": "Buffer overflow in the isdn_net_setcfg function in isdn_net.c in Linux kernel 2.6.23 allows local users to have an unknown impact via a crafted argument to the isdn_ioctl function."
            }
          ]
        },
        "problemtype": {
          "problemtype_data": [
            {
              "description": [
                {
                  "lang": "eng",
                  "value": "n/a"
                }
              ]
            }
          ]
        },
        "references": {
          "reference_data": [
            {
              "name": "http://bugzilla.kernel.org/show_bug.cgi?id=9416",
              "refsource": "CONFIRM",
              "url": "http://bugzilla.kernel.org/show_bug.cgi?id=9416"
            },
            {
              "name": "28806",
              "refsource": "SECUNIA",
              "url": "http://secunia.com/advisories/28806"
            },
            {
              "name": "26605",
              "refsource": "BID",
              "url": "http://www.securityfocus.com/bid/26605"
            },
            {
              "name": "RHSA-2008:0154",
              "refsource": "REDHAT",
              "url": "http://www.redhat.com/support/errata/RHSA-2008-0154.html"
            },
            {
              "name": "DSA-1436",
              "refsource": "DEBIAN",
              "url": "http://www.debian.org/security/2007/dsa-1436"
            },
            {
              "name": "ADV-2007-4046",
              "refsource": "VUPEN",
              "url": "http://www.vupen.com/english/advisories/2007/4046"
            },
            {
              "name": "28141",
              "refsource": "SECUNIA",
              "url": "http://secunia.com/advisories/28141"
            },
            {
              "name": "28706",
              "refsource": "SECUNIA",
              "url": "http://secunia.com/advisories/28706"
            },
            {
              "name": "MDVSA-2008:112",
              "refsource": "MANDRIVA",
              "url": "http://www.mandriva.com/security/advisories?name=MDVSA-2008:112"
            },
            {
              "name": "DSA-1504",
              "refsource": "DEBIAN",
              "url": "http://www.debian.org/security/2008/dsa-1504"
            },
            {
              "name": "MDVSA-2008:008",
              "refsource": "MANDRIVA",
              "url": "http://www.mandriva.com/security/advisories?name=MDVSA-2008:008"
            },
            {
              "name": "27912",
              "refsource": "SECUNIA",
              "url": "http://secunia.com/advisories/27912"
            },
            {
              "name": "oval:org.mitre.oval:def:9846",
              "refsource": "OVAL",
              "url": "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A9846"
            },
            {
              "name": "33280",
              "refsource": "SECUNIA",
              "url": "http://secunia.com/advisories/33280"
            },
            {
              "name": "29236",
              "refsource": "SECUNIA",
              "url": "http://secunia.com/advisories/29236"
            },
            {
              "name": "SUSE-SA:2007:064",
              "refsource": "SUSE",
              "url": "http://lists.opensuse.org/opensuse-security-announce/2007-12/msg00001.html"
            },
            {
              "name": "SUSE-SA:2008:006",
              "refsource": "SUSE",
              "url": "http://lists.opensuse.org/opensuse-security-announce/2008-02/msg00002.html"
            },
            {
              "name": "DSA-1503",
              "refsource": "DEBIAN",
              "url": "http://www.debian.org/security/2008/dsa-1503"
            },
            {
              "name": "27842",
              "refsource": "SECUNIA",
              "url": "http://secunia.com/advisories/27842"
            },
            {
              "name": "28748",
              "refsource": "SECUNIA",
              "url": "http://secunia.com/advisories/28748"
            },
            {
              "name": "USN-574-1",
              "refsource": "UBUNTU",
              "url": "http://www.ubuntu.com/usn/usn-574-1"
            },
            {
              "name": "29058",
              "refsource": "SECUNIA",
              "url": "http://secunia.com/advisories/29058"
            },
            {
              "name": "RHSA-2008:0973",
              "refsource": "REDHAT",
              "url": "http://www.redhat.com/support/errata/RHSA-2008-0973.html"
            },
            {
              "name": "28971",
              "refsource": "SECUNIA",
              "url": "http://secunia.com/advisories/28971"
            },
            {
              "name": "RHSA-2008:0787",
              "refsource": "REDHAT",
              "url": "http://www.redhat.com/support/errata/RHSA-2008-0787.html"
            },
            {
              "name": "USN-578-1",
              "refsource": "UBUNTU",
              "url": "http://www.ubuntu.com/usn/usn-578-1"
            },
            {
              "name": "RHSA-2008:0055",
              "refsource": "REDHAT",
              "url": "http://rhn.redhat.com/errata/RHSA-2008-0055.html"
            },
            {
              "name": "oval:org.mitre.oval:def:6514",
              "refsource": "OVAL",
              "url": "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A6514"
            },
            {
              "name": "33201",
              "refsource": "SECUNIA",
              "url": "http://secunia.com/advisories/33201"
            }
          ]
        }
      }
    }
  },
  "cveMetadata": {
    "assignerOrgId": "8254265b-2729-46b6-b9e3-3dfca2d5bfca",
    "assignerShortName": "mitre",
    "cveId": "CVE-2007-6063",
    "datePublished": "2007-11-21T00:00:00.000Z",
    "dateReserved": "2007-11-20T00:00:00.000Z",
    "dateUpdated": "2024-08-07T15:54:26.990Z",
    "state": "PUBLISHED"
  },
  "dataType": "CVE_RECORD",
  "dataVersion": "5.1"
}

CVE-2007-2172 (GCVE-0-2007-2172)

Vulnerability from cvelistv5 – Published: 2007-04-22 19:00 – Updated: 2024-08-07 13:23

Summary

Severity ?

No CVSS data available.

CWE

Assigner

mitre

References

URL

Tags

	http://www.redhat.com/support/errata/RHSA-2007-03…	vendor-advisoryx_refsource_REDHAT
	http://www.ubuntu.com/usn/usn-464-1	vendor-advisoryx_refsource_UBUNTU
	http://www.redhat.com/support/errata/RHSA-2007-10…	vendor-advisoryx_refsource_REDHAT
	http://secunia.com/advisories/27913	third-party-advisoryx_refsource_SECUNIA
	http://www.debian.org/security/2007/dsa-1363	vendor-advisoryx_refsource_DEBIAN
	http://secunia.com/advisories/26289	third-party-advisoryx_refsource_SECUNIA
	http://www.mail-archive.com/git-commits-head%40vg…	x_refsource_CONFIRM
	http://secunia.com/advisories/25838	third-party-advisoryx_refsource_SECUNIA
	http://www.mandriva.com/security/advisories?name=…	vendor-advisoryx_refsource_MANDRIVA
	http://www.debian.org/security/2008/dsa-1504	vendor-advisoryx_refsource_DEBIAN
	http://www.debian.org/security/2007/dsa-1356	vendor-advisoryx_refsource_DEBIAN
	http://secunia.com/advisories/26647	third-party-advisoryx_refsource_SECUNIA
	http://www.mandriva.com/security/advisories?name=…	vendor-advisoryx_refsource_MANDRIVA
	https://oval.cisecurity.org/repository/search/def…	vdb-entrysignaturex_refsource_OVAL
	http://www.kernel.org/pub/linux/kernel/v2.4/Chang…	x_refsource_CONFIRM
	http://secunia.com/advisories/33280	third-party-advisoryx_refsource_SECUNIA
	http://secunia.com/advisories/25288	third-party-advisoryx_refsource_SECUNIA
	http://secunia.com/advisories/26620	third-party-advisoryx_refsource_SECUNIA
	https://exchange.xforce.ibmcloud.com/vulnerabilit…	vdb-entryx_refsource_XF
	http://www.mandriva.com/security/advisories?name=…	vendor-advisoryx_refsource_MANDRIVA
	http://secunia.com/advisories/25068	third-party-advisoryx_refsource_SECUNIA
	http://www.debian.org/security/2008/dsa-1503	vendor-advisoryx_refsource_DEBIAN
	http://support.avaya.com/elmodocs2/security/ASA-2…	x_refsource_CONFIRM
	http://secunia.com/advisories/25392	third-party-advisoryx_refsource_SECUNIA
	http://secunia.com/advisories/29058	third-party-advisoryx_refsource_SECUNIA
	http://www.redhat.com/support/errata/RHSA-2008-07…	vendor-advisoryx_refsource_REDHAT
	http://secunia.com/advisories/26450	third-party-advisoryx_refsource_SECUNIA
	http://kernel.org/pub/linux/kernel/v2.6/testing/C…	x_refsource_CONFIRM
	http://www.securityfocus.com/bid/23447	vdb-entryx_refsource_BID
	http://www.vupen.com/english/advisories/2007/2690	vdb-entryx_refsource_VUPEN
	http://rhn.redhat.com/errata/RHSA-2007-0488.html	vendor-advisoryx_refsource_REDHAT
	http://www.mail-archive.com/git-commits-head%40vg…	x_refsource_CONFIRM

Date Public ?

2007-03-24 00:00

Show details on NVD website

JSON

To clipboard

{
  "containers": {
    "adp": [
      {
        "providerMetadata": {
          "dateUpdated": "2024-08-07T13:23:51.071Z",
          "orgId": "af854a3a-2127-422b-91ae-364da2661108",
          "shortName": "CVE"
        },
        "references": [
          {
            "name": "RHSA-2007:0347",
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT",
              "x_transferred"
            ],
            "url": "http://www.redhat.com/support/errata/RHSA-2007-0347.html"
          },
          {
            "name": "USN-464-1",
            "tags": [
              "vendor-advisory",
              "x_refsource_UBUNTU",
              "x_transferred"
            ],
            "url": "http://www.ubuntu.com/usn/usn-464-1"
          },
          {
            "name": "RHSA-2007:1049",
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT",
              "x_transferred"
            ],
            "url": "http://www.redhat.com/support/errata/RHSA-2007-1049.html"
          },
          {
            "name": "27913",
            "tags": [
              "third-party-advisory",
              "x_refsource_SECUNIA",
              "x_transferred"
            ],
            "url": "http://secunia.com/advisories/27913"
          },
          {
            "name": "DSA-1363",
            "tags": [
              "vendor-advisory",
              "x_refsource_DEBIAN",
              "x_transferred"
            ],
            "url": "http://www.debian.org/security/2007/dsa-1363"
          },
          {
            "name": "26289",
            "tags": [
              "third-party-advisory",
              "x_refsource_SECUNIA",
              "x_transferred"
            ],
            "url": "http://secunia.com/advisories/26289"
          },
          {
            "tags": [
              "x_refsource_CONFIRM",
              "x_transferred"
            ],
            "url": "http://www.mail-archive.com/git-commits-head%40vger.kernel.org/msg08270.html"
          },
          {
            "name": "25838",
            "tags": [
              "third-party-advisory",
              "x_refsource_SECUNIA",
              "x_transferred"
            ],
            "url": "http://secunia.com/advisories/25838"
          },
          {
            "name": "MDKSA-2007:171",
            "tags": [
              "vendor-advisory",
              "x_refsource_MANDRIVA",
              "x_transferred"
            ],
            "url": "http://www.mandriva.com/security/advisories?name=MDKSA-2007:171"
          },
          {
            "name": "DSA-1504",
            "tags": [
              "vendor-advisory",
              "x_refsource_DEBIAN",
              "x_transferred"
            ],
            "url": "http://www.debian.org/security/2008/dsa-1504"
          },
          {
            "name": "DSA-1356",
            "tags": [
              "vendor-advisory",
              "x_refsource_DEBIAN",
              "x_transferred"
            ],
            "url": "http://www.debian.org/security/2007/dsa-1356"
          },
          {
            "name": "26647",
            "tags": [
              "third-party-advisory",
              "x_refsource_SECUNIA",
              "x_transferred"
            ],
            "url": "http://secunia.com/advisories/26647"
          },
          {
            "name": "MDKSA-2007:216",
            "tags": [
              "vendor-advisory",
              "x_refsource_MANDRIVA",
              "x_transferred"
            ],
            "url": "http://www.mandriva.com/security/advisories?name=MDKSA-2007:216"
          },
          {
            "name": "oval:org.mitre.oval:def:10764",
            "tags": [
              "vdb-entry",
              "signature",
              "x_refsource_OVAL",
              "x_transferred"
            ],
            "url": "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A10764"
          },
          {
            "tags": [
              "x_refsource_CONFIRM",
              "x_transferred"
            ],
            "url": "http://www.kernel.org/pub/linux/kernel/v2.4/ChangeLog-2.4.35"
          },
          {
            "name": "33280",
            "tags": [
              "third-party-advisory",
              "x_refsource_SECUNIA",
              "x_transferred"
            ],
            "url": "http://secunia.com/advisories/33280"
          },
          {
            "name": "25288",
            "tags": [
              "third-party-advisory",
              "x_refsource_SECUNIA",
              "x_transferred"
            ],
            "url": "http://secunia.com/advisories/25288"
          },
          {
            "name": "26620",
            "tags": [
              "third-party-advisory",
              "x_refsource_SECUNIA",
              "x_transferred"
            ],
            "url": "http://secunia.com/advisories/26620"
          },
          {
            "name": "kernel-dnfibprops-fibprops-dos(33979)",
            "tags": [
              "vdb-entry",
              "x_refsource_XF",
              "x_transferred"
            ],
            "url": "https://exchange.xforce.ibmcloud.com/vulnerabilities/33979"
          },
          {
            "name": "MDKSA-2007:196",
            "tags": [
              "vendor-advisory",
              "x_refsource_MANDRIVA",
              "x_transferred"
            ],
            "url": "http://www.mandriva.com/security/advisories?name=MDKSA-2007:196"
          },
          {
            "name": "25068",
            "tags": [
              "third-party-advisory",
              "x_refsource_SECUNIA",
              "x_transferred"
            ],
            "url": "http://secunia.com/advisories/25068"
          },
          {
            "name": "DSA-1503",
            "tags": [
              "vendor-advisory",
              "x_refsource_DEBIAN",
              "x_transferred"
            ],
            "url": "http://www.debian.org/security/2008/dsa-1503"
          },
          {
            "tags": [
              "x_refsource_CONFIRM",
              "x_transferred"
            ],
            "url": "http://support.avaya.com/elmodocs2/security/ASA-2007-287.htm"
          },
          {
            "name": "25392",
            "tags": [
              "third-party-advisory",
              "x_refsource_SECUNIA",
              "x_transferred"
            ],
            "url": "http://secunia.com/advisories/25392"
          },
          {
            "name": "29058",
            "tags": [
              "third-party-advisory",
              "x_refsource_SECUNIA",
              "x_transferred"
            ],
            "url": "http://secunia.com/advisories/29058"
          },
          {
            "name": "RHSA-2008:0787",
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT",
              "x_transferred"
            ],
            "url": "http://www.redhat.com/support/errata/RHSA-2008-0787.html"
          },
          {
            "name": "26450",
            "tags": [
              "third-party-advisory",
              "x_refsource_SECUNIA",
              "x_transferred"
            ],
            "url": "http://secunia.com/advisories/26450"
          },
          {
            "tags": [
              "x_refsource_CONFIRM",
              "x_transferred"
            ],
            "url": "http://kernel.org/pub/linux/kernel/v2.6/testing/ChangeLog-2.6.21-rc6"
          },
          {
            "name": "23447",
            "tags": [
              "vdb-entry",
              "x_refsource_BID",
              "x_transferred"
            ],
            "url": "http://www.securityfocus.com/bid/23447"
          },
          {
            "name": "ADV-2007-2690",
            "tags": [
              "vdb-entry",
              "x_refsource_VUPEN",
              "x_transferred"
            ],
            "url": "http://www.vupen.com/english/advisories/2007/2690"
          },
          {
            "name": "RHSA-2007:0488",
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT",
              "x_transferred"
            ],
            "url": "http://rhn.redhat.com/errata/RHSA-2007-0488.html"
          },
          {
            "tags": [
              "x_refsource_CONFIRM",
              "x_transferred"
            ],
            "url": "http://www.mail-archive.com/git-commits-head%40vger.kernel.org/msg08269.html"
          }
        ],
        "title": "CVE Program Container"
      }
    ],
    "cna": {
      "affected": [
        {
          "product": "n/a",
          "vendor": "n/a",
          "versions": [
            {
              "status": "affected",
              "version": "n/a"
            }
          ]
        }
      ],
      "datePublic": "2007-03-24T00:00:00.000Z",
      "descriptions": [
        {
          "lang": "en",
          "value": "A typo in Linux kernel 2.6 before 2.6.21-rc6 and 2.4 before 2.4.35 causes RTA_MAX to be used as an array size instead of RTN_MAX, which leads to an \"out of bound access\" by the (1) dn_fib_props (dn_fib.c, DECNet) and (2) fib_props (fib_semantics.c, IPv4) functions."
        }
      ],
      "problemTypes": [
        {
          "descriptions": [
            {
              "description": "n/a",
              "lang": "en",
              "type": "text"
            }
          ]
        }
      ],
      "providerMetadata": {
        "dateUpdated": "2017-10-10T00:57:01.000Z",
        "orgId": "8254265b-2729-46b6-b9e3-3dfca2d5bfca",
        "shortName": "mitre"
      },
      "references": [
        {
          "name": "RHSA-2007:0347",
          "tags": [
            "vendor-advisory",
            "x_refsource_REDHAT"
          ],
          "url": "http://www.redhat.com/support/errata/RHSA-2007-0347.html"
        },
        {
          "name": "USN-464-1",
          "tags": [
            "vendor-advisory",
            "x_refsource_UBUNTU"
          ],
          "url": "http://www.ubuntu.com/usn/usn-464-1"
        },
        {
          "name": "RHSA-2007:1049",
          "tags": [
            "vendor-advisory",
            "x_refsource_REDHAT"
          ],
          "url": "http://www.redhat.com/support/errata/RHSA-2007-1049.html"
        },
        {
          "name": "27913",
          "tags": [
            "third-party-advisory",
            "x_refsource_SECUNIA"
          ],
          "url": "http://secunia.com/advisories/27913"
        },
        {
          "name": "DSA-1363",
          "tags": [
            "vendor-advisory",
            "x_refsource_DEBIAN"
          ],
          "url": "http://www.debian.org/security/2007/dsa-1363"
        },
        {
          "name": "26289",
          "tags": [
            "third-party-advisory",
            "x_refsource_SECUNIA"
          ],
          "url": "http://secunia.com/advisories/26289"
        },
        {
          "tags": [
            "x_refsource_CONFIRM"
          ],
          "url": "http://www.mail-archive.com/git-commits-head%40vger.kernel.org/msg08270.html"
        },
        {
          "name": "25838",
          "tags": [
            "third-party-advisory",
            "x_refsource_SECUNIA"
          ],
          "url": "http://secunia.com/advisories/25838"
        },
        {
          "name": "MDKSA-2007:171",
          "tags": [
            "vendor-advisory",
            "x_refsource_MANDRIVA"
          ],
          "url": "http://www.mandriva.com/security/advisories?name=MDKSA-2007:171"
        },
        {
          "name": "DSA-1504",
          "tags": [
            "vendor-advisory",
            "x_refsource_DEBIAN"
          ],
          "url": "http://www.debian.org/security/2008/dsa-1504"
        },
        {
          "name": "DSA-1356",
          "tags": [
            "vendor-advisory",
            "x_refsource_DEBIAN"
          ],
          "url": "http://www.debian.org/security/2007/dsa-1356"
        },
        {
          "name": "26647",
          "tags": [
            "third-party-advisory",
            "x_refsource_SECUNIA"
          ],
          "url": "http://secunia.com/advisories/26647"
        },
        {
          "name": "MDKSA-2007:216",
          "tags": [
            "vendor-advisory",
            "x_refsource_MANDRIVA"
          ],
          "url": "http://www.mandriva.com/security/advisories?name=MDKSA-2007:216"
        },
        {
          "name": "oval:org.mitre.oval:def:10764",
          "tags": [
            "vdb-entry",
            "signature",
            "x_refsource_OVAL"
          ],
          "url": "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A10764"
        },
        {
          "tags": [
            "x_refsource_CONFIRM"
          ],
          "url": "http://www.kernel.org/pub/linux/kernel/v2.4/ChangeLog-2.4.35"
        },
        {
          "name": "33280",
          "tags": [
            "third-party-advisory",
            "x_refsource_SECUNIA"
          ],
          "url": "http://secunia.com/advisories/33280"
        },
        {
          "name": "25288",
          "tags": [
            "third-party-advisory",
            "x_refsource_SECUNIA"
          ],
          "url": "http://secunia.com/advisories/25288"
        },
        {
          "name": "26620",
          "tags": [
            "third-party-advisory",
            "x_refsource_SECUNIA"
          ],
          "url": "http://secunia.com/advisories/26620"
        },
        {
          "name": "kernel-dnfibprops-fibprops-dos(33979)",
          "tags": [
            "vdb-entry",
            "x_refsource_XF"
          ],
          "url": "https://exchange.xforce.ibmcloud.com/vulnerabilities/33979"
        },
        {
          "name": "MDKSA-2007:196",
          "tags": [
            "vendor-advisory",
            "x_refsource_MANDRIVA"
          ],
          "url": "http://www.mandriva.com/security/advisories?name=MDKSA-2007:196"
        },
        {
          "name": "25068",
          "tags": [
            "third-party-advisory",
            "x_refsource_SECUNIA"
          ],
          "url": "http://secunia.com/advisories/25068"
        },
        {
          "name": "DSA-1503",
          "tags": [
            "vendor-advisory",
            "x_refsource_DEBIAN"
          ],
          "url": "http://www.debian.org/security/2008/dsa-1503"
        },
        {
          "tags": [
            "x_refsource_CONFIRM"
          ],
          "url": "http://support.avaya.com/elmodocs2/security/ASA-2007-287.htm"
        },
        {
          "name": "25392",
          "tags": [
            "third-party-advisory",
            "x_refsource_SECUNIA"
          ],
          "url": "http://secunia.com/advisories/25392"
        },
        {
          "name": "29058",
          "tags": [
            "third-party-advisory",
            "x_refsource_SECUNIA"
          ],
          "url": "http://secunia.com/advisories/29058"
        },
        {
          "name": "RHSA-2008:0787",
          "tags": [
            "vendor-advisory",
            "x_refsource_REDHAT"
          ],
          "url": "http://www.redhat.com/support/errata/RHSA-2008-0787.html"
        },
        {
          "name": "26450",
          "tags": [
            "third-party-advisory",
            "x_refsource_SECUNIA"
          ],
          "url": "http://secunia.com/advisories/26450"
        },
        {
          "tags": [
            "x_refsource_CONFIRM"
          ],
          "url": "http://kernel.org/pub/linux/kernel/v2.6/testing/ChangeLog-2.6.21-rc6"
        },
        {
          "name": "23447",
          "tags": [
            "vdb-entry",
            "x_refsource_BID"
          ],
          "url": "http://www.securityfocus.com/bid/23447"
        },
        {
          "name": "ADV-2007-2690",
          "tags": [
            "vdb-entry",
            "x_refsource_VUPEN"
          ],
          "url": "http://www.vupen.com/english/advisories/2007/2690"
        },
        {
          "name": "RHSA-2007:0488",
          "tags": [
            "vendor-advisory",
            "x_refsource_REDHAT"
          ],
          "url": "http://rhn.redhat.com/errata/RHSA-2007-0488.html"
        },
        {
          "tags": [
            "x_refsource_CONFIRM"
          ],
          "url": "http://www.mail-archive.com/git-commits-head%40vger.kernel.org/msg08269.html"
        }
      ],
      "x_legacyV4Record": {
        "CVE_data_meta": {
          "ASSIGNER": "cve@mitre.org",
          "ID": "CVE-2007-2172",
          "STATE": "PUBLIC"
        },
        "affects": {
          "vendor": {
            "vendor_data": [
              {
                "product": {
                  "product_data": [
                    {
                      "product_name": "n/a",
                      "version": {
                        "version_data": [
                          {
                            "version_value": "n/a"
                          }
                        ]
                      }
                    }
                  ]
                },
                "vendor_name": "n/a"
              }
            ]
          }
        },
        "data_format": "MITRE",
        "data_type": "CVE",
        "data_version": "4.0",
        "description": {
          "description_data": [
            {
              "lang": "eng",
              "value": "A typo in Linux kernel 2.6 before 2.6.21-rc6 and 2.4 before 2.4.35 causes RTA_MAX to be used as an array size instead of RTN_MAX, which leads to an \"out of bound access\" by the (1) dn_fib_props (dn_fib.c, DECNet) and (2) fib_props (fib_semantics.c, IPv4) functions."
            }
          ]
        },
        "problemtype": {
          "problemtype_data": [
            {
              "description": [
                {
                  "lang": "eng",
                  "value": "n/a"
                }
              ]
            }
          ]
        },
        "references": {
          "reference_data": [
            {
              "name": "RHSA-2007:0347",
              "refsource": "REDHAT",
              "url": "http://www.redhat.com/support/errata/RHSA-2007-0347.html"
            },
            {
              "name": "USN-464-1",
              "refsource": "UBUNTU",
              "url": "http://www.ubuntu.com/usn/usn-464-1"
            },
            {
              "name": "RHSA-2007:1049",
              "refsource": "REDHAT",
              "url": "http://www.redhat.com/support/errata/RHSA-2007-1049.html"
            },
            {
              "name": "27913",
              "refsource": "SECUNIA",
              "url": "http://secunia.com/advisories/27913"
            },
            {
              "name": "DSA-1363",
              "refsource": "DEBIAN",
              "url": "http://www.debian.org/security/2007/dsa-1363"
            },
            {
              "name": "26289",
              "refsource": "SECUNIA",
              "url": "http://secunia.com/advisories/26289"
            },
            {
              "name": "http://www.mail-archive.com/git-commits-head@vger.kernel.org/msg08270.html",
              "refsource": "CONFIRM",
              "url": "http://www.mail-archive.com/git-commits-head@vger.kernel.org/msg08270.html"
            },
            {
              "name": "25838",
              "refsource": "SECUNIA",
              "url": "http://secunia.com/advisories/25838"
            },
            {
              "name": "MDKSA-2007:171",
              "refsource": "MANDRIVA",
              "url": "http://www.mandriva.com/security/advisories?name=MDKSA-2007:171"
            },
            {
              "name": "DSA-1504",
              "refsource": "DEBIAN",
              "url": "http://www.debian.org/security/2008/dsa-1504"
            },
            {
              "name": "DSA-1356",
              "refsource": "DEBIAN",
              "url": "http://www.debian.org/security/2007/dsa-1356"
            },
            {
              "name": "26647",
              "refsource": "SECUNIA",
              "url": "http://secunia.com/advisories/26647"
            },
            {
              "name": "MDKSA-2007:216",
              "refsource": "MANDRIVA",
              "url": "http://www.mandriva.com/security/advisories?name=MDKSA-2007:216"
            },
            {
              "name": "oval:org.mitre.oval:def:10764",
              "refsource": "OVAL",
              "url": "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A10764"
            },
            {
              "name": "http://www.kernel.org/pub/linux/kernel/v2.4/ChangeLog-2.4.35",
              "refsource": "CONFIRM",
              "url": "http://www.kernel.org/pub/linux/kernel/v2.4/ChangeLog-2.4.35"
            },
            {
              "name": "33280",
              "refsource": "SECUNIA",
              "url": "http://secunia.com/advisories/33280"
            },
            {
              "name": "25288",
              "refsource": "SECUNIA",
              "url": "http://secunia.com/advisories/25288"
            },
            {
              "name": "26620",
              "refsource": "SECUNIA",
              "url": "http://secunia.com/advisories/26620"
            },
            {
              "name": "kernel-dnfibprops-fibprops-dos(33979)",
              "refsource": "XF",
              "url": "https://exchange.xforce.ibmcloud.com/vulnerabilities/33979"
            },
            {
              "name": "MDKSA-2007:196",
              "refsource": "MANDRIVA",
              "url": "http://www.mandriva.com/security/advisories?name=MDKSA-2007:196"
            },
            {
              "name": "25068",
              "refsource": "SECUNIA",
              "url": "http://secunia.com/advisories/25068"
            },
            {
              "name": "DSA-1503",
              "refsource": "DEBIAN",
              "url": "http://www.debian.org/security/2008/dsa-1503"
            },
            {
              "name": "http://support.avaya.com/elmodocs2/security/ASA-2007-287.htm",
              "refsource": "CONFIRM",
              "url": "http://support.avaya.com/elmodocs2/security/ASA-2007-287.htm"
            },
            {
              "name": "25392",
              "refsource": "SECUNIA",
              "url": "http://secunia.com/advisories/25392"
            },
            {
              "name": "29058",
              "refsource": "SECUNIA",
              "url": "http://secunia.com/advisories/29058"
            },
            {
              "name": "RHSA-2008:0787",
              "refsource": "REDHAT",
              "url": "http://www.redhat.com/support/errata/RHSA-2008-0787.html"
            },
            {
              "name": "26450",
              "refsource": "SECUNIA",
              "url": "http://secunia.com/advisories/26450"
            },
            {
              "name": "http://kernel.org/pub/linux/kernel/v2.6/testing/ChangeLog-2.6.21-rc6",
              "refsource": "CONFIRM",
              "url": "http://kernel.org/pub/linux/kernel/v2.6/testing/ChangeLog-2.6.21-rc6"
            },
            {
              "name": "23447",
              "refsource": "BID",
              "url": "http://www.securityfocus.com/bid/23447"
            },
            {
              "name": "ADV-2007-2690",
              "refsource": "VUPEN",
              "url": "http://www.vupen.com/english/advisories/2007/2690"
            },
            {
              "name": "RHSA-2007:0488",
              "refsource": "REDHAT",
              "url": "http://rhn.redhat.com/errata/RHSA-2007-0488.html"
            },
            {
              "name": "http://www.mail-archive.com/git-commits-head@vger.kernel.org/msg08269.html",
              "refsource": "CONFIRM",
              "url": "http://www.mail-archive.com/git-commits-head@vger.kernel.org/msg08269.html"
            }
          ]
        }
      }
    }
  },
  "cveMetadata": {
    "assignerOrgId": "8254265b-2729-46b6-b9e3-3dfca2d5bfca",
    "assignerShortName": "mitre",
    "cveId": "CVE-2007-2172",
    "datePublished": "2007-04-22T19:00:00.000Z",
    "dateReserved": "2007-04-22T00:00:00.000Z",
    "dateUpdated": "2024-08-07T13:23:51.071Z",
    "state": "PUBLISHED"
  },
  "dataType": "CVE_RECORD",
  "dataVersion": "5.1"
}

CVE-2007-6206 (GCVE-0-2007-6206)

Vulnerability from cvelistv5 – Published: 2007-12-04 00:00 – Updated: 2024-08-07 15:54

Summary

Severity ?

No CVSS data available.

CWE

Assigner

mitre

References

URL

Tags

	http://www.securityfocus.com/archive/1/487808/100…	mailing-listx_refsource_BUGTRAQ
	http://secunia.com/advisories/30962	third-party-advisoryx_refsource_SECUNIA
	http://bugzilla.kernel.org/show_bug.cgi?id=3043	x_refsource_CONFIRM
	http://secunia.com/advisories/27908	third-party-advisoryx_refsource_SECUNIA
	http://www.debian.org/security/2007/dsa-1436	vendor-advisoryx_refsource_DEBIAN
	http://secunia.com/advisories/28643	third-party-advisoryx_refsource_SECUNIA
	http://lists.opensuse.org/opensuse-security-annou…	vendor-advisoryx_refsource_SUSE
	http://secunia.com/advisories/28141	third-party-advisoryx_refsource_SECUNIA
	http://secunia.com/advisories/28826	third-party-advisoryx_refsource_SECUNIA
	http://secunia.com/advisories/28706	third-party-advisoryx_refsource_SECUNIA
	http://www.mandriva.com/security/advisories?name=…	vendor-advisoryx_refsource_MANDRIVA
	http://www.debian.org/security/2008/dsa-1504	vendor-advisoryx_refsource_DEBIAN
	https://exchange.xforce.ibmcloud.com/vulnerabilit…	vdb-entryx_refsource_XF
	http://www.securityfocus.com/bid/26701	vdb-entryx_refsource_BID
	http://secunia.com/advisories/28889	third-party-advisoryx_refsource_SECUNIA
	http://wiki.rpath.com/wiki/Advisories:rPSA-2008-0048	x_refsource_CONFIRM
	http://secunia.com/advisories/30110	third-party-advisoryx_refsource_SECUNIA
	http://www.vupen.com/english/advisories/2008/2222…	vdb-entryx_refsource_VUPEN
	http://secunia.com/advisories/33280	third-party-advisoryx_refsource_SECUNIA
	http://www.mandriva.com/security/advisories?name=…	vendor-advisoryx_refsource_MANDRIVA
	http://www.mandriva.com/security/advisories?name=…	vendor-advisoryx_refsource_MANDRIVA
	https://oval.cisecurity.org/repository/search/def…	vdb-entrysignaturex_refsource_OVAL
	http://git.kernel.org/?p=linux/kernel/git/torvald…	x_refsource_CONFIRM
	http://www.debian.org/security/2008/dsa-1503	vendor-advisoryx_refsource_DEBIAN
	http://secunia.com/advisories/28748	third-party-advisoryx_refsource_SECUNIA
	http://www.ubuntu.com/usn/usn-574-1	vendor-advisoryx_refsource_UBUNTU
	http://www.vupen.com/english/advisories/2007/4090	vdb-entryx_refsource_VUPEN
	http://secunia.com/advisories/29058	third-party-advisoryx_refsource_SECUNIA
	http://www.redhat.com/support/errata/RHSA-2008-02…	vendor-advisoryx_refsource_REDHAT
	http://secunia.com/advisories/28971	third-party-advisoryx_refsource_SECUNIA
	http://www.redhat.com/support/errata/RHSA-2008-07…	vendor-advisoryx_refsource_REDHAT
	http://www.redhat.com/support/errata/RHSA-2008-00…	vendor-advisoryx_refsource_REDHAT
	http://lists.vmware.com/pipermail/security-announ…	mailing-listx_refsource_MLIST
	http://lists.opensuse.org/opensuse-security-annou…	vendor-advisoryx_refsource_SUSE
	http://www.ubuntu.com/usn/usn-578-1	vendor-advisoryx_refsource_UBUNTU
	http://secunia.com/advisories/31246	third-party-advisoryx_refsource_SECUNIA
	http://rhn.redhat.com/errata/RHSA-2008-0055.html	vendor-advisoryx_refsource_REDHAT
	http://secunia.com/advisories/30818	third-party-advisoryx_refsource_SECUNIA
	http://lists.opensuse.org/opensuse-security-annou…	vendor-advisoryx_refsource_SUSE

Date Public ?

2007-12-03 00:00

Show details on NVD website

JSON

To clipboard

{
  "containers": {
    "adp": [
      {
        "providerMetadata": {
          "dateUpdated": "2024-08-07T15:54:27.085Z",
          "orgId": "af854a3a-2127-422b-91ae-364da2661108",
          "shortName": "CVE"
        },
        "references": [
          {
            "name": "20080208 rPSA-2008-0048-1 kernel",
            "tags": [
              "mailing-list",
              "x_refsource_BUGTRAQ",
              "x_transferred"
            ],
            "url": "http://www.securityfocus.com/archive/1/487808/100/0/threaded"
          },
          {
            "name": "30962",
            "tags": [
              "third-party-advisory",
              "x_refsource_SECUNIA",
              "x_transferred"
            ],
            "url": "http://secunia.com/advisories/30962"
          },
          {
            "tags": [
              "x_refsource_CONFIRM",
              "x_transferred"
            ],
            "url": "http://bugzilla.kernel.org/show_bug.cgi?id=3043"
          },
          {
            "name": "27908",
            "tags": [
              "third-party-advisory",
              "x_refsource_SECUNIA",
              "x_transferred"
            ],
            "url": "http://secunia.com/advisories/27908"
          },
          {
            "name": "DSA-1436",
            "tags": [
              "vendor-advisory",
              "x_refsource_DEBIAN",
              "x_transferred"
            ],
            "url": "http://www.debian.org/security/2007/dsa-1436"
          },
          {
            "name": "28643",
            "tags": [
              "third-party-advisory",
              "x_refsource_SECUNIA",
              "x_transferred"
            ],
            "url": "http://secunia.com/advisories/28643"
          },
          {
            "name": "SUSE-SA:2008:007",
            "tags": [
              "vendor-advisory",
              "x_refsource_SUSE",
              "x_transferred"
            ],
            "url": "http://lists.opensuse.org/opensuse-security-announce/2008-02/msg00005.html"
          },
          {
            "name": "28141",
            "tags": [
              "third-party-advisory",
              "x_refsource_SECUNIA",
              "x_transferred"
            ],
            "url": "http://secunia.com/advisories/28141"
          },
          {
            "name": "28826",
            "tags": [
              "third-party-advisory",
              "x_refsource_SECUNIA",
              "x_transferred"
            ],
            "url": "http://secunia.com/advisories/28826"
          },
          {
            "name": "28706",
            "tags": [
              "third-party-advisory",
              "x_refsource_SECUNIA",
              "x_transferred"
            ],
            "url": "http://secunia.com/advisories/28706"
          },
          {
            "name": "MDVSA-2008:112",
            "tags": [
              "vendor-advisory",
              "x_refsource_MANDRIVA",
              "x_transferred"
            ],
            "url": "http://www.mandriva.com/security/advisories?name=MDVSA-2008:112"
          },
          {
            "name": "DSA-1504",
            "tags": [
              "vendor-advisory",
              "x_refsource_DEBIAN",
              "x_transferred"
            ],
            "url": "http://www.debian.org/security/2008/dsa-1504"
          },
          {
            "name": "kernel-core-dump-information-disclosure(38841)",
            "tags": [
              "vdb-entry",
              "x_refsource_XF",
              "x_transferred"
            ],
            "url": "https://exchange.xforce.ibmcloud.com/vulnerabilities/38841"
          },
          {
            "name": "26701",
            "tags": [
              "vdb-entry",
              "x_refsource_BID",
              "x_transferred"
            ],
            "url": "http://www.securityfocus.com/bid/26701"
          },
          {
            "name": "28889",
            "tags": [
              "third-party-advisory",
              "x_refsource_SECUNIA",
              "x_transferred"
            ],
            "url": "http://secunia.com/advisories/28889"
          },
          {
            "tags": [
              "x_refsource_CONFIRM",
              "x_transferred"
            ],
            "url": "http://wiki.rpath.com/wiki/Advisories:rPSA-2008-0048"
          },
          {
            "name": "30110",
            "tags": [
              "third-party-advisory",
              "x_refsource_SECUNIA",
              "x_transferred"
            ],
            "url": "http://secunia.com/advisories/30110"
          },
          {
            "name": "ADV-2008-2222",
            "tags": [
              "vdb-entry",
              "x_refsource_VUPEN",
              "x_transferred"
            ],
            "url": "http://www.vupen.com/english/advisories/2008/2222/references"
          },
          {
            "name": "33280",
            "tags": [
              "third-party-advisory",
              "x_refsource_SECUNIA",
              "x_transferred"
            ],
            "url": "http://secunia.com/advisories/33280"
          },
          {
            "name": "MDVSA-2008:086",
            "tags": [
              "vendor-advisory",
              "x_refsource_MANDRIVA",
              "x_transferred"
            ],
            "url": "http://www.mandriva.com/security/advisories?name=MDVSA-2008:086"
          },
          {
            "name": "MDVSA-2008:044",
            "tags": [
              "vendor-advisory",
              "x_refsource_MANDRIVA",
              "x_transferred"
            ],
            "url": "http://www.mandriva.com/security/advisories?name=MDVSA-2008:044"
          },
          {
            "name": "oval:org.mitre.oval:def:10719",
            "tags": [
              "vdb-entry",
              "signature",
              "x_refsource_OVAL",
              "x_transferred"
            ],
            "url": "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A10719"
          },
          {
            "tags": [
              "x_refsource_CONFIRM",
              "x_transferred"
            ],
            "url": "http://git.kernel.org/?p=linux/kernel/git/torvalds/linux-2.6.git%3Ba=commitdiff%3Bh=c46f739dd39db3b07ab5deb4e3ec81e1c04a91af"
          },
          {
            "name": "DSA-1503",
            "tags": [
              "vendor-advisory",
              "x_refsource_DEBIAN",
              "x_transferred"
            ],
            "url": "http://www.debian.org/security/2008/dsa-1503"
          },
          {
            "name": "28748",
            "tags": [
              "third-party-advisory",
              "x_refsource_SECUNIA",
              "x_transferred"
            ],
            "url": "http://secunia.com/advisories/28748"
          },
          {
            "name": "USN-574-1",
            "tags": [
              "vendor-advisory",
              "x_refsource_UBUNTU",
              "x_transferred"
            ],
            "url": "http://www.ubuntu.com/usn/usn-574-1"
          },
          {
            "name": "ADV-2007-4090",
            "tags": [
              "vdb-entry",
              "x_refsource_VUPEN",
              "x_transferred"
            ],
            "url": "http://www.vupen.com/english/advisories/2007/4090"
          },
          {
            "name": "29058",
            "tags": [
              "third-party-advisory",
              "x_refsource_SECUNIA",
              "x_transferred"
            ],
            "url": "http://secunia.com/advisories/29058"
          },
          {
            "name": "RHSA-2008:0211",
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT",
              "x_transferred"
            ],
            "url": "http://www.redhat.com/support/errata/RHSA-2008-0211.html"
          },
          {
            "name": "28971",
            "tags": [
              "third-party-advisory",
              "x_refsource_SECUNIA",
              "x_transferred"
            ],
            "url": "http://secunia.com/advisories/28971"
          },
          {
            "name": "RHSA-2008:0787",
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT",
              "x_transferred"
            ],
            "url": "http://www.redhat.com/support/errata/RHSA-2008-0787.html"
          },
          {
            "name": "RHSA-2008:0089",
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT",
              "x_transferred"
            ],
            "url": "http://www.redhat.com/support/errata/RHSA-2008-0089.html"
          },
          {
            "name": "[Security-announce] 20080728 VMSA-2008-00011 Updated ESX service console packages for Samba and vmnix",
            "tags": [
              "mailing-list",
              "x_refsource_MLIST",
              "x_transferred"
            ],
            "url": "http://lists.vmware.com/pipermail/security-announce/2008/000023.html"
          },
          {
            "name": "SUSE-SA:2008:030",
            "tags": [
              "vendor-advisory",
              "x_refsource_SUSE",
              "x_transferred"
            ],
            "url": "http://lists.opensuse.org/opensuse-security-announce/2008-06/msg00006.html"
          },
          {
            "name": "USN-578-1",
            "tags": [
              "vendor-advisory",
              "x_refsource_UBUNTU",
              "x_transferred"
            ],
            "url": "http://www.ubuntu.com/usn/usn-578-1"
          },
          {
            "name": "31246",
            "tags": [
              "third-party-advisory",
              "x_refsource_SECUNIA",
              "x_transferred"
            ],
            "url": "http://secunia.com/advisories/31246"
          },
          {
            "name": "RHSA-2008:0055",
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT",
              "x_transferred"
            ],
            "url": "http://rhn.redhat.com/errata/RHSA-2008-0055.html"
          },
          {
            "name": "30818",
            "tags": [
              "third-party-advisory",
              "x_refsource_SECUNIA",
              "x_transferred"
            ],
            "url": "http://secunia.com/advisories/30818"
          },
          {
            "name": "SUSE-SA:2008:032",
            "tags": [
              "vendor-advisory",
              "x_refsource_SUSE",
              "x_transferred"
            ],
            "url": "http://lists.opensuse.org/opensuse-security-announce/2008-07/msg00002.html"
          }
        ],
        "title": "CVE Program Container"
      }
    ],
    "cna": {
      "affected": [
        {
          "product": "n/a",
          "vendor": "n/a",
          "versions": [
            {
              "status": "affected",
              "version": "n/a"
            }
          ]
        }
      ],
      "datePublic": "2007-12-03T00:00:00.000Z",
      "descriptions": [
        {
          "lang": "en",
          "value": "The do_coredump function in fs/exec.c in Linux kernel 2.4.x and 2.6.x up to 2.6.24-rc3, and possibly other versions, does not change the UID of a core dump file if it exists before a root process creates a core dump in the same location, which might allow local users to obtain sensitive information."
        }
      ],
      "problemTypes": [
        {
          "descriptions": [
            {
              "description": "n/a",
              "lang": "en",
              "type": "text"
            }
          ]
        }
      ],
      "providerMetadata": {
        "dateUpdated": "2018-10-15T20:57:01.000Z",
        "orgId": "8254265b-2729-46b6-b9e3-3dfca2d5bfca",
        "shortName": "mitre"
      },
      "references": [
        {
          "name": "20080208 rPSA-2008-0048-1 kernel",
          "tags": [
            "mailing-list",
            "x_refsource_BUGTRAQ"
          ],
          "url": "http://www.securityfocus.com/archive/1/487808/100/0/threaded"
        },
        {
          "name": "30962",
          "tags": [
            "third-party-advisory",
            "x_refsource_SECUNIA"
          ],
          "url": "http://secunia.com/advisories/30962"
        },
        {
          "tags": [
            "x_refsource_CONFIRM"
          ],
          "url": "http://bugzilla.kernel.org/show_bug.cgi?id=3043"
        },
        {
          "name": "27908",
          "tags": [
            "third-party-advisory",
            "x_refsource_SECUNIA"
          ],
          "url": "http://secunia.com/advisories/27908"
        },
        {
          "name": "DSA-1436",
          "tags": [
            "vendor-advisory",
            "x_refsource_DEBIAN"
          ],
          "url": "http://www.debian.org/security/2007/dsa-1436"
        },
        {
          "name": "28643",
          "tags": [
            "third-party-advisory",
            "x_refsource_SECUNIA"
          ],
          "url": "http://secunia.com/advisories/28643"
        },
        {
          "name": "SUSE-SA:2008:007",
          "tags": [
            "vendor-advisory",
            "x_refsource_SUSE"
          ],
          "url": "http://lists.opensuse.org/opensuse-security-announce/2008-02/msg00005.html"
        },
        {
          "name": "28141",
          "tags": [
            "third-party-advisory",
            "x_refsource_SECUNIA"
          ],
          "url": "http://secunia.com/advisories/28141"
        },
        {
          "name": "28826",
          "tags": [
            "third-party-advisory",
            "x_refsource_SECUNIA"
          ],
          "url": "http://secunia.com/advisories/28826"
        },
        {
          "name": "28706",
          "tags": [
            "third-party-advisory",
            "x_refsource_SECUNIA"
          ],
          "url": "http://secunia.com/advisories/28706"
        },
        {
          "name": "MDVSA-2008:112",
          "tags": [
            "vendor-advisory",
            "x_refsource_MANDRIVA"
          ],
          "url": "http://www.mandriva.com/security/advisories?name=MDVSA-2008:112"
        },
        {
          "name": "DSA-1504",
          "tags": [
            "vendor-advisory",
            "x_refsource_DEBIAN"
          ],
          "url": "http://www.debian.org/security/2008/dsa-1504"
        },
        {
          "name": "kernel-core-dump-information-disclosure(38841)",
          "tags": [
            "vdb-entry",
            "x_refsource_XF"
          ],
          "url": "https://exchange.xforce.ibmcloud.com/vulnerabilities/38841"
        },
        {
          "name": "26701",
          "tags": [
            "vdb-entry",
            "x_refsource_BID"
          ],
          "url": "http://www.securityfocus.com/bid/26701"
        },
        {
          "name": "28889",
          "tags": [
            "third-party-advisory",
            "x_refsource_SECUNIA"
          ],
          "url": "http://secunia.com/advisories/28889"
        },
        {
          "tags": [
            "x_refsource_CONFIRM"
          ],
          "url": "http://wiki.rpath.com/wiki/Advisories:rPSA-2008-0048"
        },
        {
          "name": "30110",
          "tags": [
            "third-party-advisory",
            "x_refsource_SECUNIA"
          ],
          "url": "http://secunia.com/advisories/30110"
        },
        {
          "name": "ADV-2008-2222",
          "tags": [
            "vdb-entry",
            "x_refsource_VUPEN"
          ],
          "url": "http://www.vupen.com/english/advisories/2008/2222/references"
        },
        {
          "name": "33280",
          "tags": [
            "third-party-advisory",
            "x_refsource_SECUNIA"
          ],
          "url": "http://secunia.com/advisories/33280"
        },
        {
          "name": "MDVSA-2008:086",
          "tags": [
            "vendor-advisory",
            "x_refsource_MANDRIVA"
          ],
          "url": "http://www.mandriva.com/security/advisories?name=MDVSA-2008:086"
        },
        {
          "name": "MDVSA-2008:044",
          "tags": [
            "vendor-advisory",
            "x_refsource_MANDRIVA"
          ],
          "url": "http://www.mandriva.com/security/advisories?name=MDVSA-2008:044"
        },
        {
          "name": "oval:org.mitre.oval:def:10719",
          "tags": [
            "vdb-entry",
            "signature",
            "x_refsource_OVAL"
          ],
          "url": "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A10719"
        },
        {
          "tags": [
            "x_refsource_CONFIRM"
          ],
          "url": "http://git.kernel.org/?p=linux/kernel/git/torvalds/linux-2.6.git%3Ba=commitdiff%3Bh=c46f739dd39db3b07ab5deb4e3ec81e1c04a91af"
        },
        {
          "name": "DSA-1503",
          "tags": [
            "vendor-advisory",
            "x_refsource_DEBIAN"
          ],
          "url": "http://www.debian.org/security/2008/dsa-1503"
        },
        {
          "name": "28748",
          "tags": [
            "third-party-advisory",
            "x_refsource_SECUNIA"
          ],
          "url": "http://secunia.com/advisories/28748"
        },
        {
          "name": "USN-574-1",
          "tags": [
            "vendor-advisory",
            "x_refsource_UBUNTU"
          ],
          "url": "http://www.ubuntu.com/usn/usn-574-1"
        },
        {
          "name": "ADV-2007-4090",
          "tags": [
            "vdb-entry",
            "x_refsource_VUPEN"
          ],
          "url": "http://www.vupen.com/english/advisories/2007/4090"
        },
        {
          "name": "29058",
          "tags": [
            "third-party-advisory",
            "x_refsource_SECUNIA"
          ],
          "url": "http://secunia.com/advisories/29058"
        },
        {
          "name": "RHSA-2008:0211",
          "tags": [
            "vendor-advisory",
            "x_refsource_REDHAT"
          ],
          "url": "http://www.redhat.com/support/errata/RHSA-2008-0211.html"
        },
        {
          "name": "28971",
          "tags": [
            "third-party-advisory",
            "x_refsource_SECUNIA"
          ],
          "url": "http://secunia.com/advisories/28971"
        },
        {
          "name": "RHSA-2008:0787",
          "tags": [
            "vendor-advisory",
            "x_refsource_REDHAT"
          ],
          "url": "http://www.redhat.com/support/errata/RHSA-2008-0787.html"
        },
        {
          "name": "RHSA-2008:0089",
          "tags": [
            "vendor-advisory",
            "x_refsource_REDHAT"
          ],
          "url": "http://www.redhat.com/support/errata/RHSA-2008-0089.html"
        },
        {
          "name": "[Security-announce] 20080728 VMSA-2008-00011 Updated ESX service console packages for Samba and vmnix",
          "tags": [
            "mailing-list",
            "x_refsource_MLIST"
          ],
          "url": "http://lists.vmware.com/pipermail/security-announce/2008/000023.html"
        },
        {
          "name": "SUSE-SA:2008:030",
          "tags": [
            "vendor-advisory",
            "x_refsource_SUSE"
          ],
          "url": "http://lists.opensuse.org/opensuse-security-announce/2008-06/msg00006.html"
        },
        {
          "name": "USN-578-1",
          "tags": [
            "vendor-advisory",
            "x_refsource_UBUNTU"
          ],
          "url": "http://www.ubuntu.com/usn/usn-578-1"
        },
        {
          "name": "31246",
          "tags": [
            "third-party-advisory",
            "x_refsource_SECUNIA"
          ],
          "url": "http://secunia.com/advisories/31246"
        },
        {
          "name": "RHSA-2008:0055",
          "tags": [
            "vendor-advisory",
            "x_refsource_REDHAT"
          ],
          "url": "http://rhn.redhat.com/errata/RHSA-2008-0055.html"
        },
        {
          "name": "30818",
          "tags": [
            "third-party-advisory",
            "x_refsource_SECUNIA"
          ],
          "url": "http://secunia.com/advisories/30818"
        },
        {
          "name": "SUSE-SA:2008:032",
          "tags": [
            "vendor-advisory",
            "x_refsource_SUSE"
          ],
          "url": "http://lists.opensuse.org/opensuse-security-announce/2008-07/msg00002.html"
        }
      ],
      "x_legacyV4Record": {
        "CVE_data_meta": {
          "ASSIGNER": "cve@mitre.org",
          "ID": "CVE-2007-6206",
          "STATE": "PUBLIC"
        },
        "affects": {
          "vendor": {
            "vendor_data": [
              {
                "product": {
                  "product_data": [
                    {
                      "product_name": "n/a",
                      "version": {
                        "version_data": [
                          {
                            "version_value": "n/a"
                          }
                        ]
                      }
                    }
                  ]
                },
                "vendor_name": "n/a"
              }
            ]
          }
        },
        "data_format": "MITRE",
        "data_type": "CVE",
        "data_version": "4.0",
        "description": {
          "description_data": [
            {
              "lang": "eng",
              "value": "The do_coredump function in fs/exec.c in Linux kernel 2.4.x and 2.6.x up to 2.6.24-rc3, and possibly other versions, does not change the UID of a core dump file if it exists before a root process creates a core dump in the same location, which might allow local users to obtain sensitive information."
            }
          ]
        },
        "problemtype": {
          "problemtype_data": [
            {
              "description": [
                {
                  "lang": "eng",
                  "value": "n/a"
                }
              ]
            }
          ]
        },
        "references": {
          "reference_data": [
            {
              "name": "20080208 rPSA-2008-0048-1 kernel",
              "refsource": "BUGTRAQ",
              "url": "http://www.securityfocus.com/archive/1/487808/100/0/threaded"
            },
            {
              "name": "30962",
              "refsource": "SECUNIA",
              "url": "http://secunia.com/advisories/30962"
            },
            {
              "name": "http://bugzilla.kernel.org/show_bug.cgi?id=3043",
              "refsource": "CONFIRM",
              "url": "http://bugzilla.kernel.org/show_bug.cgi?id=3043"
            },
            {
              "name": "27908",
              "refsource": "SECUNIA",
              "url": "http://secunia.com/advisories/27908"
            },
            {
              "name": "DSA-1436",
              "refsource": "DEBIAN",
              "url": "http://www.debian.org/security/2007/dsa-1436"
            },
            {
              "name": "28643",
              "refsource": "SECUNIA",
              "url": "http://secunia.com/advisories/28643"
            },
            {
              "name": "SUSE-SA:2008:007",
              "refsource": "SUSE",
              "url": "http://lists.opensuse.org/opensuse-security-announce/2008-02/msg00005.html"
            },
            {
              "name": "28141",
              "refsource": "SECUNIA",
              "url": "http://secunia.com/advisories/28141"
            },
            {
              "name": "28826",
              "refsource": "SECUNIA",
              "url": "http://secunia.com/advisories/28826"
            },
            {
              "name": "28706",
              "refsource": "SECUNIA",
              "url": "http://secunia.com/advisories/28706"
            },
            {
              "name": "MDVSA-2008:112",
              "refsource": "MANDRIVA",
              "url": "http://www.mandriva.com/security/advisories?name=MDVSA-2008:112"
            },
            {
              "name": "DSA-1504",
              "refsource": "DEBIAN",
              "url": "http://www.debian.org/security/2008/dsa-1504"
            },
            {
              "name": "kernel-core-dump-information-disclosure(38841)",
              "refsource": "XF",
              "url": "https://exchange.xforce.ibmcloud.com/vulnerabilities/38841"
            },
            {
              "name": "26701",
              "refsource": "BID",
              "url": "http://www.securityfocus.com/bid/26701"
            },
            {
              "name": "28889",
              "refsource": "SECUNIA",
              "url": "http://secunia.com/advisories/28889"
            },
            {
              "name": "http://wiki.rpath.com/wiki/Advisories:rPSA-2008-0048",
              "refsource": "CONFIRM",
              "url": "http://wiki.rpath.com/wiki/Advisories:rPSA-2008-0048"
            },
            {
              "name": "30110",
              "refsource": "SECUNIA",
              "url": "http://secunia.com/advisories/30110"
            },
            {
              "name": "ADV-2008-2222",
              "refsource": "VUPEN",
              "url": "http://www.vupen.com/english/advisories/2008/2222/references"
            },
            {
              "name": "33280",
              "refsource": "SECUNIA",
              "url": "http://secunia.com/advisories/33280"
            },
            {
              "name": "MDVSA-2008:086",
              "refsource": "MANDRIVA",
              "url": "http://www.mandriva.com/security/advisories?name=MDVSA-2008:086"
            },
            {
              "name": "MDVSA-2008:044",
              "refsource": "MANDRIVA",
              "url": "http://www.mandriva.com/security/advisories?name=MDVSA-2008:044"
            },
            {
              "name": "oval:org.mitre.oval:def:10719",
              "refsource": "OVAL",
              "url": "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A10719"
            },
            {
              "name": "http://git.kernel.org/?p=linux/kernel/git/torvalds/linux-2.6.git;a=commitdiff;h=c46f739dd39db3b07ab5deb4e3ec81e1c04a91af",
              "refsource": "CONFIRM",
              "url": "http://git.kernel.org/?p=linux/kernel/git/torvalds/linux-2.6.git;a=commitdiff;h=c46f739dd39db3b07ab5deb4e3ec81e1c04a91af"
            },
            {
              "name": "DSA-1503",
              "refsource": "DEBIAN",
              "url": "http://www.debian.org/security/2008/dsa-1503"
            },
            {
              "name": "28748",
              "refsource": "SECUNIA",
              "url": "http://secunia.com/advisories/28748"
            },
            {
              "name": "USN-574-1",
              "refsource": "UBUNTU",
              "url": "http://www.ubuntu.com/usn/usn-574-1"
            },
            {
              "name": "ADV-2007-4090",
              "refsource": "VUPEN",
              "url": "http://www.vupen.com/english/advisories/2007/4090"
            },
            {
              "name": "29058",
              "refsource": "SECUNIA",
              "url": "http://secunia.com/advisories/29058"
            },
            {
              "name": "RHSA-2008:0211",
              "refsource": "REDHAT",
              "url": "http://www.redhat.com/support/errata/RHSA-2008-0211.html"
            },
            {
              "name": "28971",
              "refsource": "SECUNIA",
              "url": "http://secunia.com/advisories/28971"
            },
            {
              "name": "RHSA-2008:0787",
              "refsource": "REDHAT",
              "url": "http://www.redhat.com/support/errata/RHSA-2008-0787.html"
            },
            {
              "name": "RHSA-2008:0089",
              "refsource": "REDHAT",
              "url": "http://www.redhat.com/support/errata/RHSA-2008-0089.html"
            },
            {
              "name": "[Security-announce] 20080728 VMSA-2008-00011 Updated ESX service console packages for Samba and vmnix",
              "refsource": "MLIST",
              "url": "http://lists.vmware.com/pipermail/security-announce/2008/000023.html"
            },
            {
              "name": "SUSE-SA:2008:030",
              "refsource": "SUSE",
              "url": "http://lists.opensuse.org/opensuse-security-announce/2008-06/msg00006.html"
            },
            {
              "name": "USN-578-1",
              "refsource": "UBUNTU",
              "url": "http://www.ubuntu.com/usn/usn-578-1"
            },
            {
              "name": "31246",
              "refsource": "SECUNIA",
              "url": "http://secunia.com/advisories/31246"
            },
            {
              "name": "RHSA-2008:0055",
              "refsource": "REDHAT",
              "url": "http://rhn.redhat.com/errata/RHSA-2008-0055.html"
            },
            {
              "name": "30818",
              "refsource": "SECUNIA",
              "url": "http://secunia.com/advisories/30818"
            },
            {
              "name": "SUSE-SA:2008:032",
              "refsource": "SUSE",
              "url": "http://lists.opensuse.org/opensuse-security-announce/2008-07/msg00002.html"
            }
          ]
        }
      }
    }
  },
  "cveMetadata": {
    "assignerOrgId": "8254265b-2729-46b6-b9e3-3dfca2d5bfca",
    "assignerShortName": "mitre",
    "cveId": "CVE-2007-6206",
    "datePublished": "2007-12-04T00:00:00.000Z",
    "dateReserved": "2007-12-03T00:00:00.000Z",
    "dateUpdated": "2024-08-07T15:54:27.085Z",
    "state": "PUBLISHED"
  },
  "dataType": "CVE_RECORD",
  "dataVersion": "5.1"
}

CVE-2008-2136 (GCVE-0-2008-2136)

Vulnerability from cvelistv5 – Published: 2008-05-16 06:54 – Updated: 2024-08-07 08:49

Summary

Severity ?

No CVSS data available.

CWE

Assigner

mitre

References

URL

Tags

	http://www.securitytracker.com/id?1020118	vdb-entryx_refsource_SECTRACK
	http://secunia.com/advisories/30276	third-party-advisoryx_refsource_SECUNIA
	http://secunia.com/advisories/30962	third-party-advisoryx_refsource_SECUNIA
	http://kernel.org/pub/linux/kernel/v2.6/ChangeLog…	x_refsource_CONFIRM
	http://wiki.rpath.com/wiki/Advisories:rPSA-2008-0169	x_refsource_CONFIRM
	http://secunia.com/advisories/31198	third-party-advisoryx_refsource_SECUNIA
	http://secunia.com/advisories/30368	third-party-advisoryx_refsource_SECUNIA
	http://www.mandriva.com/security/advisories?name=…	vendor-advisoryx_refsource_MANDRIVA
	http://secunia.com/advisories/31341	third-party-advisoryx_refsource_SECUNIA
	http://www.kernel.org/pub/linux/kernel/v2.4/Chang…	x_refsource_CONFIRM
	http://www.kernel.org/pub/linux/kernel/v2.6/Chang…	x_refsource_CONFIRM
	http://www.vupen.com/english/advisories/2008/1716…	vdb-entryx_refsource_VUPEN
	http://www.redhat.com/support/errata/RHSA-2008-06…	vendor-advisoryx_refsource_REDHAT
	http://secunia.com/advisories/30499	third-party-advisoryx_refsource_SECUNIA
	https://exchange.xforce.ibmcloud.com/vulnerabilit…	vdb-entryx_refsource_XF
	http://secunia.com/advisories/30198	third-party-advisoryx_refsource_SECUNIA
	http://www.debian.org/security/2008/dsa-1588	vendor-advisoryx_refsource_DEBIAN
	http://secunia.com/advisories/33280	third-party-advisoryx_refsource_SECUNIA
	http://secunia.com/advisories/31689	third-party-advisoryx_refsource_SECUNIA
	http://www.securityfocus.com/bid/29235	vdb-entryx_refsource_BID
	http://www.redhat.com/support/errata/RHSA-2008-05…	vendor-advisoryx_refsource_REDHAT
	https://oval.cisecurity.org/repository/search/def…	vdb-entrysignaturex_refsource_OVAL
	https://oval.cisecurity.org/repository/search/def…	vdb-entrysignaturex_refsource_OVAL
	http://marc.info/?l=linux-netdev&m=121031533024912&w=2	mailing-listx_refsource_MLIST
	http://secunia.com/advisories/30241	third-party-advisoryx_refsource_SECUNIA
	http://www.mandriva.com/security/advisories?name=…	vendor-advisoryx_refsource_MANDRIVA
	http://secunia.com/advisories/31107	third-party-advisoryx_refsource_SECUNIA
	http://www.redhat.com/support/errata/RHSA-2008-09…	vendor-advisoryx_refsource_REDHAT
	http://support.avaya.com/elmodocs2/security/ASA-2…	x_refsource_CONFIRM
	http://www.redhat.com/support/errata/RHSA-2008-06…	vendor-advisoryx_refsource_REDHAT
	http://secunia.com/advisories/31628	third-party-advisoryx_refsource_SECUNIA
	http://www.ubuntu.com/usn/usn-625-1	vendor-advisoryx_refsource_UBUNTU
	https://www.redhat.com/archives/fedora-package-an…	vendor-advisoryx_refsource_FEDORA
	http://www.redhat.com/support/errata/RHSA-2008-07…	vendor-advisoryx_refsource_REDHAT
	http://www.vupen.com/english/advisories/2008/1543…	vdb-entryx_refsource_VUPEN
	http://lists.opensuse.org/opensuse-security-annou…	vendor-advisoryx_refsource_SUSE
	http://secunia.com/advisories/30818	third-party-advisoryx_refsource_SECUNIA
	http://secunia.com/advisories/33201	third-party-advisoryx_refsource_SECUNIA
	http://lists.opensuse.org/opensuse-security-annou…	vendor-advisoryx_refsource_SUSE

Date Public ?

2008-05-09 00:00

Show details on NVD website

JSON

To clipboard

{
  "containers": {
    "adp": [
      {
        "providerMetadata": {
          "dateUpdated": "2024-08-07T08:49:58.458Z",
          "orgId": "af854a3a-2127-422b-91ae-364da2661108",
          "shortName": "CVE"
        },
        "references": [
          {
            "name": "1020118",
            "tags": [
              "vdb-entry",
              "x_refsource_SECTRACK",
              "x_transferred"
            ],
            "url": "http://www.securitytracker.com/id?1020118"
          },
          {
            "name": "30276",
            "tags": [
              "third-party-advisory",
              "x_refsource_SECUNIA",
              "x_transferred"
            ],
            "url": "http://secunia.com/advisories/30276"
          },
          {
            "name": "30962",
            "tags": [
              "third-party-advisory",
              "x_refsource_SECUNIA",
              "x_transferred"
            ],
            "url": "http://secunia.com/advisories/30962"
          },
          {
            "tags": [
              "x_refsource_CONFIRM",
              "x_transferred"
            ],
            "url": "http://kernel.org/pub/linux/kernel/v2.6/ChangeLog-2.6.25.3"
          },
          {
            "tags": [
              "x_refsource_CONFIRM",
              "x_transferred"
            ],
            "url": "http://wiki.rpath.com/wiki/Advisories:rPSA-2008-0169"
          },
          {
            "name": "31198",
            "tags": [
              "third-party-advisory",
              "x_refsource_SECUNIA",
              "x_transferred"
            ],
            "url": "http://secunia.com/advisories/31198"
          },
          {
            "name": "30368",
            "tags": [
              "third-party-advisory",
              "x_refsource_SECUNIA",
              "x_transferred"
            ],
            "url": "http://secunia.com/advisories/30368"
          },
          {
            "name": "MDVSA-2008:167",
            "tags": [
              "vendor-advisory",
              "x_refsource_MANDRIVA",
              "x_transferred"
            ],
            "url": "http://www.mandriva.com/security/advisories?name=MDVSA-2008:167"
          },
          {
            "name": "31341",
            "tags": [
              "third-party-advisory",
              "x_refsource_SECUNIA",
              "x_transferred"
            ],
            "url": "http://secunia.com/advisories/31341"
          },
          {
            "tags": [
              "x_refsource_CONFIRM",
              "x_transferred"
            ],
            "url": "http://www.kernel.org/pub/linux/kernel/v2.4/ChangeLog-2.4.36.5"
          },
          {
            "tags": [
              "x_refsource_CONFIRM",
              "x_transferred"
            ],
            "url": "http://www.kernel.org/pub/linux/kernel/v2.6/ChangeLog-2.6.25.3"
          },
          {
            "name": "ADV-2008-1716",
            "tags": [
              "vdb-entry",
              "x_refsource_VUPEN",
              "x_transferred"
            ],
            "url": "http://www.vupen.com/english/advisories/2008/1716/references"
          },
          {
            "name": "RHSA-2008:0607",
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT",
              "x_transferred"
            ],
            "url": "http://www.redhat.com/support/errata/RHSA-2008-0607.html"
          },
          {
            "name": "30499",
            "tags": [
              "third-party-advisory",
              "x_refsource_SECUNIA",
              "x_transferred"
            ],
            "url": "http://secunia.com/advisories/30499"
          },
          {
            "name": "linux-kernel-ipip6rcv-dos(42451)",
            "tags": [
              "vdb-entry",
              "x_refsource_XF",
              "x_transferred"
            ],
            "url": "https://exchange.xforce.ibmcloud.com/vulnerabilities/42451"
          },
          {
            "name": "30198",
            "tags": [
              "third-party-advisory",
              "x_refsource_SECUNIA",
              "x_transferred"
            ],
            "url": "http://secunia.com/advisories/30198"
          },
          {
            "name": "DSA-1588",
            "tags": [
              "vendor-advisory",
              "x_refsource_DEBIAN",
              "x_transferred"
            ],
            "url": "http://www.debian.org/security/2008/dsa-1588"
          },
          {
            "name": "33280",
            "tags": [
              "third-party-advisory",
              "x_refsource_SECUNIA",
              "x_transferred"
            ],
            "url": "http://secunia.com/advisories/33280"
          },
          {
            "name": "31689",
            "tags": [
              "third-party-advisory",
              "x_refsource_SECUNIA",
              "x_transferred"
            ],
            "url": "http://secunia.com/advisories/31689"
          },
          {
            "name": "29235",
            "tags": [
              "vdb-entry",
              "x_refsource_BID",
              "x_transferred"
            ],
            "url": "http://www.securityfocus.com/bid/29235"
          },
          {
            "name": "RHSA-2008:0585",
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT",
              "x_transferred"
            ],
            "url": "http://www.redhat.com/support/errata/RHSA-2008-0585.html"
          },
          {
            "name": "oval:org.mitre.oval:def:6503",
            "tags": [
              "vdb-entry",
              "signature",
              "x_refsource_OVAL",
              "x_transferred"
            ],
            "url": "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A6503"
          },
          {
            "name": "oval:org.mitre.oval:def:11038",
            "tags": [
              "vdb-entry",
              "signature",
              "x_refsource_OVAL",
              "x_transferred"
            ],
            "url": "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A11038"
          },
          {
            "name": "[linux-kernel] 20080509 Re: When should kfree_skb be used?",
            "tags": [
              "mailing-list",
              "x_refsource_MLIST",
              "x_transferred"
            ],
            "url": "http://marc.info/?l=linux-netdev\u0026m=121031533024912\u0026w=2"
          },
          {
            "name": "30241",
            "tags": [
              "third-party-advisory",
              "x_refsource_SECUNIA",
              "x_transferred"
            ],
            "url": "http://secunia.com/advisories/30241"
          },
          {
            "name": "MDVSA-2008:174",
            "tags": [
              "vendor-advisory",
              "x_refsource_MANDRIVA",
              "x_transferred"
            ],
            "url": "http://www.mandriva.com/security/advisories?name=MDVSA-2008:174"
          },
          {
            "name": "31107",
            "tags": [
              "third-party-advisory",
              "x_refsource_SECUNIA",
              "x_transferred"
            ],
            "url": "http://secunia.com/advisories/31107"
          },
          {
            "name": "RHSA-2008:0973",
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT",
              "x_transferred"
            ],
            "url": "http://www.redhat.com/support/errata/RHSA-2008-0973.html"
          },
          {
            "tags": [
              "x_refsource_CONFIRM",
              "x_transferred"
            ],
            "url": "http://support.avaya.com/elmodocs2/security/ASA-2008-362.htm"
          },
          {
            "name": "RHSA-2008:0612",
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT",
              "x_transferred"
            ],
            "url": "http://www.redhat.com/support/errata/RHSA-2008-0612.html"
          },
          {
            "name": "31628",
            "tags": [
              "third-party-advisory",
              "x_refsource_SECUNIA",
              "x_transferred"
            ],
            "url": "http://secunia.com/advisories/31628"
          },
          {
            "name": "USN-625-1",
            "tags": [
              "vendor-advisory",
              "x_refsource_UBUNTU",
              "x_transferred"
            ],
            "url": "http://www.ubuntu.com/usn/usn-625-1"
          },
          {
            "name": "FEDORA-2008-3949",
            "tags": [
              "vendor-advisory",
              "x_refsource_FEDORA",
              "x_transferred"
            ],
            "url": "https://www.redhat.com/archives/fedora-package-announce/2008-May/msg00294.html"
          },
          {
            "name": "RHSA-2008:0787",
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT",
              "x_transferred"
            ],
            "url": "http://www.redhat.com/support/errata/RHSA-2008-0787.html"
          },
          {
            "name": "ADV-2008-1543",
            "tags": [
              "vdb-entry",
              "x_refsource_VUPEN",
              "x_transferred"
            ],
            "url": "http://www.vupen.com/english/advisories/2008/1543/references"
          },
          {
            "name": "SUSE-SA:2008:030",
            "tags": [
              "vendor-advisory",
              "x_refsource_SUSE",
              "x_transferred"
            ],
            "url": "http://lists.opensuse.org/opensuse-security-announce/2008-06/msg00006.html"
          },
          {
            "name": "30818",
            "tags": [
              "third-party-advisory",
              "x_refsource_SECUNIA",
              "x_transferred"
            ],
            "url": "http://secunia.com/advisories/30818"
          },
          {
            "name": "33201",
            "tags": [
              "third-party-advisory",
              "x_refsource_SECUNIA",
              "x_transferred"
            ],
            "url": "http://secunia.com/advisories/33201"
          },
          {
            "name": "SUSE-SA:2008:032",
            "tags": [
              "vendor-advisory",
              "x_refsource_SUSE",
              "x_transferred"
            ],
            "url": "http://lists.opensuse.org/opensuse-security-announce/2008-07/msg00002.html"
          }
        ],
        "title": "CVE Program Container"
      }
    ],
    "cna": {
      "affected": [
        {
          "product": "n/a",
          "vendor": "n/a",
          "versions": [
            {
              "status": "affected",
              "version": "n/a"
            }
          ]
        }
      ],
      "datePublic": "2008-05-09T00:00:00.000Z",
      "descriptions": [
        {
          "lang": "en",
          "value": "Memory leak in the ipip6_rcv function in net/ipv6/sit.c in the Linux kernel 2.4 before 2.4.36.5 and 2.6 before 2.6.25.3 allows remote attackers to cause a denial of service (memory consumption) via network traffic to a Simple Internet Transition (SIT) tunnel interface, related to the pskb_may_pull and kfree_skb functions, and management of an skb reference count."
        }
      ],
      "problemTypes": [
        {
          "descriptions": [
            {
              "description": "n/a",
              "lang": "en",
              "type": "text"
            }
          ]
        }
      ],
      "providerMetadata": {
        "dateUpdated": "2017-09-28T12:57:01.000Z",
        "orgId": "8254265b-2729-46b6-b9e3-3dfca2d5bfca",
        "shortName": "mitre"
      },
      "references": [
        {
          "name": "1020118",
          "tags": [
            "vdb-entry",
            "x_refsource_SECTRACK"
          ],
          "url": "http://www.securitytracker.com/id?1020118"
        },
        {
          "name": "30276",
          "tags": [
            "third-party-advisory",
            "x_refsource_SECUNIA"
          ],
          "url": "http://secunia.com/advisories/30276"
        },
        {
          "name": "30962",
          "tags": [
            "third-party-advisory",
            "x_refsource_SECUNIA"
          ],
          "url": "http://secunia.com/advisories/30962"
        },
        {
          "tags": [
            "x_refsource_CONFIRM"
          ],
          "url": "http://kernel.org/pub/linux/kernel/v2.6/ChangeLog-2.6.25.3"
        },
        {
          "tags": [
            "x_refsource_CONFIRM"
          ],
          "url": "http://wiki.rpath.com/wiki/Advisories:rPSA-2008-0169"
        },
        {
          "name": "31198",
          "tags": [
            "third-party-advisory",
            "x_refsource_SECUNIA"
          ],
          "url": "http://secunia.com/advisories/31198"
        },
        {
          "name": "30368",
          "tags": [
            "third-party-advisory",
            "x_refsource_SECUNIA"
          ],
          "url": "http://secunia.com/advisories/30368"
        },
        {
          "name": "MDVSA-2008:167",
          "tags": [
            "vendor-advisory",
            "x_refsource_MANDRIVA"
          ],
          "url": "http://www.mandriva.com/security/advisories?name=MDVSA-2008:167"
        },
        {
          "name": "31341",
          "tags": [
            "third-party-advisory",
            "x_refsource_SECUNIA"
          ],
          "url": "http://secunia.com/advisories/31341"
        },
        {
          "tags": [
            "x_refsource_CONFIRM"
          ],
          "url": "http://www.kernel.org/pub/linux/kernel/v2.4/ChangeLog-2.4.36.5"
        },
        {
          "tags": [
            "x_refsource_CONFIRM"
          ],
          "url": "http://www.kernel.org/pub/linux/kernel/v2.6/ChangeLog-2.6.25.3"
        },
        {
          "name": "ADV-2008-1716",
          "tags": [
            "vdb-entry",
            "x_refsource_VUPEN"
          ],
          "url": "http://www.vupen.com/english/advisories/2008/1716/references"
        },
        {
          "name": "RHSA-2008:0607",
          "tags": [
            "vendor-advisory",
            "x_refsource_REDHAT"
          ],
          "url": "http://www.redhat.com/support/errata/RHSA-2008-0607.html"
        },
        {
          "name": "30499",
          "tags": [
            "third-party-advisory",
            "x_refsource_SECUNIA"
          ],
          "url": "http://secunia.com/advisories/30499"
        },
        {
          "name": "linux-kernel-ipip6rcv-dos(42451)",
          "tags": [
            "vdb-entry",
            "x_refsource_XF"
          ],
          "url": "https://exchange.xforce.ibmcloud.com/vulnerabilities/42451"
        },
        {
          "name": "30198",
          "tags": [
            "third-party-advisory",
            "x_refsource_SECUNIA"
          ],
          "url": "http://secunia.com/advisories/30198"
        },
        {
          "name": "DSA-1588",
          "tags": [
            "vendor-advisory",
            "x_refsource_DEBIAN"
          ],
          "url": "http://www.debian.org/security/2008/dsa-1588"
        },
        {
          "name": "33280",
          "tags": [
            "third-party-advisory",
            "x_refsource_SECUNIA"
          ],
          "url": "http://secunia.com/advisories/33280"
        },
        {
          "name": "31689",
          "tags": [
            "third-party-advisory",
            "x_refsource_SECUNIA"
          ],
          "url": "http://secunia.com/advisories/31689"
        },
        {
          "name": "29235",
          "tags": [
            "vdb-entry",
            "x_refsource_BID"
          ],
          "url": "http://www.securityfocus.com/bid/29235"
        },
        {
          "name": "RHSA-2008:0585",
          "tags": [
            "vendor-advisory",
            "x_refsource_REDHAT"
          ],
          "url": "http://www.redhat.com/support/errata/RHSA-2008-0585.html"
        },
        {
          "name": "oval:org.mitre.oval:def:6503",
          "tags": [
            "vdb-entry",
            "signature",
            "x_refsource_OVAL"
          ],
          "url": "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A6503"
        },
        {
          "name": "oval:org.mitre.oval:def:11038",
          "tags": [
            "vdb-entry",
            "signature",
            "x_refsource_OVAL"
          ],
          "url": "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A11038"
        },
        {
          "name": "[linux-kernel] 20080509 Re: When should kfree_skb be used?",
          "tags": [
            "mailing-list",
            "x_refsource_MLIST"
          ],
          "url": "http://marc.info/?l=linux-netdev\u0026m=121031533024912\u0026w=2"
        },
        {
          "name": "30241",
          "tags": [
            "third-party-advisory",
            "x_refsource_SECUNIA"
          ],
          "url": "http://secunia.com/advisories/30241"
        },
        {
          "name": "MDVSA-2008:174",
          "tags": [
            "vendor-advisory",
            "x_refsource_MANDRIVA"
          ],
          "url": "http://www.mandriva.com/security/advisories?name=MDVSA-2008:174"
        },
        {
          "name": "31107",
          "tags": [
            "third-party-advisory",
            "x_refsource_SECUNIA"
          ],
          "url": "http://secunia.com/advisories/31107"
        },
        {
          "name": "RHSA-2008:0973",
          "tags": [
            "vendor-advisory",
            "x_refsource_REDHAT"
          ],
          "url": "http://www.redhat.com/support/errata/RHSA-2008-0973.html"
        },
        {
          "tags": [
            "x_refsource_CONFIRM"
          ],
          "url": "http://support.avaya.com/elmodocs2/security/ASA-2008-362.htm"
        },
        {
          "name": "RHSA-2008:0612",
          "tags": [
            "vendor-advisory",
            "x_refsource_REDHAT"
          ],
          "url": "http://www.redhat.com/support/errata/RHSA-2008-0612.html"
        },
        {
          "name": "31628",
          "tags": [
            "third-party-advisory",
            "x_refsource_SECUNIA"
          ],
          "url": "http://secunia.com/advisories/31628"
        },
        {
          "name": "USN-625-1",
          "tags": [
            "vendor-advisory",
            "x_refsource_UBUNTU"
          ],
          "url": "http://www.ubuntu.com/usn/usn-625-1"
        },
        {
          "name": "FEDORA-2008-3949",
          "tags": [
            "vendor-advisory",
            "x_refsource_FEDORA"
          ],
          "url": "https://www.redhat.com/archives/fedora-package-announce/2008-May/msg00294.html"
        },
        {
          "name": "RHSA-2008:0787",
          "tags": [
            "vendor-advisory",
            "x_refsource_REDHAT"
          ],
          "url": "http://www.redhat.com/support/errata/RHSA-2008-0787.html"
        },
        {
          "name": "ADV-2008-1543",
          "tags": [
            "vdb-entry",
            "x_refsource_VUPEN"
          ],
          "url": "http://www.vupen.com/english/advisories/2008/1543/references"
        },
        {
          "name": "SUSE-SA:2008:030",
          "tags": [
            "vendor-advisory",
            "x_refsource_SUSE"
          ],
          "url": "http://lists.opensuse.org/opensuse-security-announce/2008-06/msg00006.html"
        },
        {
          "name": "30818",
          "tags": [
            "third-party-advisory",
            "x_refsource_SECUNIA"
          ],
          "url": "http://secunia.com/advisories/30818"
        },
        {
          "name": "33201",
          "tags": [
            "third-party-advisory",
            "x_refsource_SECUNIA"
          ],
          "url": "http://secunia.com/advisories/33201"
        },
        {
          "name": "SUSE-SA:2008:032",
          "tags": [
            "vendor-advisory",
            "x_refsource_SUSE"
          ],
          "url": "http://lists.opensuse.org/opensuse-security-announce/2008-07/msg00002.html"
        }
      ],
      "x_legacyV4Record": {
        "CVE_data_meta": {
          "ASSIGNER": "cve@mitre.org",
          "ID": "CVE-2008-2136",
          "STATE": "PUBLIC"
        },
        "affects": {
          "vendor": {
            "vendor_data": [
              {
                "product": {
                  "product_data": [
                    {
                      "product_name": "n/a",
                      "version": {
                        "version_data": [
                          {
                            "version_value": "n/a"
                          }
                        ]
                      }
                    }
                  ]
                },
                "vendor_name": "n/a"
              }
            ]
          }
        },
        "data_format": "MITRE",
        "data_type": "CVE",
        "data_version": "4.0",
        "description": {
          "description_data": [
            {
              "lang": "eng",
              "value": "Memory leak in the ipip6_rcv function in net/ipv6/sit.c in the Linux kernel 2.4 before 2.4.36.5 and 2.6 before 2.6.25.3 allows remote attackers to cause a denial of service (memory consumption) via network traffic to a Simple Internet Transition (SIT) tunnel interface, related to the pskb_may_pull and kfree_skb functions, and management of an skb reference count."
            }
          ]
        },
        "problemtype": {
          "problemtype_data": [
            {
              "description": [
                {
                  "lang": "eng",
                  "value": "n/a"
                }
              ]
            }
          ]
        },
        "references": {
          "reference_data": [
            {
              "name": "1020118",
              "refsource": "SECTRACK",
              "url": "http://www.securitytracker.com/id?1020118"
            },
            {
              "name": "30276",
              "refsource": "SECUNIA",
              "url": "http://secunia.com/advisories/30276"
            },
            {
              "name": "30962",
              "refsource": "SECUNIA",
              "url": "http://secunia.com/advisories/30962"
            },
            {
              "name": "http://kernel.org/pub/linux/kernel/v2.6/ChangeLog-2.6.25.3",
              "refsource": "CONFIRM",
              "url": "http://kernel.org/pub/linux/kernel/v2.6/ChangeLog-2.6.25.3"
            },
            {
              "name": "http://wiki.rpath.com/wiki/Advisories:rPSA-2008-0169",
              "refsource": "CONFIRM",
              "url": "http://wiki.rpath.com/wiki/Advisories:rPSA-2008-0169"
            },
            {
              "name": "31198",
              "refsource": "SECUNIA",
              "url": "http://secunia.com/advisories/31198"
            },
            {
              "name": "30368",
              "refsource": "SECUNIA",
              "url": "http://secunia.com/advisories/30368"
            },
            {
              "name": "MDVSA-2008:167",
              "refsource": "MANDRIVA",
              "url": "http://www.mandriva.com/security/advisories?name=MDVSA-2008:167"
            },
            {
              "name": "31341",
              "refsource": "SECUNIA",
              "url": "http://secunia.com/advisories/31341"
            },
            {
              "name": "http://www.kernel.org/pub/linux/kernel/v2.4/ChangeLog-2.4.36.5",
              "refsource": "CONFIRM",
              "url": "http://www.kernel.org/pub/linux/kernel/v2.4/ChangeLog-2.4.36.5"
            },
            {
              "name": "http://www.kernel.org/pub/linux/kernel/v2.6/ChangeLog-2.6.25.3",
              "refsource": "CONFIRM",
              "url": "http://www.kernel.org/pub/linux/kernel/v2.6/ChangeLog-2.6.25.3"
            },
            {
              "name": "ADV-2008-1716",
              "refsource": "VUPEN",
              "url": "http://www.vupen.com/english/advisories/2008/1716/references"
            },
            {
              "name": "RHSA-2008:0607",
              "refsource": "REDHAT",
              "url": "http://www.redhat.com/support/errata/RHSA-2008-0607.html"
            },
            {
              "name": "30499",
              "refsource": "SECUNIA",
              "url": "http://secunia.com/advisories/30499"
            },
            {
              "name": "linux-kernel-ipip6rcv-dos(42451)",
              "refsource": "XF",
              "url": "https://exchange.xforce.ibmcloud.com/vulnerabilities/42451"
            },
            {
              "name": "30198",
              "refsource": "SECUNIA",
              "url": "http://secunia.com/advisories/30198"
            },
            {
              "name": "DSA-1588",
              "refsource": "DEBIAN",
              "url": "http://www.debian.org/security/2008/dsa-1588"
            },
            {
              "name": "33280",
              "refsource": "SECUNIA",
              "url": "http://secunia.com/advisories/33280"
            },
            {
              "name": "31689",
              "refsource": "SECUNIA",
              "url": "http://secunia.com/advisories/31689"
            },
            {
              "name": "29235",
              "refsource": "BID",
              "url": "http://www.securityfocus.com/bid/29235"
            },
            {
              "name": "RHSA-2008:0585",
              "refsource": "REDHAT",
              "url": "http://www.redhat.com/support/errata/RHSA-2008-0585.html"
            },
            {
              "name": "oval:org.mitre.oval:def:6503",
              "refsource": "OVAL",
              "url": "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A6503"
            },
            {
              "name": "oval:org.mitre.oval:def:11038",
              "refsource": "OVAL",
              "url": "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A11038"
            },
            {
              "name": "[linux-kernel] 20080509 Re: When should kfree_skb be used?",
              "refsource": "MLIST",
              "url": "http://marc.info/?l=linux-netdev\u0026m=121031533024912\u0026w=2"
            },
            {
              "name": "30241",
              "refsource": "SECUNIA",
              "url": "http://secunia.com/advisories/30241"
            },
            {
              "name": "MDVSA-2008:174",
              "refsource": "MANDRIVA",
              "url": "http://www.mandriva.com/security/advisories?name=MDVSA-2008:174"
            },
            {
              "name": "31107",
              "refsource": "SECUNIA",
              "url": "http://secunia.com/advisories/31107"
            },
            {
              "name": "RHSA-2008:0973",
              "refsource": "REDHAT",
              "url": "http://www.redhat.com/support/errata/RHSA-2008-0973.html"
            },
            {
              "name": "http://support.avaya.com/elmodocs2/security/ASA-2008-362.htm",
              "refsource": "CONFIRM",
              "url": "http://support.avaya.com/elmodocs2/security/ASA-2008-362.htm"
            },
            {
              "name": "RHSA-2008:0612",
              "refsource": "REDHAT",
              "url": "http://www.redhat.com/support/errata/RHSA-2008-0612.html"
            },
            {
              "name": "31628",
              "refsource": "SECUNIA",
              "url": "http://secunia.com/advisories/31628"
            },
            {
              "name": "USN-625-1",
              "refsource": "UBUNTU",
              "url": "http://www.ubuntu.com/usn/usn-625-1"
            },
            {
              "name": "FEDORA-2008-3949",
              "refsource": "FEDORA",
              "url": "https://www.redhat.com/archives/fedora-package-announce/2008-May/msg00294.html"
            },
            {
              "name": "RHSA-2008:0787",
              "refsource": "REDHAT",
              "url": "http://www.redhat.com/support/errata/RHSA-2008-0787.html"
            },
            {
              "name": "ADV-2008-1543",
              "refsource": "VUPEN",
              "url": "http://www.vupen.com/english/advisories/2008/1543/references"
            },
            {
              "name": "SUSE-SA:2008:030",
              "refsource": "SUSE",
              "url": "http://lists.opensuse.org/opensuse-security-announce/2008-06/msg00006.html"
            },
            {
              "name": "30818",
              "refsource": "SECUNIA",
              "url": "http://secunia.com/advisories/30818"
            },
            {
              "name": "33201",
              "refsource": "SECUNIA",
              "url": "http://secunia.com/advisories/33201"
            },
            {
              "name": "SUSE-SA:2008:032",
              "refsource": "SUSE",
              "url": "http://lists.opensuse.org/opensuse-security-announce/2008-07/msg00002.html"
            }
          ]
        }
      }
    }
  },
  "cveMetadata": {
    "assignerOrgId": "8254265b-2729-46b6-b9e3-3dfca2d5bfca",
    "assignerShortName": "mitre",
    "cveId": "CVE-2008-2136",
    "datePublished": "2008-05-16T06:54:00.000Z",
    "dateReserved": "2008-05-12T00:00:00.000Z",
    "dateUpdated": "2024-08-07T08:49:58.458Z",
    "state": "PUBLISHED"
  },
  "dataType": "CVE_RECORD",
  "dataVersion": "5.1"
}

CVE-2008-3525 (GCVE-0-2008-3525)

Vulnerability from cvelistv5 – Published: 2008-09-03 14:00 – Updated: 2024-08-07 09:45

Summary

Severity ?

No CVSS data available.

CWE

Assigner

redhat

References

URL

Tags

	http://lists.opensuse.org/opensuse-security-annou…	vendor-advisoryx_refsource_SUSE
	http://git.kernel.org/?p=linux/kernel/git/torvald…	x_refsource_CONFIRM
	http://www.vupen.com/english/advisories/2008/2714	vdb-entryx_refsource_VUPEN
	http://www.debian.org/security/2008/dsa-1655	vendor-advisoryx_refsource_DEBIAN
	http://secunia.com/advisories/32393	third-party-advisoryx_refsource_SECUNIA
	http://secunia.com/advisories/32237	third-party-advisoryx_refsource_SECUNIA
	http://www.openwall.com/lists/oss-security/2008/08/29/2	mailing-listx_refsource_MLIST
	http://www.mandriva.com/security/advisories?name=…	vendor-advisoryx_refsource_MANDRIVA
	http://lists.opensuse.org/opensuse-security-annou…	vendor-advisoryx_refsource_SUSE
	http://www.kernel.org/pub/linux/kernel/v2.4/Chang…	x_refsource_CONFIRM
	http://www.ubuntu.com/usn/usn-659-1	vendor-advisoryx_refsource_UBUNTU
	http://lists.opensuse.org/opensuse-security-annou…	vendor-advisoryx_refsource_SUSE
	https://www.redhat.com/archives/fedora-package-an…	vendor-advisoryx_refsource_FEDORA
	http://secunia.com/advisories/32103	third-party-advisoryx_refsource_SECUNIA
	http://secunia.com/advisories/33280	third-party-advisoryx_refsource_SECUNIA
	http://www.debian.org/security/2008/dsa-1653	vendor-advisoryx_refsource_DEBIAN
	http://secunia.com/advisories/32356	third-party-advisoryx_refsource_SECUNIA
	http://secunia.com/advisories/32759	third-party-advisoryx_refsource_SECUNIA
	http://www.mandriva.com/security/advisories?name=…	vendor-advisoryx_refsource_MANDRIVA
	http://www.securitytracker.com/id?1020969	vdb-entryx_refsource_SECTRACK
	http://www.vupen.com/english/advisories/2008/2511	vdb-entryx_refsource_VUPEN
	http://secunia.com/advisories/32370	third-party-advisoryx_refsource_SECUNIA
	http://www.redhat.com/support/errata/RHSA-2008-09…	vendor-advisoryx_refsource_REDHAT
	http://www.redhat.com/support/errata/RHSA-2008-07…	vendor-advisoryx_refsource_REDHAT
	http://lists.opensuse.org/opensuse-security-annou…	vendor-advisoryx_refsource_SUSE
	http://secunia.com/advisories/32386	third-party-advisoryx_refsource_SECUNIA
	https://www.redhat.com/archives/fedora-package-an…	vendor-advisoryx_refsource_FEDORA
	https://oval.cisecurity.org/repository/search/def…	vdb-entrysignaturex_refsource_OVAL
	http://lists.opensuse.org/opensuse-security-annou…	vendor-advisoryx_refsource_SUSE
	http://lists.opensuse.org/opensuse-security-annou…	vendor-advisoryx_refsource_SUSE
	https://oval.cisecurity.org/repository/search/def…	vdb-entrysignaturex_refsource_OVAL
	http://secunia.com/advisories/33201	third-party-advisoryx_refsource_SECUNIA
	http://secunia.com/advisories/32315	third-party-advisoryx_refsource_SECUNIA

Date Public ?

2008-08-27 00:00

Show details on NVD website

JSON

To clipboard

{
  "containers": {
    "adp": [
      {
        "providerMetadata": {
          "dateUpdated": "2024-08-07T09:45:18.129Z",
          "orgId": "af854a3a-2127-422b-91ae-364da2661108",
          "shortName": "CVE"
        },
        "references": [
          {
            "name": "SUSE-SA:2008:047",
            "tags": [
              "vendor-advisory",
              "x_refsource_SUSE",
              "x_transferred"
            ],
            "url": "http://lists.opensuse.org/opensuse-security-announce/2008-10/msg00000.html"
          },
          {
            "tags": [
              "x_refsource_CONFIRM",
              "x_transferred"
            ],
            "url": "http://git.kernel.org/?p=linux/kernel/git/torvalds/linux-2.6.git%3Ba=commit%3Bh=f2455eb176ac87081bbfc9a44b21c7cd2bc1967e"
          },
          {
            "name": "ADV-2008-2714",
            "tags": [
              "vdb-entry",
              "x_refsource_VUPEN",
              "x_transferred"
            ],
            "url": "http://www.vupen.com/english/advisories/2008/2714"
          },
          {
            "name": "DSA-1655",
            "tags": [
              "vendor-advisory",
              "x_refsource_DEBIAN",
              "x_transferred"
            ],
            "url": "http://www.debian.org/security/2008/dsa-1655"
          },
          {
            "name": "32393",
            "tags": [
              "third-party-advisory",
              "x_refsource_SECUNIA",
              "x_transferred"
            ],
            "url": "http://secunia.com/advisories/32393"
          },
          {
            "name": "32237",
            "tags": [
              "third-party-advisory",
              "x_refsource_SECUNIA",
              "x_transferred"
            ],
            "url": "http://secunia.com/advisories/32237"
          },
          {
            "name": "[oss-security] 20080829 CVE-2008-3525 kernel: missing capability checks in sbni_ioctl()",
            "tags": [
              "mailing-list",
              "x_refsource_MLIST",
              "x_transferred"
            ],
            "url": "http://www.openwall.com/lists/oss-security/2008/08/29/2"
          },
          {
            "name": "MDVSA-2008:223",
            "tags": [
              "vendor-advisory",
              "x_refsource_MANDRIVA",
              "x_transferred"
            ],
            "url": "http://www.mandriva.com/security/advisories?name=MDVSA-2008:223"
          },
          {
            "name": "SUSE-SA:2008:052",
            "tags": [
              "vendor-advisory",
              "x_refsource_SUSE",
              "x_transferred"
            ],
            "url": "http://lists.opensuse.org/opensuse-security-announce/2008-10/msg00008.html"
          },
          {
            "tags": [
              "x_refsource_CONFIRM",
              "x_transferred"
            ],
            "url": "http://www.kernel.org/pub/linux/kernel/v2.4/ChangeLog-2.4.36.7"
          },
          {
            "name": "USN-659-1",
            "tags": [
              "vendor-advisory",
              "x_refsource_UBUNTU",
              "x_transferred"
            ],
            "url": "http://www.ubuntu.com/usn/usn-659-1"
          },
          {
            "name": "SUSE-SA:2008:053",
            "tags": [
              "vendor-advisory",
              "x_refsource_SUSE",
              "x_transferred"
            ],
            "url": "http://lists.opensuse.org/opensuse-security-announce/2008-10/msg00010.html"
          },
          {
            "name": "FEDORA-2008-8929",
            "tags": [
              "vendor-advisory",
              "x_refsource_FEDORA",
              "x_transferred"
            ],
            "url": "https://www.redhat.com/archives/fedora-package-announce/2008-October/msg00693.html"
          },
          {
            "name": "32103",
            "tags": [
              "third-party-advisory",
              "x_refsource_SECUNIA",
              "x_transferred"
            ],
            "url": "http://secunia.com/advisories/32103"
          },
          {
            "name": "33280",
            "tags": [
              "third-party-advisory",
              "x_refsource_SECUNIA",
              "x_transferred"
            ],
            "url": "http://secunia.com/advisories/33280"
          },
          {
            "name": "DSA-1653",
            "tags": [
              "vendor-advisory",
              "x_refsource_DEBIAN",
              "x_transferred"
            ],
            "url": "http://www.debian.org/security/2008/dsa-1653"
          },
          {
            "name": "32356",
            "tags": [
              "third-party-advisory",
              "x_refsource_SECUNIA",
              "x_transferred"
            ],
            "url": "http://secunia.com/advisories/32356"
          },
          {
            "name": "32759",
            "tags": [
              "third-party-advisory",
              "x_refsource_SECUNIA",
              "x_transferred"
            ],
            "url": "http://secunia.com/advisories/32759"
          },
          {
            "name": "MDVSA-2008:220",
            "tags": [
              "vendor-advisory",
              "x_refsource_MANDRIVA",
              "x_transferred"
            ],
            "url": "http://www.mandriva.com/security/advisories?name=MDVSA-2008:220"
          },
          {
            "name": "1020969",
            "tags": [
              "vdb-entry",
              "x_refsource_SECTRACK",
              "x_transferred"
            ],
            "url": "http://www.securitytracker.com/id?1020969"
          },
          {
            "name": "ADV-2008-2511",
            "tags": [
              "vdb-entry",
              "x_refsource_VUPEN",
              "x_transferred"
            ],
            "url": "http://www.vupen.com/english/advisories/2008/2511"
          },
          {
            "name": "32370",
            "tags": [
              "third-party-advisory",
              "x_refsource_SECUNIA",
              "x_transferred"
            ],
            "url": "http://secunia.com/advisories/32370"
          },
          {
            "name": "RHSA-2008:0973",
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT",
              "x_transferred"
            ],
            "url": "http://www.redhat.com/support/errata/RHSA-2008-0973.html"
          },
          {
            "name": "RHSA-2008:0787",
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT",
              "x_transferred"
            ],
            "url": "http://www.redhat.com/support/errata/RHSA-2008-0787.html"
          },
          {
            "name": "SUSE-SA:2008:051",
            "tags": [
              "vendor-advisory",
              "x_refsource_SUSE",
              "x_transferred"
            ],
            "url": "http://lists.opensuse.org/opensuse-security-announce/2008-10/msg00007.html"
          },
          {
            "name": "32386",
            "tags": [
              "third-party-advisory",
              "x_refsource_SECUNIA",
              "x_transferred"
            ],
            "url": "http://secunia.com/advisories/32386"
          },
          {
            "name": "FEDORA-2008-8980",
            "tags": [
              "vendor-advisory",
              "x_refsource_FEDORA",
              "x_transferred"
            ],
            "url": "https://www.redhat.com/archives/fedora-package-announce/2008-October/msg00689.html"
          },
          {
            "name": "oval:org.mitre.oval:def:9364",
            "tags": [
              "vdb-entry",
              "signature",
              "x_refsource_OVAL",
              "x_transferred"
            ],
            "url": "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A9364"
          },
          {
            "name": "SUSE-SA:2008:049",
            "tags": [
              "vendor-advisory",
              "x_refsource_SUSE",
              "x_transferred"
            ],
            "url": "http://lists.opensuse.org/opensuse-security-announce/2008-10/msg00003.html"
          },
          {
            "name": "SUSE-SR:2008:025",
            "tags": [
              "vendor-advisory",
              "x_refsource_SUSE",
              "x_transferred"
            ],
            "url": "http://lists.opensuse.org/opensuse-security-announce/2008-11/msg00001.html"
          },
          {
            "name": "oval:org.mitre.oval:def:5671",
            "tags": [
              "vdb-entry",
              "signature",
              "x_refsource_OVAL",
              "x_transferred"
            ],
            "url": "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A5671"
          },
          {
            "name": "33201",
            "tags": [
              "third-party-advisory",
              "x_refsource_SECUNIA",
              "x_transferred"
            ],
            "url": "http://secunia.com/advisories/33201"
          },
          {
            "name": "32315",
            "tags": [
              "third-party-advisory",
              "x_refsource_SECUNIA",
              "x_transferred"
            ],
            "url": "http://secunia.com/advisories/32315"
          }
        ],
        "title": "CVE Program Container"
      }
    ],
    "cna": {
      "affected": [
        {
          "product": "n/a",
          "vendor": "n/a",
          "versions": [
            {
              "status": "affected",
              "version": "n/a"
            }
          ]
        }
      ],
      "datePublic": "2008-08-27T00:00:00.000Z",
      "descriptions": [
        {
          "lang": "en",
          "value": "The sbni_ioctl function in drivers/net/wan/sbni.c in the wan subsystem in the Linux kernel 2.6.26.3 does not check for the CAP_NET_ADMIN capability before processing a (1) SIOCDEVRESINSTATS, (2) SIOCDEVSHWSTATE, (3) SIOCDEVENSLAVE, or (4) SIOCDEVEMANSIPATE ioctl request, which allows local users to bypass intended capability restrictions."
        }
      ],
      "problemTypes": [
        {
          "descriptions": [
            {
              "description": "n/a",
              "lang": "en",
              "type": "text"
            }
          ]
        }
      ],
      "providerMetadata": {
        "dateUpdated": "2017-09-28T12:57:01.000Z",
        "orgId": "53f830b8-0a3f-465b-8143-3b8a9948e749",
        "shortName": "redhat"
      },
      "references": [
        {
          "name": "SUSE-SA:2008:047",
          "tags": [
            "vendor-advisory",
            "x_refsource_SUSE"
          ],
          "url": "http://lists.opensuse.org/opensuse-security-announce/2008-10/msg00000.html"
        },
        {
          "tags": [
            "x_refsource_CONFIRM"
          ],
          "url": "http://git.kernel.org/?p=linux/kernel/git/torvalds/linux-2.6.git%3Ba=commit%3Bh=f2455eb176ac87081bbfc9a44b21c7cd2bc1967e"
        },
        {
          "name": "ADV-2008-2714",
          "tags": [
            "vdb-entry",
            "x_refsource_VUPEN"
          ],
          "url": "http://www.vupen.com/english/advisories/2008/2714"
        },
        {
          "name": "DSA-1655",
          "tags": [
            "vendor-advisory",
            "x_refsource_DEBIAN"
          ],
          "url": "http://www.debian.org/security/2008/dsa-1655"
        },
        {
          "name": "32393",
          "tags": [
            "third-party-advisory",
            "x_refsource_SECUNIA"
          ],
          "url": "http://secunia.com/advisories/32393"
        },
        {
          "name": "32237",
          "tags": [
            "third-party-advisory",
            "x_refsource_SECUNIA"
          ],
          "url": "http://secunia.com/advisories/32237"
        },
        {
          "name": "[oss-security] 20080829 CVE-2008-3525 kernel: missing capability checks in sbni_ioctl()",
          "tags": [
            "mailing-list",
            "x_refsource_MLIST"
          ],
          "url": "http://www.openwall.com/lists/oss-security/2008/08/29/2"
        },
        {
          "name": "MDVSA-2008:223",
          "tags": [
            "vendor-advisory",
            "x_refsource_MANDRIVA"
          ],
          "url": "http://www.mandriva.com/security/advisories?name=MDVSA-2008:223"
        },
        {
          "name": "SUSE-SA:2008:052",
          "tags": [
            "vendor-advisory",
            "x_refsource_SUSE"
          ],
          "url": "http://lists.opensuse.org/opensuse-security-announce/2008-10/msg00008.html"
        },
        {
          "tags": [
            "x_refsource_CONFIRM"
          ],
          "url": "http://www.kernel.org/pub/linux/kernel/v2.4/ChangeLog-2.4.36.7"
        },
        {
          "name": "USN-659-1",
          "tags": [
            "vendor-advisory",
            "x_refsource_UBUNTU"
          ],
          "url": "http://www.ubuntu.com/usn/usn-659-1"
        },
        {
          "name": "SUSE-SA:2008:053",
          "tags": [
            "vendor-advisory",
            "x_refsource_SUSE"
          ],
          "url": "http://lists.opensuse.org/opensuse-security-announce/2008-10/msg00010.html"
        },
        {
          "name": "FEDORA-2008-8929",
          "tags": [
            "vendor-advisory",
            "x_refsource_FEDORA"
          ],
          "url": "https://www.redhat.com/archives/fedora-package-announce/2008-October/msg00693.html"
        },
        {
          "name": "32103",
          "tags": [
            "third-party-advisory",
            "x_refsource_SECUNIA"
          ],
          "url": "http://secunia.com/advisories/32103"
        },
        {
          "name": "33280",
          "tags": [
            "third-party-advisory",
            "x_refsource_SECUNIA"
          ],
          "url": "http://secunia.com/advisories/33280"
        },
        {
          "name": "DSA-1653",
          "tags": [
            "vendor-advisory",
            "x_refsource_DEBIAN"
          ],
          "url": "http://www.debian.org/security/2008/dsa-1653"
        },
        {
          "name": "32356",
          "tags": [
            "third-party-advisory",
            "x_refsource_SECUNIA"
          ],
          "url": "http://secunia.com/advisories/32356"
        },
        {
          "name": "32759",
          "tags": [
            "third-party-advisory",
            "x_refsource_SECUNIA"
          ],
          "url": "http://secunia.com/advisories/32759"
        },
        {
          "name": "MDVSA-2008:220",
          "tags": [
            "vendor-advisory",
            "x_refsource_MANDRIVA"
          ],
          "url": "http://www.mandriva.com/security/advisories?name=MDVSA-2008:220"
        },
        {
          "name": "1020969",
          "tags": [
            "vdb-entry",
            "x_refsource_SECTRACK"
          ],
          "url": "http://www.securitytracker.com/id?1020969"
        },
        {
          "name": "ADV-2008-2511",
          "tags": [
            "vdb-entry",
            "x_refsource_VUPEN"
          ],
          "url": "http://www.vupen.com/english/advisories/2008/2511"
        },
        {
          "name": "32370",
          "tags": [
            "third-party-advisory",
            "x_refsource_SECUNIA"
          ],
          "url": "http://secunia.com/advisories/32370"
        },
        {
          "name": "RHSA-2008:0973",
          "tags": [
            "vendor-advisory",
            "x_refsource_REDHAT"
          ],
          "url": "http://www.redhat.com/support/errata/RHSA-2008-0973.html"
        },
        {
          "name": "RHSA-2008:0787",
          "tags": [
            "vendor-advisory",
            "x_refsource_REDHAT"
          ],
          "url": "http://www.redhat.com/support/errata/RHSA-2008-0787.html"
        },
        {
          "name": "SUSE-SA:2008:051",
          "tags": [
            "vendor-advisory",
            "x_refsource_SUSE"
          ],
          "url": "http://lists.opensuse.org/opensuse-security-announce/2008-10/msg00007.html"
        },
        {
          "name": "32386",
          "tags": [
            "third-party-advisory",
            "x_refsource_SECUNIA"
          ],
          "url": "http://secunia.com/advisories/32386"
        },
        {
          "name": "FEDORA-2008-8980",
          "tags": [
            "vendor-advisory",
            "x_refsource_FEDORA"
          ],
          "url": "https://www.redhat.com/archives/fedora-package-announce/2008-October/msg00689.html"
        },
        {
          "name": "oval:org.mitre.oval:def:9364",
          "tags": [
            "vdb-entry",
            "signature",
            "x_refsource_OVAL"
          ],
          "url": "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A9364"
        },
        {
          "name": "SUSE-SA:2008:049",
          "tags": [
            "vendor-advisory",
            "x_refsource_SUSE"
          ],
          "url": "http://lists.opensuse.org/opensuse-security-announce/2008-10/msg00003.html"
        },
        {
          "name": "SUSE-SR:2008:025",
          "tags": [
            "vendor-advisory",
            "x_refsource_SUSE"
          ],
          "url": "http://lists.opensuse.org/opensuse-security-announce/2008-11/msg00001.html"
        },
        {
          "name": "oval:org.mitre.oval:def:5671",
          "tags": [
            "vdb-entry",
            "signature",
            "x_refsource_OVAL"
          ],
          "url": "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A5671"
        },
        {
          "name": "33201",
          "tags": [
            "third-party-advisory",
            "x_refsource_SECUNIA"
          ],
          "url": "http://secunia.com/advisories/33201"
        },
        {
          "name": "32315",
          "tags": [
            "third-party-advisory",
            "x_refsource_SECUNIA"
          ],
          "url": "http://secunia.com/advisories/32315"
        }
      ]
    }
  },
  "cveMetadata": {
    "assignerOrgId": "53f830b8-0a3f-465b-8143-3b8a9948e749",
    "assignerShortName": "redhat",
    "cveId": "CVE-2008-3525",
    "datePublished": "2008-09-03T14:00:00.000Z",
    "dateReserved": "2008-08-07T00:00:00.000Z",
    "dateUpdated": "2024-08-07T09:45:18.129Z",
    "state": "PUBLISHED"
  },
  "dataType": "CVE_RECORD",
  "dataVersion": "5.1"
}

CVE-2007-6151 (GCVE-0-2007-6151)

Vulnerability from cvelistv5 – Published: 2007-12-15 01:00 – Updated: 2024-08-07 15:54

Summary

Severity ?

No CVSS data available.

CWE

Assigner

mitre

References

URL

Tags

	http://secunia.com/advisories/30962	third-party-advisoryx_refsource_SECUNIA
	http://lists.opensuse.org/opensuse-security-annou…	vendor-advisoryx_refsource_SUSE
	http://www.securityfocus.com/bid/27497	vdb-entryx_refsource_BID
	http://git.kernel.org/?p=linux/kernel/git/torvald…	x_refsource_CONFIRM
	http://lists.opensuse.org/opensuse-security-annou…	vendor-advisoryx_refsource_SUSE
	https://oval.cisecurity.org/repository/search/def…	vdb-entrysignaturex_refsource_OVAL
	http://secunia.com/advisories/28706	third-party-advisoryx_refsource_SECUNIA
	http://secunia.com/advisories/28626	third-party-advisoryx_refsource_SECUNIA
	http://www.debian.org/security/2008/dsa-1479	vendor-advisoryx_refsource_DEBIAN
	http://www.mandriva.com/security/advisories?name=…	vendor-advisoryx_refsource_MANDRIVA
	http://www.debian.org/security/2008/dsa-1504	vendor-advisoryx_refsource_DEBIAN
	http://secunia.com/advisories/28889	third-party-advisoryx_refsource_SECUNIA
	http://secunia.com/advisories/30110	third-party-advisoryx_refsource_SECUNIA
	http://www.vupen.com/english/advisories/2008/2222…	vdb-entryx_refsource_VUPEN
	http://secunia.com/advisories/33280	third-party-advisoryx_refsource_SECUNIA
	http://www.mandriva.com/security/advisories?name=…	vendor-advisoryx_refsource_MANDRIVA
	http://www.debian.org/security/2008/dsa-1503	vendor-advisoryx_refsource_DEBIAN
	http://secunia.com/advisories/28748	third-party-advisoryx_refsource_SECUNIA
	http://www.ubuntu.com/usn/usn-574-1	vendor-advisoryx_refsource_UBUNTU
	http://secunia.com/advisories/29058	third-party-advisoryx_refsource_SECUNIA
	http://www.redhat.com/support/errata/RHSA-2008-02…	vendor-advisoryx_refsource_REDHAT
	http://secunia.com/advisories/28971	third-party-advisoryx_refsource_SECUNIA
	http://www.redhat.com/support/errata/RHSA-2008-07…	vendor-advisoryx_refsource_REDHAT
	http://lists.vmware.com/pipermail/security-announ…	mailing-listx_refsource_MLIST
	http://www.ubuntu.com/usn/usn-578-1	vendor-advisoryx_refsource_UBUNTU
	http://secunia.com/advisories/31246	third-party-advisoryx_refsource_SECUNIA
	http://secunia.com/advisories/29570	third-party-advisoryx_refsource_SECUNIA
	http://rhn.redhat.com/errata/RHSA-2008-0055.html	vendor-advisoryx_refsource_REDHAT
	http://lists.opensuse.org/opensuse-security-annou…	vendor-advisoryx_refsource_SUSE

Date Public ?

2007-12-01 00:00

Show details on NVD website

JSON

To clipboard

{
  "containers": {
    "adp": [
      {
        "providerMetadata": {
          "dateUpdated": "2024-08-07T15:54:27.005Z",
          "orgId": "af854a3a-2127-422b-91ae-364da2661108",
          "shortName": "CVE"
        },
        "references": [
          {
            "name": "30962",
            "tags": [
              "third-party-advisory",
              "x_refsource_SECUNIA",
              "x_transferred"
            ],
            "url": "http://secunia.com/advisories/30962"
          },
          {
            "name": "SUSE-SA:2008:017",
            "tags": [
              "vendor-advisory",
              "x_refsource_SUSE",
              "x_transferred"
            ],
            "url": "http://lists.opensuse.org/opensuse-security-announce/2008-03/msg00007.html"
          },
          {
            "name": "27497",
            "tags": [
              "vdb-entry",
              "x_refsource_BID",
              "x_transferred"
            ],
            "url": "http://www.securityfocus.com/bid/27497"
          },
          {
            "tags": [
              "x_refsource_CONFIRM",
              "x_transferred"
            ],
            "url": "http://git.kernel.org/?p=linux/kernel/git/torvalds/linux-2.6.git%3Ba=commitdiff%3Bh=eafe1aa37e6ec2d56f14732b5240c4dd09f0613a"
          },
          {
            "name": "SUSE-SA:2008:007",
            "tags": [
              "vendor-advisory",
              "x_refsource_SUSE",
              "x_transferred"
            ],
            "url": "http://lists.opensuse.org/opensuse-security-announce/2008-02/msg00005.html"
          },
          {
            "name": "oval:org.mitre.oval:def:10971",
            "tags": [
              "vdb-entry",
              "signature",
              "x_refsource_OVAL",
              "x_transferred"
            ],
            "url": "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A10971"
          },
          {
            "name": "28706",
            "tags": [
              "third-party-advisory",
              "x_refsource_SECUNIA",
              "x_transferred"
            ],
            "url": "http://secunia.com/advisories/28706"
          },
          {
            "name": "28626",
            "tags": [
              "third-party-advisory",
              "x_refsource_SECUNIA",
              "x_transferred"
            ],
            "url": "http://secunia.com/advisories/28626"
          },
          {
            "name": "DSA-1479",
            "tags": [
              "vendor-advisory",
              "x_refsource_DEBIAN",
              "x_transferred"
            ],
            "url": "http://www.debian.org/security/2008/dsa-1479"
          },
          {
            "name": "MDVSA-2008:112",
            "tags": [
              "vendor-advisory",
              "x_refsource_MANDRIVA",
              "x_transferred"
            ],
            "url": "http://www.mandriva.com/security/advisories?name=MDVSA-2008:112"
          },
          {
            "name": "DSA-1504",
            "tags": [
              "vendor-advisory",
              "x_refsource_DEBIAN",
              "x_transferred"
            ],
            "url": "http://www.debian.org/security/2008/dsa-1504"
          },
          {
            "name": "28889",
            "tags": [
              "third-party-advisory",
              "x_refsource_SECUNIA",
              "x_transferred"
            ],
            "url": "http://secunia.com/advisories/28889"
          },
          {
            "name": "30110",
            "tags": [
              "third-party-advisory",
              "x_refsource_SECUNIA",
              "x_transferred"
            ],
            "url": "http://secunia.com/advisories/30110"
          },
          {
            "name": "ADV-2008-2222",
            "tags": [
              "vdb-entry",
              "x_refsource_VUPEN",
              "x_transferred"
            ],
            "url": "http://www.vupen.com/english/advisories/2008/2222/references"
          },
          {
            "name": "33280",
            "tags": [
              "third-party-advisory",
              "x_refsource_SECUNIA",
              "x_transferred"
            ],
            "url": "http://secunia.com/advisories/33280"
          },
          {
            "name": "MDVSA-2008:086",
            "tags": [
              "vendor-advisory",
              "x_refsource_MANDRIVA",
              "x_transferred"
            ],
            "url": "http://www.mandriva.com/security/advisories?name=MDVSA-2008:086"
          },
          {
            "name": "DSA-1503",
            "tags": [
              "vendor-advisory",
              "x_refsource_DEBIAN",
              "x_transferred"
            ],
            "url": "http://www.debian.org/security/2008/dsa-1503"
          },
          {
            "name": "28748",
            "tags": [
              "third-party-advisory",
              "x_refsource_SECUNIA",
              "x_transferred"
            ],
            "url": "http://secunia.com/advisories/28748"
          },
          {
            "name": "USN-574-1",
            "tags": [
              "vendor-advisory",
              "x_refsource_UBUNTU",
              "x_transferred"
            ],
            "url": "http://www.ubuntu.com/usn/usn-574-1"
          },
          {
            "name": "29058",
            "tags": [
              "third-party-advisory",
              "x_refsource_SECUNIA",
              "x_transferred"
            ],
            "url": "http://secunia.com/advisories/29058"
          },
          {
            "name": "RHSA-2008:0211",
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT",
              "x_transferred"
            ],
            "url": "http://www.redhat.com/support/errata/RHSA-2008-0211.html"
          },
          {
            "name": "28971",
            "tags": [
              "third-party-advisory",
              "x_refsource_SECUNIA",
              "x_transferred"
            ],
            "url": "http://secunia.com/advisories/28971"
          },
          {
            "name": "RHSA-2008:0787",
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT",
              "x_transferred"
            ],
            "url": "http://www.redhat.com/support/errata/RHSA-2008-0787.html"
          },
          {
            "name": "[Security-announce] 20080728 VMSA-2008-00011 Updated ESX service console packages for Samba and vmnix",
            "tags": [
              "mailing-list",
              "x_refsource_MLIST",
              "x_transferred"
            ],
            "url": "http://lists.vmware.com/pipermail/security-announce/2008/000023.html"
          },
          {
            "name": "USN-578-1",
            "tags": [
              "vendor-advisory",
              "x_refsource_UBUNTU",
              "x_transferred"
            ],
            "url": "http://www.ubuntu.com/usn/usn-578-1"
          },
          {
            "name": "31246",
            "tags": [
              "third-party-advisory",
              "x_refsource_SECUNIA",
              "x_transferred"
            ],
            "url": "http://secunia.com/advisories/31246"
          },
          {
            "name": "29570",
            "tags": [
              "third-party-advisory",
              "x_refsource_SECUNIA",
              "x_transferred"
            ],
            "url": "http://secunia.com/advisories/29570"
          },
          {
            "name": "RHSA-2008:0055",
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT",
              "x_transferred"
            ],
            "url": "http://rhn.redhat.com/errata/RHSA-2008-0055.html"
          },
          {
            "name": "SUSE-SA:2008:032",
            "tags": [
              "vendor-advisory",
              "x_refsource_SUSE",
              "x_transferred"
            ],
            "url": "http://lists.opensuse.org/opensuse-security-announce/2008-07/msg00002.html"
          }
        ],
        "title": "CVE Program Container"
      }
    ],
    "cna": {
      "affected": [
        {
          "product": "n/a",
          "vendor": "n/a",
          "versions": [
            {
              "status": "affected",
              "version": "n/a"
            }
          ]
        }
      ],
      "datePublic": "2007-12-01T00:00:00.000Z",
      "descriptions": [
        {
          "lang": "en",
          "value": "The isdn_ioctl function in isdn_common.c in Linux kernel 2.6.23 allows local users to cause a denial of service via a crafted ioctl struct in which iocts is not null terminated, which triggers a buffer overflow."
        }
      ],
      "problemTypes": [
        {
          "descriptions": [
            {
              "description": "n/a",
              "lang": "en",
              "type": "text"
            }
          ]
        }
      ],
      "providerMetadata": {
        "dateUpdated": "2017-09-28T12:57:01.000Z",
        "orgId": "8254265b-2729-46b6-b9e3-3dfca2d5bfca",
        "shortName": "mitre"
      },
      "references": [
        {
          "name": "30962",
          "tags": [
            "third-party-advisory",
            "x_refsource_SECUNIA"
          ],
          "url": "http://secunia.com/advisories/30962"
        },
        {
          "name": "SUSE-SA:2008:017",
          "tags": [
            "vendor-advisory",
            "x_refsource_SUSE"
          ],
          "url": "http://lists.opensuse.org/opensuse-security-announce/2008-03/msg00007.html"
        },
        {
          "name": "27497",
          "tags": [
            "vdb-entry",
            "x_refsource_BID"
          ],
          "url": "http://www.securityfocus.com/bid/27497"
        },
        {
          "tags": [
            "x_refsource_CONFIRM"
          ],
          "url": "http://git.kernel.org/?p=linux/kernel/git/torvalds/linux-2.6.git%3Ba=commitdiff%3Bh=eafe1aa37e6ec2d56f14732b5240c4dd09f0613a"
        },
        {
          "name": "SUSE-SA:2008:007",
          "tags": [
            "vendor-advisory",
            "x_refsource_SUSE"
          ],
          "url": "http://lists.opensuse.org/opensuse-security-announce/2008-02/msg00005.html"
        },
        {
          "name": "oval:org.mitre.oval:def:10971",
          "tags": [
            "vdb-entry",
            "signature",
            "x_refsource_OVAL"
          ],
          "url": "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A10971"
        },
        {
          "name": "28706",
          "tags": [
            "third-party-advisory",
            "x_refsource_SECUNIA"
          ],
          "url": "http://secunia.com/advisories/28706"
        },
        {
          "name": "28626",
          "tags": [
            "third-party-advisory",
            "x_refsource_SECUNIA"
          ],
          "url": "http://secunia.com/advisories/28626"
        },
        {
          "name": "DSA-1479",
          "tags": [
            "vendor-advisory",
            "x_refsource_DEBIAN"
          ],
          "url": "http://www.debian.org/security/2008/dsa-1479"
        },
        {
          "name": "MDVSA-2008:112",
          "tags": [
            "vendor-advisory",
            "x_refsource_MANDRIVA"
          ],
          "url": "http://www.mandriva.com/security/advisories?name=MDVSA-2008:112"
        },
        {
          "name": "DSA-1504",
          "tags": [
            "vendor-advisory",
            "x_refsource_DEBIAN"
          ],
          "url": "http://www.debian.org/security/2008/dsa-1504"
        },
        {
          "name": "28889",
          "tags": [
            "third-party-advisory",
            "x_refsource_SECUNIA"
          ],
          "url": "http://secunia.com/advisories/28889"
        },
        {
          "name": "30110",
          "tags": [
            "third-party-advisory",
            "x_refsource_SECUNIA"
          ],
          "url": "http://secunia.com/advisories/30110"
        },
        {
          "name": "ADV-2008-2222",
          "tags": [
            "vdb-entry",
            "x_refsource_VUPEN"
          ],
          "url": "http://www.vupen.com/english/advisories/2008/2222/references"
        },
        {
          "name": "33280",
          "tags": [
            "third-party-advisory",
            "x_refsource_SECUNIA"
          ],
          "url": "http://secunia.com/advisories/33280"
        },
        {
          "name": "MDVSA-2008:086",
          "tags": [
            "vendor-advisory",
            "x_refsource_MANDRIVA"
          ],
          "url": "http://www.mandriva.com/security/advisories?name=MDVSA-2008:086"
        },
        {
          "name": "DSA-1503",
          "tags": [
            "vendor-advisory",
            "x_refsource_DEBIAN"
          ],
          "url": "http://www.debian.org/security/2008/dsa-1503"
        },
        {
          "name": "28748",
          "tags": [
            "third-party-advisory",
            "x_refsource_SECUNIA"
          ],
          "url": "http://secunia.com/advisories/28748"
        },
        {
          "name": "USN-574-1",
          "tags": [
            "vendor-advisory",
            "x_refsource_UBUNTU"
          ],
          "url": "http://www.ubuntu.com/usn/usn-574-1"
        },
        {
          "name": "29058",
          "tags": [
            "third-party-advisory",
            "x_refsource_SECUNIA"
          ],
          "url": "http://secunia.com/advisories/29058"
        },
        {
          "name": "RHSA-2008:0211",
          "tags": [
            "vendor-advisory",
            "x_refsource_REDHAT"
          ],
          "url": "http://www.redhat.com/support/errata/RHSA-2008-0211.html"
        },
        {
          "name": "28971",
          "tags": [
            "third-party-advisory",
            "x_refsource_SECUNIA"
          ],
          "url": "http://secunia.com/advisories/28971"
        },
        {
          "name": "RHSA-2008:0787",
          "tags": [
            "vendor-advisory",
            "x_refsource_REDHAT"
          ],
          "url": "http://www.redhat.com/support/errata/RHSA-2008-0787.html"
        },
        {
          "name": "[Security-announce] 20080728 VMSA-2008-00011 Updated ESX service console packages for Samba and vmnix",
          "tags": [
            "mailing-list",
            "x_refsource_MLIST"
          ],
          "url": "http://lists.vmware.com/pipermail/security-announce/2008/000023.html"
        },
        {
          "name": "USN-578-1",
          "tags": [
            "vendor-advisory",
            "x_refsource_UBUNTU"
          ],
          "url": "http://www.ubuntu.com/usn/usn-578-1"
        },
        {
          "name": "31246",
          "tags": [
            "third-party-advisory",
            "x_refsource_SECUNIA"
          ],
          "url": "http://secunia.com/advisories/31246"
        },
        {
          "name": "29570",
          "tags": [
            "third-party-advisory",
            "x_refsource_SECUNIA"
          ],
          "url": "http://secunia.com/advisories/29570"
        },
        {
          "name": "RHSA-2008:0055",
          "tags": [
            "vendor-advisory",
            "x_refsource_REDHAT"
          ],
          "url": "http://rhn.redhat.com/errata/RHSA-2008-0055.html"
        },
        {
          "name": "SUSE-SA:2008:032",
          "tags": [
            "vendor-advisory",
            "x_refsource_SUSE"
          ],
          "url": "http://lists.opensuse.org/opensuse-security-announce/2008-07/msg00002.html"
        }
      ],
      "x_legacyV4Record": {
        "CVE_data_meta": {
          "ASSIGNER": "cve@mitre.org",
          "ID": "CVE-2007-6151",
          "STATE": "PUBLIC"
        },
        "affects": {
          "vendor": {
            "vendor_data": [
              {
                "product": {
                  "product_data": [
                    {
                      "product_name": "n/a",
                      "version": {
                        "version_data": [
                          {
                            "version_value": "n/a"
                          }
                        ]
                      }
                    }
                  ]
                },
                "vendor_name": "n/a"
              }
            ]
          }
        },
        "data_format": "MITRE",
        "data_type": "CVE",
        "data_version": "4.0",
        "description": {
          "description_data": [
            {
              "lang": "eng",
              "value": "The isdn_ioctl function in isdn_common.c in Linux kernel 2.6.23 allows local users to cause a denial of service via a crafted ioctl struct in which iocts is not null terminated, which triggers a buffer overflow."
            }
          ]
        },
        "problemtype": {
          "problemtype_data": [
            {
              "description": [
                {
                  "lang": "eng",
                  "value": "n/a"
                }
              ]
            }
          ]
        },
        "references": {
          "reference_data": [
            {
              "name": "30962",
              "refsource": "SECUNIA",
              "url": "http://secunia.com/advisories/30962"
            },
            {
              "name": "SUSE-SA:2008:017",
              "refsource": "SUSE",
              "url": "http://lists.opensuse.org/opensuse-security-announce/2008-03/msg00007.html"
            },
            {
              "name": "27497",
              "refsource": "BID",
              "url": "http://www.securityfocus.com/bid/27497"
            },
            {
              "name": "http://git.kernel.org/?p=linux/kernel/git/torvalds/linux-2.6.git;a=commitdiff;h=eafe1aa37e6ec2d56f14732b5240c4dd09f0613a",
              "refsource": "CONFIRM",
              "url": "http://git.kernel.org/?p=linux/kernel/git/torvalds/linux-2.6.git;a=commitdiff;h=eafe1aa37e6ec2d56f14732b5240c4dd09f0613a"
            },
            {
              "name": "SUSE-SA:2008:007",
              "refsource": "SUSE",
              "url": "http://lists.opensuse.org/opensuse-security-announce/2008-02/msg00005.html"
            },
            {
              "name": "oval:org.mitre.oval:def:10971",
              "refsource": "OVAL",
              "url": "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A10971"
            },
            {
              "name": "28706",
              "refsource": "SECUNIA",
              "url": "http://secunia.com/advisories/28706"
            },
            {
              "name": "28626",
              "refsource": "SECUNIA",
              "url": "http://secunia.com/advisories/28626"
            },
            {
              "name": "DSA-1479",
              "refsource": "DEBIAN",
              "url": "http://www.debian.org/security/2008/dsa-1479"
            },
            {
              "name": "MDVSA-2008:112",
              "refsource": "MANDRIVA",
              "url": "http://www.mandriva.com/security/advisories?name=MDVSA-2008:112"
            },
            {
              "name": "DSA-1504",
              "refsource": "DEBIAN",
              "url": "http://www.debian.org/security/2008/dsa-1504"
            },
            {
              "name": "28889",
              "refsource": "SECUNIA",
              "url": "http://secunia.com/advisories/28889"
            },
            {
              "name": "30110",
              "refsource": "SECUNIA",
              "url": "http://secunia.com/advisories/30110"
            },
            {
              "name": "ADV-2008-2222",
              "refsource": "VUPEN",
              "url": "http://www.vupen.com/english/advisories/2008/2222/references"
            },
            {
              "name": "33280",
              "refsource": "SECUNIA",
              "url": "http://secunia.com/advisories/33280"
            },
            {
              "name": "MDVSA-2008:086",
              "refsource": "MANDRIVA",
              "url": "http://www.mandriva.com/security/advisories?name=MDVSA-2008:086"
            },
            {
              "name": "DSA-1503",
              "refsource": "DEBIAN",
              "url": "http://www.debian.org/security/2008/dsa-1503"
            },
            {
              "name": "28748",
              "refsource": "SECUNIA",
              "url": "http://secunia.com/advisories/28748"
            },
            {
              "name": "USN-574-1",
              "refsource": "UBUNTU",
              "url": "http://www.ubuntu.com/usn/usn-574-1"
            },
            {
              "name": "29058",
              "refsource": "SECUNIA",
              "url": "http://secunia.com/advisories/29058"
            },
            {
              "name": "RHSA-2008:0211",
              "refsource": "REDHAT",
              "url": "http://www.redhat.com/support/errata/RHSA-2008-0211.html"
            },
            {
              "name": "28971",
              "refsource": "SECUNIA",
              "url": "http://secunia.com/advisories/28971"
            },
            {
              "name": "RHSA-2008:0787",
              "refsource": "REDHAT",
              "url": "http://www.redhat.com/support/errata/RHSA-2008-0787.html"
            },
            {
              "name": "[Security-announce] 20080728 VMSA-2008-00011 Updated ESX service console packages for Samba and vmnix",
              "refsource": "MLIST",
              "url": "http://lists.vmware.com/pipermail/security-announce/2008/000023.html"
            },
            {
              "name": "USN-578-1",
              "refsource": "UBUNTU",
              "url": "http://www.ubuntu.com/usn/usn-578-1"
            },
            {
              "name": "31246",
              "refsource": "SECUNIA",
              "url": "http://secunia.com/advisories/31246"
            },
            {
              "name": "29570",
              "refsource": "SECUNIA",
              "url": "http://secunia.com/advisories/29570"
            },
            {
              "name": "RHSA-2008:0055",
              "refsource": "REDHAT",
              "url": "http://rhn.redhat.com/errata/RHSA-2008-0055.html"
            },
            {
              "name": "SUSE-SA:2008:032",
              "refsource": "SUSE",
              "url": "http://lists.opensuse.org/opensuse-security-announce/2008-07/msg00002.html"
            }
          ]
        }
      }
    }
  },
  "cveMetadata": {
    "assignerOrgId": "8254265b-2729-46b6-b9e3-3dfca2d5bfca",
    "assignerShortName": "mitre",
    "cveId": "CVE-2007-6151",
    "datePublished": "2007-12-15T01:00:00.000Z",
    "dateReserved": "2007-11-28T00:00:00.000Z",
    "dateUpdated": "2024-08-07T15:54:27.005Z",
    "state": "PUBLISHED"
  },
  "dataType": "CVE_RECORD",
  "dataVersion": "5.1"
}

CVE-2006-4814 (GCVE-0-2006-4814)

Vulnerability from cvelistv5 – Published: 2006-12-20 02:00 – Updated: 2024-08-07 19:23

Summary

The mincore function in the Linux kernel before 2.4.33.6 does not properly lock access to user space, which has unspecified impact and attack vectors, possibly related to a deadlock.

Severity ?

No CVSS data available.

CWE

Assigner

redhat

References

URL

Tags

	http://www.trustix.org/errata/2007/0002/	vendor-advisoryx_refsource_TRUSTIX
	http://secunia.com/advisories/24098	third-party-advisoryx_refsource_SECUNIA
	http://secunia.com/advisories/23609	third-party-advisoryx_refsource_SECUNIA
	https://oval.cisecurity.org/repository/search/def…	vdb-entrysignaturex_refsource_OVAL
	http://rhn.redhat.com/errata/RHSA-2007-0014.html	vendor-advisoryx_refsource_REDHAT
	http://secunia.com/advisories/23436	third-party-advisoryx_refsource_SECUNIA
	http://www.securityfocus.com/bid/21663	vdb-entryx_refsource_BID
	http://www.mandriva.com/security/advisories?name=…	vendor-advisoryx_refsource_MANDRIVA
	http://support.avaya.com/elmodocs2/security/ASA-2…	x_refsource_CONFIRM
	http://www.ubuntu.com/usn/usn-416-1	vendor-advisoryx_refsource_UBUNTU
	http://secunia.com/advisories/24100	third-party-advisoryx_refsource_SECUNIA
	http://secunia.com/advisories/30110	third-party-advisoryx_refsource_SECUNIA
	http://www.vupen.com/english/advisories/2008/2222…	vdb-entryx_refsource_VUPEN
	http://www.vupen.com/english/advisories/2006/5082	vdb-entryx_refsource_VUPEN
	http://www.kernel.org/pub/linux/kernel/v2.4/Chang…	x_refsource_CONFIRM
	http://secunia.com/advisories/33280	third-party-advisoryx_refsource_SECUNIA
	http://secunia.com/advisories/24206	third-party-advisoryx_refsource_SECUNIA
	http://secunia.com/advisories/23997	third-party-advisoryx_refsource_SECUNIA
	http://www.securityfocus.com/archive/1/471457	mailing-listx_refsource_BUGTRAQ
	http://secunia.com/advisories/24482	third-party-advisoryx_refsource_SECUNIA
	http://www.novell.com/linux/security/advisories/2…	vendor-advisoryx_refsource_SUSE
	http://www.debian.org/security/2008/dsa-1503	vendor-advisoryx_refsource_DEBIAN
	http://secunia.com/advisories/29058	third-party-advisoryx_refsource_SECUNIA
	http://www.debian.org/security/2007/dsa-1304	vendor-advisoryx_refsource_DEBIAN
	http://www.redhat.com/support/errata/RHSA-2008-02…	vendor-advisoryx_refsource_REDHAT
	http://secunia.com/advisories/25714	third-party-advisoryx_refsource_SECUNIA
	http://www.redhat.com/support/errata/RHSA-2008-07…	vendor-advisoryx_refsource_REDHAT
	http://lists.vmware.com/pipermail/security-announ…	mailing-listx_refsource_MLIST
	http://secunia.com/advisories/25691	third-party-advisoryx_refsource_SECUNIA
	http://www.mandriva.com/security/advisories?name=…	vendor-advisoryx_refsource_MANDRIVA
	http://secunia.com/advisories/31246	third-party-advisoryx_refsource_SECUNIA

Date Public ?

2006-12-19 00:00

Show details on NVD website

JSON

To clipboard

{
  "containers": {
    "adp": [
      {
        "providerMetadata": {
          "dateUpdated": "2024-08-07T19:23:41.172Z",
          "orgId": "af854a3a-2127-422b-91ae-364da2661108",
          "shortName": "CVE"
        },
        "references": [
          {
            "name": "2007-0002",
            "tags": [
              "vendor-advisory",
              "x_refsource_TRUSTIX",
              "x_transferred"
            ],
            "url": "http://www.trustix.org/errata/2007/0002/"
          },
          {
            "name": "24098",
            "tags": [
              "third-party-advisory",
              "x_refsource_SECUNIA",
              "x_transferred"
            ],
            "url": "http://secunia.com/advisories/24098"
          },
          {
            "name": "23609",
            "tags": [
              "third-party-advisory",
              "x_refsource_SECUNIA",
              "x_transferred"
            ],
            "url": "http://secunia.com/advisories/23609"
          },
          {
            "name": "oval:org.mitre.oval:def:9648",
            "tags": [
              "vdb-entry",
              "signature",
              "x_refsource_OVAL",
              "x_transferred"
            ],
            "url": "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A9648"
          },
          {
            "name": "RHSA-2007:0014",
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT",
              "x_transferred"
            ],
            "url": "http://rhn.redhat.com/errata/RHSA-2007-0014.html"
          },
          {
            "name": "23436",
            "tags": [
              "third-party-advisory",
              "x_refsource_SECUNIA",
              "x_transferred"
            ],
            "url": "http://secunia.com/advisories/23436"
          },
          {
            "name": "21663",
            "tags": [
              "vdb-entry",
              "x_refsource_BID",
              "x_transferred"
            ],
            "url": "http://www.securityfocus.com/bid/21663"
          },
          {
            "name": "MDKSA-2007:040",
            "tags": [
              "vendor-advisory",
              "x_refsource_MANDRIVA",
              "x_transferred"
            ],
            "url": "http://www.mandriva.com/security/advisories?name=MDKSA-2007:040"
          },
          {
            "tags": [
              "x_refsource_CONFIRM",
              "x_transferred"
            ],
            "url": "http://support.avaya.com/elmodocs2/security/ASA-2007-063.htm"
          },
          {
            "name": "USN-416-1",
            "tags": [
              "vendor-advisory",
              "x_refsource_UBUNTU",
              "x_transferred"
            ],
            "url": "http://www.ubuntu.com/usn/usn-416-1"
          },
          {
            "name": "24100",
            "tags": [
              "third-party-advisory",
              "x_refsource_SECUNIA",
              "x_transferred"
            ],
            "url": "http://secunia.com/advisories/24100"
          },
          {
            "name": "30110",
            "tags": [
              "third-party-advisory",
              "x_refsource_SECUNIA",
              "x_transferred"
            ],
            "url": "http://secunia.com/advisories/30110"
          },
          {
            "name": "ADV-2008-2222",
            "tags": [
              "vdb-entry",
              "x_refsource_VUPEN",
              "x_transferred"
            ],
            "url": "http://www.vupen.com/english/advisories/2008/2222/references"
          },
          {
            "name": "ADV-2006-5082",
            "tags": [
              "vdb-entry",
              "x_refsource_VUPEN",
              "x_transferred"
            ],
            "url": "http://www.vupen.com/english/advisories/2006/5082"
          },
          {
            "tags": [
              "x_refsource_CONFIRM",
              "x_transferred"
            ],
            "url": "http://www.kernel.org/pub/linux/kernel/v2.4/ChangeLog-2.4.33.6"
          },
          {
            "name": "33280",
            "tags": [
              "third-party-advisory",
              "x_refsource_SECUNIA",
              "x_transferred"
            ],
            "url": "http://secunia.com/advisories/33280"
          },
          {
            "name": "24206",
            "tags": [
              "third-party-advisory",
              "x_refsource_SECUNIA",
              "x_transferred"
            ],
            "url": "http://secunia.com/advisories/24206"
          },
          {
            "name": "23997",
            "tags": [
              "third-party-advisory",
              "x_refsource_SECUNIA",
              "x_transferred"
            ],
            "url": "http://secunia.com/advisories/23997"
          },
          {
            "name": "20070615 rPSA-2007-0124-1 kernel xen",
            "tags": [
              "mailing-list",
              "x_refsource_BUGTRAQ",
              "x_transferred"
            ],
            "url": "http://www.securityfocus.com/archive/1/471457"
          },
          {
            "name": "24482",
            "tags": [
              "third-party-advisory",
              "x_refsource_SECUNIA",
              "x_transferred"
            ],
            "url": "http://secunia.com/advisories/24482"
          },
          {
            "name": "SUSE-SA:2007:018",
            "tags": [
              "vendor-advisory",
              "x_refsource_SUSE",
              "x_transferred"
            ],
            "url": "http://www.novell.com/linux/security/advisories/2007_18_kernel.html"
          },
          {
            "name": "DSA-1503",
            "tags": [
              "vendor-advisory",
              "x_refsource_DEBIAN",
              "x_transferred"
            ],
            "url": "http://www.debian.org/security/2008/dsa-1503"
          },
          {
            "name": "29058",
            "tags": [
              "third-party-advisory",
              "x_refsource_SECUNIA",
              "x_transferred"
            ],
            "url": "http://secunia.com/advisories/29058"
          },
          {
            "name": "DSA-1304",
            "tags": [
              "vendor-advisory",
              "x_refsource_DEBIAN",
              "x_transferred"
            ],
            "url": "http://www.debian.org/security/2007/dsa-1304"
          },
          {
            "name": "RHSA-2008:0211",
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT",
              "x_transferred"
            ],
            "url": "http://www.redhat.com/support/errata/RHSA-2008-0211.html"
          },
          {
            "name": "25714",
            "tags": [
              "third-party-advisory",
              "x_refsource_SECUNIA",
              "x_transferred"
            ],
            "url": "http://secunia.com/advisories/25714"
          },
          {
            "name": "RHSA-2008:0787",
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT",
              "x_transferred"
            ],
            "url": "http://www.redhat.com/support/errata/RHSA-2008-0787.html"
          },
          {
            "name": "[Security-announce] 20080728 VMSA-2008-00011 Updated ESX service console packages for Samba and vmnix",
            "tags": [
              "mailing-list",
              "x_refsource_MLIST",
              "x_transferred"
            ],
            "url": "http://lists.vmware.com/pipermail/security-announce/2008/000023.html"
          },
          {
            "name": "25691",
            "tags": [
              "third-party-advisory",
              "x_refsource_SECUNIA",
              "x_transferred"
            ],
            "url": "http://secunia.com/advisories/25691"
          },
          {
            "name": "MDKSA-2007:060",
            "tags": [
              "vendor-advisory",
              "x_refsource_MANDRIVA",
              "x_transferred"
            ],
            "url": "http://www.mandriva.com/security/advisories?name=MDKSA-2007:060"
          },
          {
            "name": "31246",
            "tags": [
              "third-party-advisory",
              "x_refsource_SECUNIA",
              "x_transferred"
            ],
            "url": "http://secunia.com/advisories/31246"
          }
        ],
        "title": "CVE Program Container"
      }
    ],
    "cna": {
      "affected": [
        {
          "product": "n/a",
          "vendor": "n/a",
          "versions": [
            {
              "status": "affected",
              "version": "n/a"
            }
          ]
        }
      ],
      "datePublic": "2006-12-19T00:00:00.000Z",
      "descriptions": [
        {
          "lang": "en",
          "value": "The mincore function in the Linux kernel before 2.4.33.6 does not properly lock access to user space, which has unspecified impact and attack vectors, possibly related to a deadlock."
        }
      ],
      "problemTypes": [
        {
          "descriptions": [
            {
              "description": "n/a",
              "lang": "en",
              "type": "text"
            }
          ]
        }
      ],
      "providerMetadata": {
        "dateUpdated": "2017-10-10T00:57:01.000Z",
        "orgId": "53f830b8-0a3f-465b-8143-3b8a9948e749",
        "shortName": "redhat"
      },
      "references": [
        {
          "name": "2007-0002",
          "tags": [
            "vendor-advisory",
            "x_refsource_TRUSTIX"
          ],
          "url": "http://www.trustix.org/errata/2007/0002/"
        },
        {
          "name": "24098",
          "tags": [
            "third-party-advisory",
            "x_refsource_SECUNIA"
          ],
          "url": "http://secunia.com/advisories/24098"
        },
        {
          "name": "23609",
          "tags": [
            "third-party-advisory",
            "x_refsource_SECUNIA"
          ],
          "url": "http://secunia.com/advisories/23609"
        },
        {
          "name": "oval:org.mitre.oval:def:9648",
          "tags": [
            "vdb-entry",
            "signature",
            "x_refsource_OVAL"
          ],
          "url": "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A9648"
        },
        {
          "name": "RHSA-2007:0014",
          "tags": [
            "vendor-advisory",
            "x_refsource_REDHAT"
          ],
          "url": "http://rhn.redhat.com/errata/RHSA-2007-0014.html"
        },
        {
          "name": "23436",
          "tags": [
            "third-party-advisory",
            "x_refsource_SECUNIA"
          ],
          "url": "http://secunia.com/advisories/23436"
        },
        {
          "name": "21663",
          "tags": [
            "vdb-entry",
            "x_refsource_BID"
          ],
          "url": "http://www.securityfocus.com/bid/21663"
        },
        {
          "name": "MDKSA-2007:040",
          "tags": [
            "vendor-advisory",
            "x_refsource_MANDRIVA"
          ],
          "url": "http://www.mandriva.com/security/advisories?name=MDKSA-2007:040"
        },
        {
          "tags": [
            "x_refsource_CONFIRM"
          ],
          "url": "http://support.avaya.com/elmodocs2/security/ASA-2007-063.htm"
        },
        {
          "name": "USN-416-1",
          "tags": [
            "vendor-advisory",
            "x_refsource_UBUNTU"
          ],
          "url": "http://www.ubuntu.com/usn/usn-416-1"
        },
        {
          "name": "24100",
          "tags": [
            "third-party-advisory",
            "x_refsource_SECUNIA"
          ],
          "url": "http://secunia.com/advisories/24100"
        },
        {
          "name": "30110",
          "tags": [
            "third-party-advisory",
            "x_refsource_SECUNIA"
          ],
          "url": "http://secunia.com/advisories/30110"
        },
        {
          "name": "ADV-2008-2222",
          "tags": [
            "vdb-entry",
            "x_refsource_VUPEN"
          ],
          "url": "http://www.vupen.com/english/advisories/2008/2222/references"
        },
        {
          "name": "ADV-2006-5082",
          "tags": [
            "vdb-entry",
            "x_refsource_VUPEN"
          ],
          "url": "http://www.vupen.com/english/advisories/2006/5082"
        },
        {
          "tags": [
            "x_refsource_CONFIRM"
          ],
          "url": "http://www.kernel.org/pub/linux/kernel/v2.4/ChangeLog-2.4.33.6"
        },
        {
          "name": "33280",
          "tags": [
            "third-party-advisory",
            "x_refsource_SECUNIA"
          ],
          "url": "http://secunia.com/advisories/33280"
        },
        {
          "name": "24206",
          "tags": [
            "third-party-advisory",
            "x_refsource_SECUNIA"
          ],
          "url": "http://secunia.com/advisories/24206"
        },
        {
          "name": "23997",
          "tags": [
            "third-party-advisory",
            "x_refsource_SECUNIA"
          ],
          "url": "http://secunia.com/advisories/23997"
        },
        {
          "name": "20070615 rPSA-2007-0124-1 kernel xen",
          "tags": [
            "mailing-list",
            "x_refsource_BUGTRAQ"
          ],
          "url": "http://www.securityfocus.com/archive/1/471457"
        },
        {
          "name": "24482",
          "tags": [
            "third-party-advisory",
            "x_refsource_SECUNIA"
          ],
          "url": "http://secunia.com/advisories/24482"
        },
        {
          "name": "SUSE-SA:2007:018",
          "tags": [
            "vendor-advisory",
            "x_refsource_SUSE"
          ],
          "url": "http://www.novell.com/linux/security/advisories/2007_18_kernel.html"
        },
        {
          "name": "DSA-1503",
          "tags": [
            "vendor-advisory",
            "x_refsource_DEBIAN"
          ],
          "url": "http://www.debian.org/security/2008/dsa-1503"
        },
        {
          "name": "29058",
          "tags": [
            "third-party-advisory",
            "x_refsource_SECUNIA"
          ],
          "url": "http://secunia.com/advisories/29058"
        },
        {
          "name": "DSA-1304",
          "tags": [
            "vendor-advisory",
            "x_refsource_DEBIAN"
          ],
          "url": "http://www.debian.org/security/2007/dsa-1304"
        },
        {
          "name": "RHSA-2008:0211",
          "tags": [
            "vendor-advisory",
            "x_refsource_REDHAT"
          ],
          "url": "http://www.redhat.com/support/errata/RHSA-2008-0211.html"
        },
        {
          "name": "25714",
          "tags": [
            "third-party-advisory",
            "x_refsource_SECUNIA"
          ],
          "url": "http://secunia.com/advisories/25714"
        },
        {
          "name": "RHSA-2008:0787",
          "tags": [
            "vendor-advisory",
            "x_refsource_REDHAT"
          ],
          "url": "http://www.redhat.com/support/errata/RHSA-2008-0787.html"
        },
        {
          "name": "[Security-announce] 20080728 VMSA-2008-00011 Updated ESX service console packages for Samba and vmnix",
          "tags": [
            "mailing-list",
            "x_refsource_MLIST"
          ],
          "url": "http://lists.vmware.com/pipermail/security-announce/2008/000023.html"
        },
        {
          "name": "25691",
          "tags": [
            "third-party-advisory",
            "x_refsource_SECUNIA"
          ],
          "url": "http://secunia.com/advisories/25691"
        },
        {
          "name": "MDKSA-2007:060",
          "tags": [
            "vendor-advisory",
            "x_refsource_MANDRIVA"
          ],
          "url": "http://www.mandriva.com/security/advisories?name=MDKSA-2007:060"
        },
        {
          "name": "31246",
          "tags": [
            "third-party-advisory",
            "x_refsource_SECUNIA"
          ],
          "url": "http://secunia.com/advisories/31246"
        }
      ]
    }
  },
  "cveMetadata": {
    "assignerOrgId": "53f830b8-0a3f-465b-8143-3b8a9948e749",
    "assignerShortName": "redhat",
    "cveId": "CVE-2006-4814",
    "datePublished": "2006-12-20T02:00:00.000Z",
    "dateReserved": "2006-09-15T00:00:00.000Z",
    "dateUpdated": "2024-08-07T19:23:41.172Z",
    "state": "PUBLISHED"
  },
  "dataType": "CVE_RECORD",
  "dataVersion": "5.1"
}

CVE-2007-3848 (GCVE-0-2007-3848)

Vulnerability from cvelistv5 – Published: 2007-08-14 17:00 – Updated: 2024-08-07 14:28

Summary

Severity ?

No CVSS data available.

CWE

Assigner

redhat

References

URL

Tags

	http://lists.opensuse.org/opensuse-security-annou…	vendor-advisoryx_refsource_SUSE
	http://www.redhat.com/support/errata/RHSA-2007-09…	vendor-advisoryx_refsource_REDHAT
	http://www.securityfocus.com/bid/25387	vdb-entryx_refsource_BID
	http://secunia.com/advisories/27747	third-party-advisoryx_refsource_SECUNIA
	http://bugzilla.redhat.com/bugzilla/show_bug.cgi?…	x_refsource_MISC
	http://secunia.com/advisories/27212	third-party-advisoryx_refsource_SECUNIA
	http://secunia.com/advisories/27227	third-party-advisoryx_refsource_SECUNIA
	http://secunia.com/advisories/26664	third-party-advisoryx_refsource_SECUNIA
	http://marc.info/?l=bugtraq&m=118711306802632&w=2	mailing-listx_refsource_BUGTRAQ
	http://secunia.com/advisories/26643	third-party-advisoryx_refsource_SECUNIA
	https://issues.rpath.com/browse/RPL-1648	x_refsource_CONFIRM
	http://www.redhat.com/support/errata/RHSA-2007-10…	vendor-advisoryx_refsource_REDHAT
	http://secunia.com/advisories/28806	third-party-advisoryx_refsource_SECUNIA
	http://www.novell.com/linux/security/advisories/2…	vendor-advisoryx_refsource_SUSE
	http://secunia.com/advisories/27913	third-party-advisoryx_refsource_SECUNIA
	http://secunia.com/advisories/27322	third-party-advisoryx_refsource_SECUNIA
	http://www.securityfocus.com/archive/1/476803/100…	mailing-listx_refsource_BUGTRAQ
	http://secunia.com/advisories/26651	third-party-advisoryx_refsource_SECUNIA
	http://www.redhat.com/support/errata/RHSA-2007-09…	vendor-advisoryx_refsource_REDHAT
	http://www.ubuntu.com/usn/usn-510-1	vendor-advisoryx_refsource_UBUNTU
	http://www.debian.org/security/2008/dsa-1504	vendor-advisoryx_refsource_DEBIAN
	http://www.debian.org/security/2007/dsa-1356	vendor-advisoryx_refsource_DEBIAN
	http://support.avaya.com/elmodocs2/security/ASA-2…	x_refsource_CONFIRM
	http://www.ubuntu.com/usn/usn-509-1	vendor-advisoryx_refsource_UBUNTU
	http://secunia.com/advisories/33280	third-party-advisoryx_refsource_SECUNIA
	http://www.securityfocus.com/archive/1/476538/100…	mailing-listx_refsource_BUGTRAQ
	http://www.securityfocus.com/archive/1/476464/100…	mailing-listx_refsource_BUGTRAQ
	http://www.kernel.org/pub/linux/kernel/v2.6/Chang…	x_refsource_CONFIRM
	http://www.mandriva.com/security/advisories?name=…	vendor-advisoryx_refsource_MANDRIVA
	http://lists.opensuse.org/opensuse-security-annou…	vendor-advisoryx_refsource_SUSE
	http://www.debian.org/security/2008/dsa-1503	vendor-advisoryx_refsource_DEBIAN
	http://secunia.com/advisories/29058	third-party-advisoryx_refsource_SECUNIA
	http://secunia.com/advisories/26500	third-party-advisoryx_refsource_SECUNIA
	http://marc.info/?l=openwall-announce&m=118710356…	mailing-listx_refsource_MLIST
	http://www.redhat.com/support/errata/RHSA-2008-07…	vendor-advisoryx_refsource_REDHAT
	http://secunia.com/advisories/26450	third-party-advisoryx_refsource_SECUNIA
	https://oval.cisecurity.org/repository/search/def…	vdb-entrysignaturex_refsource_OVAL
	http://www.ubuntu.com/usn/usn-508-1	vendor-advisoryx_refsource_UBUNTU
	http://www.securityfocus.com/archive/1/476677/100…	mailing-listx_refsource_BUGTRAQ
	http://secunia.com/advisories/27436	third-party-advisoryx_refsource_SECUNIA
	http://secunia.com/advisories/29570	third-party-advisoryx_refsource_SECUNIA
	http://www.mandriva.com/security/advisories?name=…	vendor-advisoryx_refsource_MANDRIVA

Date Public ?

2007-08-14 00:00

Show details on NVD website

JSON

To clipboard

{
  "containers": {
    "adp": [
      {
        "providerMetadata": {
          "dateUpdated": "2024-08-07T14:28:52.569Z",
          "orgId": "af854a3a-2127-422b-91ae-364da2661108",
          "shortName": "CVE"
        },
        "references": [
          {
            "name": "SUSE-SA:2008:017",
            "tags": [
              "vendor-advisory",
              "x_refsource_SUSE",
              "x_transferred"
            ],
            "url": "http://lists.opensuse.org/opensuse-security-announce/2008-03/msg00007.html"
          },
          {
            "name": "RHSA-2007:0940",
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT",
              "x_transferred"
            ],
            "url": "http://www.redhat.com/support/errata/RHSA-2007-0940.html"
          },
          {
            "name": "25387",
            "tags": [
              "vdb-entry",
              "x_refsource_BID",
              "x_transferred"
            ],
            "url": "http://www.securityfocus.com/bid/25387"
          },
          {
            "name": "27747",
            "tags": [
              "third-party-advisory",
              "x_refsource_SECUNIA",
              "x_transferred"
            ],
            "url": "http://secunia.com/advisories/27747"
          },
          {
            "tags": [
              "x_refsource_MISC",
              "x_transferred"
            ],
            "url": "http://bugzilla.redhat.com/bugzilla/show_bug.cgi?id=CVE-2007-3848"
          },
          {
            "name": "27212",
            "tags": [
              "third-party-advisory",
              "x_refsource_SECUNIA",
              "x_transferred"
            ],
            "url": "http://secunia.com/advisories/27212"
          },
          {
            "name": "27227",
            "tags": [
              "third-party-advisory",
              "x_refsource_SECUNIA",
              "x_transferred"
            ],
            "url": "http://secunia.com/advisories/27227"
          },
          {
            "name": "26664",
            "tags": [
              "third-party-advisory",
              "x_refsource_SECUNIA",
              "x_transferred"
            ],
            "url": "http://secunia.com/advisories/26664"
          },
          {
            "name": "20070814 COSEINC Linux Advisory #1: Linux Kernel Parent Process DeathSignal Vulnerability",
            "tags": [
              "mailing-list",
              "x_refsource_BUGTRAQ",
              "x_transferred"
            ],
            "url": "http://marc.info/?l=bugtraq\u0026m=118711306802632\u0026w=2"
          },
          {
            "name": "26643",
            "tags": [
              "third-party-advisory",
              "x_refsource_SECUNIA",
              "x_transferred"
            ],
            "url": "http://secunia.com/advisories/26643"
          },
          {
            "tags": [
              "x_refsource_CONFIRM",
              "x_transferred"
            ],
            "url": "https://issues.rpath.com/browse/RPL-1648"
          },
          {
            "name": "RHSA-2007:1049",
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT",
              "x_transferred"
            ],
            "url": "http://www.redhat.com/support/errata/RHSA-2007-1049.html"
          },
          {
            "name": "28806",
            "tags": [
              "third-party-advisory",
              "x_refsource_SECUNIA",
              "x_transferred"
            ],
            "url": "http://secunia.com/advisories/28806"
          },
          {
            "name": "SUSE-SA:2007:053",
            "tags": [
              "vendor-advisory",
              "x_refsource_SUSE",
              "x_transferred"
            ],
            "url": "http://www.novell.com/linux/security/advisories/2007_53_kernel.html"
          },
          {
            "name": "27913",
            "tags": [
              "third-party-advisory",
              "x_refsource_SECUNIA",
              "x_transferred"
            ],
            "url": "http://secunia.com/advisories/27913"
          },
          {
            "name": "27322",
            "tags": [
              "third-party-advisory",
              "x_refsource_SECUNIA",
              "x_transferred"
            ],
            "url": "http://secunia.com/advisories/27322"
          },
          {
            "name": "20070816 Re: COSEINC Linux Advisory #1: Linux Kernel Parent Process Death Signal Vulnerability",
            "tags": [
              "mailing-list",
              "x_refsource_BUGTRAQ",
              "x_transferred"
            ],
            "url": "http://www.securityfocus.com/archive/1/476803/100/0/threaded"
          },
          {
            "name": "26651",
            "tags": [
              "third-party-advisory",
              "x_refsource_SECUNIA",
              "x_transferred"
            ],
            "url": "http://secunia.com/advisories/26651"
          },
          {
            "name": "RHSA-2007:0939",
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT",
              "x_transferred"
            ],
            "url": "http://www.redhat.com/support/errata/RHSA-2007-0939.html"
          },
          {
            "name": "USN-510-1",
            "tags": [
              "vendor-advisory",
              "x_refsource_UBUNTU",
              "x_transferred"
            ],
            "url": "http://www.ubuntu.com/usn/usn-510-1"
          },
          {
            "name": "DSA-1504",
            "tags": [
              "vendor-advisory",
              "x_refsource_DEBIAN",
              "x_transferred"
            ],
            "url": "http://www.debian.org/security/2008/dsa-1504"
          },
          {
            "name": "DSA-1356",
            "tags": [
              "vendor-advisory",
              "x_refsource_DEBIAN",
              "x_transferred"
            ],
            "url": "http://www.debian.org/security/2007/dsa-1356"
          },
          {
            "tags": [
              "x_refsource_CONFIRM",
              "x_transferred"
            ],
            "url": "http://support.avaya.com/elmodocs2/security/ASA-2007-474.htm"
          },
          {
            "name": "USN-509-1",
            "tags": [
              "vendor-advisory",
              "x_refsource_UBUNTU",
              "x_transferred"
            ],
            "url": "http://www.ubuntu.com/usn/usn-509-1"
          },
          {
            "name": "33280",
            "tags": [
              "third-party-advisory",
              "x_refsource_SECUNIA",
              "x_transferred"
            ],
            "url": "http://secunia.com/advisories/33280"
          },
          {
            "name": "20070814 Re: COSEINC Linux Advisory #1: Linux Kernel Parent Process Death Signal Vulnerability",
            "tags": [
              "mailing-list",
              "x_refsource_BUGTRAQ",
              "x_transferred"
            ],
            "url": "http://www.securityfocus.com/archive/1/476538/100/0/threaded"
          },
          {
            "name": "20070814 COSEINC Linux Advisory #1: Linux Kernel Parent Process Death Signal Vulnerability",
            "tags": [
              "mailing-list",
              "x_refsource_BUGTRAQ",
              "x_transferred"
            ],
            "url": "http://www.securityfocus.com/archive/1/476464/100/0/threaded"
          },
          {
            "tags": [
              "x_refsource_CONFIRM",
              "x_transferred"
            ],
            "url": "http://www.kernel.org/pub/linux/kernel/v2.6/ChangeLog-2.6.22.4"
          },
          {
            "name": "MDKSA-2007:196",
            "tags": [
              "vendor-advisory",
              "x_refsource_MANDRIVA",
              "x_transferred"
            ],
            "url": "http://www.mandriva.com/security/advisories?name=MDKSA-2007:196"
          },
          {
            "name": "SUSE-SA:2008:006",
            "tags": [
              "vendor-advisory",
              "x_refsource_SUSE",
              "x_transferred"
            ],
            "url": "http://lists.opensuse.org/opensuse-security-announce/2008-02/msg00002.html"
          },
          {
            "name": "DSA-1503",
            "tags": [
              "vendor-advisory",
              "x_refsource_DEBIAN",
              "x_transferred"
            ],
            "url": "http://www.debian.org/security/2008/dsa-1503"
          },
          {
            "name": "29058",
            "tags": [
              "third-party-advisory",
              "x_refsource_SECUNIA",
              "x_transferred"
            ],
            "url": "http://secunia.com/advisories/29058"
          },
          {
            "name": "26500",
            "tags": [
              "third-party-advisory",
              "x_refsource_SECUNIA",
              "x_transferred"
            ],
            "url": "http://secunia.com/advisories/26500"
          },
          {
            "name": "[openwall-announce] 20070814 Linux 2.4.35-ow2",
            "tags": [
              "mailing-list",
              "x_refsource_MLIST",
              "x_transferred"
            ],
            "url": "http://marc.info/?l=openwall-announce\u0026m=118710356812637\u0026w=2"
          },
          {
            "name": "RHSA-2008:0787",
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT",
              "x_transferred"
            ],
            "url": "http://www.redhat.com/support/errata/RHSA-2008-0787.html"
          },
          {
            "name": "26450",
            "tags": [
              "third-party-advisory",
              "x_refsource_SECUNIA",
              "x_transferred"
            ],
            "url": "http://secunia.com/advisories/26450"
          },
          {
            "name": "oval:org.mitre.oval:def:10120",
            "tags": [
              "vdb-entry",
              "signature",
              "x_refsource_OVAL",
              "x_transferred"
            ],
            "url": "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A10120"
          },
          {
            "name": "USN-508-1",
            "tags": [
              "vendor-advisory",
              "x_refsource_UBUNTU",
              "x_transferred"
            ],
            "url": "http://www.ubuntu.com/usn/usn-508-1"
          },
          {
            "name": "20070815 Re: COSEINC Linux Advisory #1: Linux Kernel Parent Process Death Signal Vulnerability",
            "tags": [
              "mailing-list",
              "x_refsource_BUGTRAQ",
              "x_transferred"
            ],
            "url": "http://www.securityfocus.com/archive/1/476677/100/0/threaded"
          },
          {
            "name": "27436",
            "tags": [
              "third-party-advisory",
              "x_refsource_SECUNIA",
              "x_transferred"
            ],
            "url": "http://secunia.com/advisories/27436"
          },
          {
            "name": "29570",
            "tags": [
              "third-party-advisory",
              "x_refsource_SECUNIA",
              "x_transferred"
            ],
            "url": "http://secunia.com/advisories/29570"
          },
          {
            "name": "MDKSA-2007:195",
            "tags": [
              "vendor-advisory",
              "x_refsource_MANDRIVA",
              "x_transferred"
            ],
            "url": "http://www.mandriva.com/security/advisories?name=MDKSA-2007:195"
          }
        ],
        "title": "CVE Program Container"
      }
    ],
    "cna": {
      "affected": [
        {
          "product": "n/a",
          "vendor": "n/a",
          "versions": [
            {
              "status": "affected",
              "version": "n/a"
            }
          ]
        }
      ],
      "datePublic": "2007-08-14T00:00:00.000Z",
      "descriptions": [
        {
          "lang": "en",
          "value": "Linux kernel 2.4.35 and other versions allows local users to send arbitrary signals to a child process that is running at higher privileges by causing a setuid-root parent process to die, which delivers an attacker-controlled parent process death signal (PR_SET_PDEATHSIG)."
        }
      ],
      "problemTypes": [
        {
          "descriptions": [
            {
              "description": "n/a",
              "lang": "en",
              "type": "text"
            }
          ]
        }
      ],
      "providerMetadata": {
        "dateUpdated": "2018-10-15T20:57:01.000Z",
        "orgId": "53f830b8-0a3f-465b-8143-3b8a9948e749",
        "shortName": "redhat"
      },
      "references": [
        {
          "name": "SUSE-SA:2008:017",
          "tags": [
            "vendor-advisory",
            "x_refsource_SUSE"
          ],
          "url": "http://lists.opensuse.org/opensuse-security-announce/2008-03/msg00007.html"
        },
        {
          "name": "RHSA-2007:0940",
          "tags": [
            "vendor-advisory",
            "x_refsource_REDHAT"
          ],
          "url": "http://www.redhat.com/support/errata/RHSA-2007-0940.html"
        },
        {
          "name": "25387",
          "tags": [
            "vdb-entry",
            "x_refsource_BID"
          ],
          "url": "http://www.securityfocus.com/bid/25387"
        },
        {
          "name": "27747",
          "tags": [
            "third-party-advisory",
            "x_refsource_SECUNIA"
          ],
          "url": "http://secunia.com/advisories/27747"
        },
        {
          "tags": [
            "x_refsource_MISC"
          ],
          "url": "http://bugzilla.redhat.com/bugzilla/show_bug.cgi?id=CVE-2007-3848"
        },
        {
          "name": "27212",
          "tags": [
            "third-party-advisory",
            "x_refsource_SECUNIA"
          ],
          "url": "http://secunia.com/advisories/27212"
        },
        {
          "name": "27227",
          "tags": [
            "third-party-advisory",
            "x_refsource_SECUNIA"
          ],
          "url": "http://secunia.com/advisories/27227"
        },
        {
          "name": "26664",
          "tags": [
            "third-party-advisory",
            "x_refsource_SECUNIA"
          ],
          "url": "http://secunia.com/advisories/26664"
        },
        {
          "name": "20070814 COSEINC Linux Advisory #1: Linux Kernel Parent Process DeathSignal Vulnerability",
          "tags": [
            "mailing-list",
            "x_refsource_BUGTRAQ"
          ],
          "url": "http://marc.info/?l=bugtraq\u0026m=118711306802632\u0026w=2"
        },
        {
          "name": "26643",
          "tags": [
            "third-party-advisory",
            "x_refsource_SECUNIA"
          ],
          "url": "http://secunia.com/advisories/26643"
        },
        {
          "tags": [
            "x_refsource_CONFIRM"
          ],
          "url": "https://issues.rpath.com/browse/RPL-1648"
        },
        {
          "name": "RHSA-2007:1049",
          "tags": [
            "vendor-advisory",
            "x_refsource_REDHAT"
          ],
          "url": "http://www.redhat.com/support/errata/RHSA-2007-1049.html"
        },
        {
          "name": "28806",
          "tags": [
            "third-party-advisory",
            "x_refsource_SECUNIA"
          ],
          "url": "http://secunia.com/advisories/28806"
        },
        {
          "name": "SUSE-SA:2007:053",
          "tags": [
            "vendor-advisory",
            "x_refsource_SUSE"
          ],
          "url": "http://www.novell.com/linux/security/advisories/2007_53_kernel.html"
        },
        {
          "name": "27913",
          "tags": [
            "third-party-advisory",
            "x_refsource_SECUNIA"
          ],
          "url": "http://secunia.com/advisories/27913"
        },
        {
          "name": "27322",
          "tags": [
            "third-party-advisory",
            "x_refsource_SECUNIA"
          ],
          "url": "http://secunia.com/advisories/27322"
        },
        {
          "name": "20070816 Re: COSEINC Linux Advisory #1: Linux Kernel Parent Process Death Signal Vulnerability",
          "tags": [
            "mailing-list",
            "x_refsource_BUGTRAQ"
          ],
          "url": "http://www.securityfocus.com/archive/1/476803/100/0/threaded"
        },
        {
          "name": "26651",
          "tags": [
            "third-party-advisory",
            "x_refsource_SECUNIA"
          ],
          "url": "http://secunia.com/advisories/26651"
        },
        {
          "name": "RHSA-2007:0939",
          "tags": [
            "vendor-advisory",
            "x_refsource_REDHAT"
          ],
          "url": "http://www.redhat.com/support/errata/RHSA-2007-0939.html"
        },
        {
          "name": "USN-510-1",
          "tags": [
            "vendor-advisory",
            "x_refsource_UBUNTU"
          ],
          "url": "http://www.ubuntu.com/usn/usn-510-1"
        },
        {
          "name": "DSA-1504",
          "tags": [
            "vendor-advisory",
            "x_refsource_DEBIAN"
          ],
          "url": "http://www.debian.org/security/2008/dsa-1504"
        },
        {
          "name": "DSA-1356",
          "tags": [
            "vendor-advisory",
            "x_refsource_DEBIAN"
          ],
          "url": "http://www.debian.org/security/2007/dsa-1356"
        },
        {
          "tags": [
            "x_refsource_CONFIRM"
          ],
          "url": "http://support.avaya.com/elmodocs2/security/ASA-2007-474.htm"
        },
        {
          "name": "USN-509-1",
          "tags": [
            "vendor-advisory",
            "x_refsource_UBUNTU"
          ],
          "url": "http://www.ubuntu.com/usn/usn-509-1"
        },
        {
          "name": "33280",
          "tags": [
            "third-party-advisory",
            "x_refsource_SECUNIA"
          ],
          "url": "http://secunia.com/advisories/33280"
        },
        {
          "name": "20070814 Re: COSEINC Linux Advisory #1: Linux Kernel Parent Process Death Signal Vulnerability",
          "tags": [
            "mailing-list",
            "x_refsource_BUGTRAQ"
          ],
          "url": "http://www.securityfocus.com/archive/1/476538/100/0/threaded"
        },
        {
          "name": "20070814 COSEINC Linux Advisory #1: Linux Kernel Parent Process Death Signal Vulnerability",
          "tags": [
            "mailing-list",
            "x_refsource_BUGTRAQ"
          ],
          "url": "http://www.securityfocus.com/archive/1/476464/100/0/threaded"
        },
        {
          "tags": [
            "x_refsource_CONFIRM"
          ],
          "url": "http://www.kernel.org/pub/linux/kernel/v2.6/ChangeLog-2.6.22.4"
        },
        {
          "name": "MDKSA-2007:196",
          "tags": [
            "vendor-advisory",
            "x_refsource_MANDRIVA"
          ],
          "url": "http://www.mandriva.com/security/advisories?name=MDKSA-2007:196"
        },
        {
          "name": "SUSE-SA:2008:006",
          "tags": [
            "vendor-advisory",
            "x_refsource_SUSE"
          ],
          "url": "http://lists.opensuse.org/opensuse-security-announce/2008-02/msg00002.html"
        },
        {
          "name": "DSA-1503",
          "tags": [
            "vendor-advisory",
            "x_refsource_DEBIAN"
          ],
          "url": "http://www.debian.org/security/2008/dsa-1503"
        },
        {
          "name": "29058",
          "tags": [
            "third-party-advisory",
            "x_refsource_SECUNIA"
          ],
          "url": "http://secunia.com/advisories/29058"
        },
        {
          "name": "26500",
          "tags": [
            "third-party-advisory",
            "x_refsource_SECUNIA"
          ],
          "url": "http://secunia.com/advisories/26500"
        },
        {
          "name": "[openwall-announce] 20070814 Linux 2.4.35-ow2",
          "tags": [
            "mailing-list",
            "x_refsource_MLIST"
          ],
          "url": "http://marc.info/?l=openwall-announce\u0026m=118710356812637\u0026w=2"
        },
        {
          "name": "RHSA-2008:0787",
          "tags": [
            "vendor-advisory",
            "x_refsource_REDHAT"
          ],
          "url": "http://www.redhat.com/support/errata/RHSA-2008-0787.html"
        },
        {
          "name": "26450",
          "tags": [
            "third-party-advisory",
            "x_refsource_SECUNIA"
          ],
          "url": "http://secunia.com/advisories/26450"
        },
        {
          "name": "oval:org.mitre.oval:def:10120",
          "tags": [
            "vdb-entry",
            "signature",
            "x_refsource_OVAL"
          ],
          "url": "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A10120"
        },
        {
          "name": "USN-508-1",
          "tags": [
            "vendor-advisory",
            "x_refsource_UBUNTU"
          ],
          "url": "http://www.ubuntu.com/usn/usn-508-1"
        },
        {
          "name": "20070815 Re: COSEINC Linux Advisory #1: Linux Kernel Parent Process Death Signal Vulnerability",
          "tags": [
            "mailing-list",
            "x_refsource_BUGTRAQ"
          ],
          "url": "http://www.securityfocus.com/archive/1/476677/100/0/threaded"
        },
        {
          "name": "27436",
          "tags": [
            "third-party-advisory",
            "x_refsource_SECUNIA"
          ],
          "url": "http://secunia.com/advisories/27436"
        },
        {
          "name": "29570",
          "tags": [
            "third-party-advisory",
            "x_refsource_SECUNIA"
          ],
          "url": "http://secunia.com/advisories/29570"
        },
        {
          "name": "MDKSA-2007:195",
          "tags": [
            "vendor-advisory",
            "x_refsource_MANDRIVA"
          ],
          "url": "http://www.mandriva.com/security/advisories?name=MDKSA-2007:195"
        }
      ]
    }
  },
  "cveMetadata": {
    "assignerOrgId": "53f830b8-0a3f-465b-8143-3b8a9948e749",
    "assignerShortName": "redhat",
    "cveId": "CVE-2007-3848",
    "datePublished": "2007-08-14T17:00:00.000Z",
    "dateReserved": "2007-07-18T00:00:00.000Z",
    "dateUpdated": "2024-08-07T14:28:52.569Z",
    "state": "PUBLISHED"
  },
  "dataType": "CVE_RECORD",
  "dataVersion": "5.1"
}

CVE-2007-4308 (GCVE-0-2007-4308)

Vulnerability from cvelistv5 – Published: 2007-08-13 21:00 – Updated: 2024-08-07 14:53

Summary

Severity ?

No CVSS data available.

CWE

Assigner

mitre

References

URL

Tags

	http://lists.vmware.com/pipermail/security-announ…	mailing-listx_refsource_MLIST
	http://lists.opensuse.org/opensuse-security-annou…	vendor-advisoryx_refsource_SUSE
	http://www.redhat.com/support/errata/RHSA-2007-09…	vendor-advisoryx_refsource_REDHAT
	http://secunia.com/advisories/27747	third-party-advisoryx_refsource_SECUNIA
	https://oval.cisecurity.org/repository/search/def…	vdb-entrysignaturex_refsource_OVAL
	http://secunia.com/advisories/27212	third-party-advisoryx_refsource_SECUNIA
	http://secunia.com/advisories/26643	third-party-advisoryx_refsource_SECUNIA
	http://kernel.org/pub/linux/kernel/v2.6/testing/C…	x_refsource_CONFIRM
	http://www.redhat.com/support/errata/RHSA-2007-10…	vendor-advisoryx_refsource_REDHAT
	http://secunia.com/advisories/28806	third-party-advisoryx_refsource_SECUNIA
	http://secunia.com/advisories/27913	third-party-advisoryx_refsource_SECUNIA
	http://secunia.com/advisories/27322	third-party-advisoryx_refsource_SECUNIA
	http://www.vupen.com/english/advisories/2007/2786	vdb-entryx_refsource_VUPEN
	http://www.debian.org/security/2007/dsa-1363	vendor-advisoryx_refsource_DEBIAN
	http://secunia.com/advisories/26651	third-party-advisoryx_refsource_SECUNIA
	http://www.redhat.com/support/errata/RHSA-2007-09…	vendor-advisoryx_refsource_REDHAT
	http://secunia.com/advisories/26322	third-party-advisoryx_refsource_SECUNIA
	http://secunia.com/advisories/29032	third-party-advisoryx_refsource_SECUNIA
	http://www.ubuntu.com/usn/usn-510-1	vendor-advisoryx_refsource_UBUNTU
	http://securitytracker.com/id?1019470	vdb-entryx_refsource_SECTRACK
	http://www.debian.org/security/2008/dsa-1504	vendor-advisoryx_refsource_DEBIAN
	http://support.avaya.com/elmodocs2/security/ASA-2…	x_refsource_CONFIRM
	http://www.ubuntu.com/usn/usn-509-1	vendor-advisoryx_refsource_UBUNTU
	http://secunia.com/advisories/26647	third-party-advisoryx_refsource_SECUNIA
	http://secunia.com/advisories/27912	third-party-advisoryx_refsource_SECUNIA
	http://www.securityfocus.com/archive/1/488457/100…	mailing-listx_refsource_BUGTRAQ
	http://secunia.com/advisories/33280	third-party-advisoryx_refsource_SECUNIA
	http://www.vupen.com/english/advisories/2008/0637	vdb-entryx_refsource_VUPEN
	http://lkml.org/lkml/2007/7/23/195	x_refsource_CONFIRM
	http://www.mandriva.com/security/advisories?name=…	vendor-advisoryx_refsource_MANDRIVA
	http://lists.opensuse.org/opensuse-security-annou…	vendor-advisoryx_refsource_SUSE
	http://www.securityfocus.com/bid/25216	vdb-entryx_refsource_BID
	http://lists.opensuse.org/opensuse-security-annou…	vendor-advisoryx_refsource_SUSE
	http://www.debian.org/security/2008/dsa-1503	vendor-advisoryx_refsource_DEBIAN
	http://secunia.com/advisories/29058	third-party-advisoryx_refsource_SECUNIA
	http://www.redhat.com/support/errata/RHSA-2008-07…	vendor-advisoryx_refsource_REDHAT
	http://www.ubuntu.com/usn/usn-508-1	vendor-advisoryx_refsource_UBUNTU
	http://secunia.com/advisories/27436	third-party-advisoryx_refsource_SECUNIA
	http://secunia.com/advisories/29570	third-party-advisoryx_refsource_SECUNIA
	http://www.mandriva.com/security/advisories?name=…	vendor-advisoryx_refsource_MANDRIVA

Date Public ?

2007-07-23 00:00

Show details on NVD website

JSON

To clipboard

{
  "containers": {
    "adp": [
      {
        "providerMetadata": {
          "dateUpdated": "2024-08-07T14:53:55.997Z",
          "orgId": "af854a3a-2127-422b-91ae-364da2661108",
          "shortName": "CVE"
        },
        "references": [
          {
            "name": "[Security-announce] 20080221 VMSA-2008-0003 Moderate: Updated aacraid driver and samba and python service console updates",
            "tags": [
              "mailing-list",
              "x_refsource_MLIST",
              "x_transferred"
            ],
            "url": "http://lists.vmware.com/pipermail/security-announce/2008/000005.html"
          },
          {
            "name": "SUSE-SA:2008:017",
            "tags": [
              "vendor-advisory",
              "x_refsource_SUSE",
              "x_transferred"
            ],
            "url": "http://lists.opensuse.org/opensuse-security-announce/2008-03/msg00007.html"
          },
          {
            "name": "RHSA-2007:0940",
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT",
              "x_transferred"
            ],
            "url": "http://www.redhat.com/support/errata/RHSA-2007-0940.html"
          },
          {
            "name": "27747",
            "tags": [
              "third-party-advisory",
              "x_refsource_SECUNIA",
              "x_transferred"
            ],
            "url": "http://secunia.com/advisories/27747"
          },
          {
            "name": "oval:org.mitre.oval:def:8872",
            "tags": [
              "vdb-entry",
              "signature",
              "x_refsource_OVAL",
              "x_transferred"
            ],
            "url": "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A8872"
          },
          {
            "name": "27212",
            "tags": [
              "third-party-advisory",
              "x_refsource_SECUNIA",
              "x_transferred"
            ],
            "url": "http://secunia.com/advisories/27212"
          },
          {
            "name": "26643",
            "tags": [
              "third-party-advisory",
              "x_refsource_SECUNIA",
              "x_transferred"
            ],
            "url": "http://secunia.com/advisories/26643"
          },
          {
            "tags": [
              "x_refsource_CONFIRM",
              "x_transferred"
            ],
            "url": "http://kernel.org/pub/linux/kernel/v2.6/testing/ChangeLog-2.6.23-rc2"
          },
          {
            "name": "RHSA-2007:1049",
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT",
              "x_transferred"
            ],
            "url": "http://www.redhat.com/support/errata/RHSA-2007-1049.html"
          },
          {
            "name": "28806",
            "tags": [
              "third-party-advisory",
              "x_refsource_SECUNIA",
              "x_transferred"
            ],
            "url": "http://secunia.com/advisories/28806"
          },
          {
            "name": "27913",
            "tags": [
              "third-party-advisory",
              "x_refsource_SECUNIA",
              "x_transferred"
            ],
            "url": "http://secunia.com/advisories/27913"
          },
          {
            "name": "27322",
            "tags": [
              "third-party-advisory",
              "x_refsource_SECUNIA",
              "x_transferred"
            ],
            "url": "http://secunia.com/advisories/27322"
          },
          {
            "name": "ADV-2007-2786",
            "tags": [
              "vdb-entry",
              "x_refsource_VUPEN",
              "x_transferred"
            ],
            "url": "http://www.vupen.com/english/advisories/2007/2786"
          },
          {
            "name": "DSA-1363",
            "tags": [
              "vendor-advisory",
              "x_refsource_DEBIAN",
              "x_transferred"
            ],
            "url": "http://www.debian.org/security/2007/dsa-1363"
          },
          {
            "name": "26651",
            "tags": [
              "third-party-advisory",
              "x_refsource_SECUNIA",
              "x_transferred"
            ],
            "url": "http://secunia.com/advisories/26651"
          },
          {
            "name": "RHSA-2007:0939",
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT",
              "x_transferred"
            ],
            "url": "http://www.redhat.com/support/errata/RHSA-2007-0939.html"
          },
          {
            "name": "26322",
            "tags": [
              "third-party-advisory",
              "x_refsource_SECUNIA",
              "x_transferred"
            ],
            "url": "http://secunia.com/advisories/26322"
          },
          {
            "name": "29032",
            "tags": [
              "third-party-advisory",
              "x_refsource_SECUNIA",
              "x_transferred"
            ],
            "url": "http://secunia.com/advisories/29032"
          },
          {
            "name": "USN-510-1",
            "tags": [
              "vendor-advisory",
              "x_refsource_UBUNTU",
              "x_transferred"
            ],
            "url": "http://www.ubuntu.com/usn/usn-510-1"
          },
          {
            "name": "1019470",
            "tags": [
              "vdb-entry",
              "x_refsource_SECTRACK",
              "x_transferred"
            ],
            "url": "http://securitytracker.com/id?1019470"
          },
          {
            "name": "DSA-1504",
            "tags": [
              "vendor-advisory",
              "x_refsource_DEBIAN",
              "x_transferred"
            ],
            "url": "http://www.debian.org/security/2008/dsa-1504"
          },
          {
            "tags": [
              "x_refsource_CONFIRM",
              "x_transferred"
            ],
            "url": "http://support.avaya.com/elmodocs2/security/ASA-2007-474.htm"
          },
          {
            "name": "USN-509-1",
            "tags": [
              "vendor-advisory",
              "x_refsource_UBUNTU",
              "x_transferred"
            ],
            "url": "http://www.ubuntu.com/usn/usn-509-1"
          },
          {
            "name": "26647",
            "tags": [
              "third-party-advisory",
              "x_refsource_SECUNIA",
              "x_transferred"
            ],
            "url": "http://secunia.com/advisories/26647"
          },
          {
            "name": "27912",
            "tags": [
              "third-party-advisory",
              "x_refsource_SECUNIA",
              "x_transferred"
            ],
            "url": "http://secunia.com/advisories/27912"
          },
          {
            "name": "20080221 VMSA-2008-0003 Moderate: Updated aacraid driver and samba and python service console updates",
            "tags": [
              "mailing-list",
              "x_refsource_BUGTRAQ",
              "x_transferred"
            ],
            "url": "http://www.securityfocus.com/archive/1/488457/100/0/threaded"
          },
          {
            "name": "33280",
            "tags": [
              "third-party-advisory",
              "x_refsource_SECUNIA",
              "x_transferred"
            ],
            "url": "http://secunia.com/advisories/33280"
          },
          {
            "name": "ADV-2008-0637",
            "tags": [
              "vdb-entry",
              "x_refsource_VUPEN",
              "x_transferred"
            ],
            "url": "http://www.vupen.com/english/advisories/2008/0637"
          },
          {
            "tags": [
              "x_refsource_CONFIRM",
              "x_transferred"
            ],
            "url": "http://lkml.org/lkml/2007/7/23/195"
          },
          {
            "name": "MDKSA-2007:196",
            "tags": [
              "vendor-advisory",
              "x_refsource_MANDRIVA",
              "x_transferred"
            ],
            "url": "http://www.mandriva.com/security/advisories?name=MDKSA-2007:196"
          },
          {
            "name": "SUSE-SA:2007:064",
            "tags": [
              "vendor-advisory",
              "x_refsource_SUSE",
              "x_transferred"
            ],
            "url": "http://lists.opensuse.org/opensuse-security-announce/2007-12/msg00001.html"
          },
          {
            "name": "25216",
            "tags": [
              "vdb-entry",
              "x_refsource_BID",
              "x_transferred"
            ],
            "url": "http://www.securityfocus.com/bid/25216"
          },
          {
            "name": "SUSE-SA:2008:006",
            "tags": [
              "vendor-advisory",
              "x_refsource_SUSE",
              "x_transferred"
            ],
            "url": "http://lists.opensuse.org/opensuse-security-announce/2008-02/msg00002.html"
          },
          {
            "name": "DSA-1503",
            "tags": [
              "vendor-advisory",
              "x_refsource_DEBIAN",
              "x_transferred"
            ],
            "url": "http://www.debian.org/security/2008/dsa-1503"
          },
          {
            "name": "29058",
            "tags": [
              "third-party-advisory",
              "x_refsource_SECUNIA",
              "x_transferred"
            ],
            "url": "http://secunia.com/advisories/29058"
          },
          {
            "name": "RHSA-2008:0787",
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT",
              "x_transferred"
            ],
            "url": "http://www.redhat.com/support/errata/RHSA-2008-0787.html"
          },
          {
            "name": "USN-508-1",
            "tags": [
              "vendor-advisory",
              "x_refsource_UBUNTU",
              "x_transferred"
            ],
            "url": "http://www.ubuntu.com/usn/usn-508-1"
          },
          {
            "name": "27436",
            "tags": [
              "third-party-advisory",
              "x_refsource_SECUNIA",
              "x_transferred"
            ],
            "url": "http://secunia.com/advisories/27436"
          },
          {
            "name": "29570",
            "tags": [
              "third-party-advisory",
              "x_refsource_SECUNIA",
              "x_transferred"
            ],
            "url": "http://secunia.com/advisories/29570"
          },
          {
            "name": "MDKSA-2007:195",
            "tags": [
              "vendor-advisory",
              "x_refsource_MANDRIVA",
              "x_transferred"
            ],
            "url": "http://www.mandriva.com/security/advisories?name=MDKSA-2007:195"
          }
        ],
        "title": "CVE Program Container"
      }
    ],
    "cna": {
      "affected": [
        {
          "product": "n/a",
          "vendor": "n/a",
          "versions": [
            {
              "status": "affected",
              "version": "n/a"
            }
          ]
        }
      ],
      "datePublic": "2007-07-23T00:00:00.000Z",
      "descriptions": [
        {
          "lang": "en",
          "value": "The (1) aac_cfg_open and (2) aac_compat_ioctl functions in the SCSI layer ioctl path in aacraid in the Linux kernel before 2.6.23-rc2 do not check permissions for ioctls, which might allow local users to cause a denial of service or gain privileges."
        }
      ],
      "problemTypes": [
        {
          "descriptions": [
            {
              "description": "n/a",
              "lang": "en",
              "type": "text"
            }
          ]
        }
      ],
      "providerMetadata": {
        "dateUpdated": "2018-10-15T20:57:01.000Z",
        "orgId": "8254265b-2729-46b6-b9e3-3dfca2d5bfca",
        "shortName": "mitre"
      },
      "references": [
        {
          "name": "[Security-announce] 20080221 VMSA-2008-0003 Moderate: Updated aacraid driver and samba and python service console updates",
          "tags": [
            "mailing-list",
            "x_refsource_MLIST"
          ],
          "url": "http://lists.vmware.com/pipermail/security-announce/2008/000005.html"
        },
        {
          "name": "SUSE-SA:2008:017",
          "tags": [
            "vendor-advisory",
            "x_refsource_SUSE"
          ],
          "url": "http://lists.opensuse.org/opensuse-security-announce/2008-03/msg00007.html"
        },
        {
          "name": "RHSA-2007:0940",
          "tags": [
            "vendor-advisory",
            "x_refsource_REDHAT"
          ],
          "url": "http://www.redhat.com/support/errata/RHSA-2007-0940.html"
        },
        {
          "name": "27747",
          "tags": [
            "third-party-advisory",
            "x_refsource_SECUNIA"
          ],
          "url": "http://secunia.com/advisories/27747"
        },
        {
          "name": "oval:org.mitre.oval:def:8872",
          "tags": [
            "vdb-entry",
            "signature",
            "x_refsource_OVAL"
          ],
          "url": "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A8872"
        },
        {
          "name": "27212",
          "tags": [
            "third-party-advisory",
            "x_refsource_SECUNIA"
          ],
          "url": "http://secunia.com/advisories/27212"
        },
        {
          "name": "26643",
          "tags": [
            "third-party-advisory",
            "x_refsource_SECUNIA"
          ],
          "url": "http://secunia.com/advisories/26643"
        },
        {
          "tags": [
            "x_refsource_CONFIRM"
          ],
          "url": "http://kernel.org/pub/linux/kernel/v2.6/testing/ChangeLog-2.6.23-rc2"
        },
        {
          "name": "RHSA-2007:1049",
          "tags": [
            "vendor-advisory",
            "x_refsource_REDHAT"
          ],
          "url": "http://www.redhat.com/support/errata/RHSA-2007-1049.html"
        },
        {
          "name": "28806",
          "tags": [
            "third-party-advisory",
            "x_refsource_SECUNIA"
          ],
          "url": "http://secunia.com/advisories/28806"
        },
        {
          "name": "27913",
          "tags": [
            "third-party-advisory",
            "x_refsource_SECUNIA"
          ],
          "url": "http://secunia.com/advisories/27913"
        },
        {
          "name": "27322",
          "tags": [
            "third-party-advisory",
            "x_refsource_SECUNIA"
          ],
          "url": "http://secunia.com/advisories/27322"
        },
        {
          "name": "ADV-2007-2786",
          "tags": [
            "vdb-entry",
            "x_refsource_VUPEN"
          ],
          "url": "http://www.vupen.com/english/advisories/2007/2786"
        },
        {
          "name": "DSA-1363",
          "tags": [
            "vendor-advisory",
            "x_refsource_DEBIAN"
          ],
          "url": "http://www.debian.org/security/2007/dsa-1363"
        },
        {
          "name": "26651",
          "tags": [
            "third-party-advisory",
            "x_refsource_SECUNIA"
          ],
          "url": "http://secunia.com/advisories/26651"
        },
        {
          "name": "RHSA-2007:0939",
          "tags": [
            "vendor-advisory",
            "x_refsource_REDHAT"
          ],
          "url": "http://www.redhat.com/support/errata/RHSA-2007-0939.html"
        },
        {
          "name": "26322",
          "tags": [
            "third-party-advisory",
            "x_refsource_SECUNIA"
          ],
          "url": "http://secunia.com/advisories/26322"
        },
        {
          "name": "29032",
          "tags": [
            "third-party-advisory",
            "x_refsource_SECUNIA"
          ],
          "url": "http://secunia.com/advisories/29032"
        },
        {
          "name": "USN-510-1",
          "tags": [
            "vendor-advisory",
            "x_refsource_UBUNTU"
          ],
          "url": "http://www.ubuntu.com/usn/usn-510-1"
        },
        {
          "name": "1019470",
          "tags": [
            "vdb-entry",
            "x_refsource_SECTRACK"
          ],
          "url": "http://securitytracker.com/id?1019470"
        },
        {
          "name": "DSA-1504",
          "tags": [
            "vendor-advisory",
            "x_refsource_DEBIAN"
          ],
          "url": "http://www.debian.org/security/2008/dsa-1504"
        },
        {
          "tags": [
            "x_refsource_CONFIRM"
          ],
          "url": "http://support.avaya.com/elmodocs2/security/ASA-2007-474.htm"
        },
        {
          "name": "USN-509-1",
          "tags": [
            "vendor-advisory",
            "x_refsource_UBUNTU"
          ],
          "url": "http://www.ubuntu.com/usn/usn-509-1"
        },
        {
          "name": "26647",
          "tags": [
            "third-party-advisory",
            "x_refsource_SECUNIA"
          ],
          "url": "http://secunia.com/advisories/26647"
        },
        {
          "name": "27912",
          "tags": [
            "third-party-advisory",
            "x_refsource_SECUNIA"
          ],
          "url": "http://secunia.com/advisories/27912"
        },
        {
          "name": "20080221 VMSA-2008-0003 Moderate: Updated aacraid driver and samba and python service console updates",
          "tags": [
            "mailing-list",
            "x_refsource_BUGTRAQ"
          ],
          "url": "http://www.securityfocus.com/archive/1/488457/100/0/threaded"
        },
        {
          "name": "33280",
          "tags": [
            "third-party-advisory",
            "x_refsource_SECUNIA"
          ],
          "url": "http://secunia.com/advisories/33280"
        },
        {
          "name": "ADV-2008-0637",
          "tags": [
            "vdb-entry",
            "x_refsource_VUPEN"
          ],
          "url": "http://www.vupen.com/english/advisories/2008/0637"
        },
        {
          "tags": [
            "x_refsource_CONFIRM"
          ],
          "url": "http://lkml.org/lkml/2007/7/23/195"
        },
        {
          "name": "MDKSA-2007:196",
          "tags": [
            "vendor-advisory",
            "x_refsource_MANDRIVA"
          ],
          "url": "http://www.mandriva.com/security/advisories?name=MDKSA-2007:196"
        },
        {
          "name": "SUSE-SA:2007:064",
          "tags": [
            "vendor-advisory",
            "x_refsource_SUSE"
          ],
          "url": "http://lists.opensuse.org/opensuse-security-announce/2007-12/msg00001.html"
        },
        {
          "name": "25216",
          "tags": [
            "vdb-entry",
            "x_refsource_BID"
          ],
          "url": "http://www.securityfocus.com/bid/25216"
        },
        {
          "name": "SUSE-SA:2008:006",
          "tags": [
            "vendor-advisory",
            "x_refsource_SUSE"
          ],
          "url": "http://lists.opensuse.org/opensuse-security-announce/2008-02/msg00002.html"
        },
        {
          "name": "DSA-1503",
          "tags": [
            "vendor-advisory",
            "x_refsource_DEBIAN"
          ],
          "url": "http://www.debian.org/security/2008/dsa-1503"
        },
        {
          "name": "29058",
          "tags": [
            "third-party-advisory",
            "x_refsource_SECUNIA"
          ],
          "url": "http://secunia.com/advisories/29058"
        },
        {
          "name": "RHSA-2008:0787",
          "tags": [
            "vendor-advisory",
            "x_refsource_REDHAT"
          ],
          "url": "http://www.redhat.com/support/errata/RHSA-2008-0787.html"
        },
        {
          "name": "USN-508-1",
          "tags": [
            "vendor-advisory",
            "x_refsource_UBUNTU"
          ],
          "url": "http://www.ubuntu.com/usn/usn-508-1"
        },
        {
          "name": "27436",
          "tags": [
            "third-party-advisory",
            "x_refsource_SECUNIA"
          ],
          "url": "http://secunia.com/advisories/27436"
        },
        {
          "name": "29570",
          "tags": [
            "third-party-advisory",
            "x_refsource_SECUNIA"
          ],
          "url": "http://secunia.com/advisories/29570"
        },
        {
          "name": "MDKSA-2007:195",
          "tags": [
            "vendor-advisory",
            "x_refsource_MANDRIVA"
          ],
          "url": "http://www.mandriva.com/security/advisories?name=MDKSA-2007:195"
        }
      ],
      "x_legacyV4Record": {
        "CVE_data_meta": {
          "ASSIGNER": "cve@mitre.org",
          "ID": "CVE-2007-4308",
          "STATE": "PUBLIC"
        },
        "affects": {
          "vendor": {
            "vendor_data": [
              {
                "product": {
                  "product_data": [
                    {
                      "product_name": "n/a",
                      "version": {
                        "version_data": [
                          {
                            "version_value": "n/a"
                          }
                        ]
                      }
                    }
                  ]
                },
                "vendor_name": "n/a"
              }
            ]
          }
        },
        "data_format": "MITRE",
        "data_type": "CVE",
        "data_version": "4.0",
        "description": {
          "description_data": [
            {
              "lang": "eng",
              "value": "The (1) aac_cfg_open and (2) aac_compat_ioctl functions in the SCSI layer ioctl path in aacraid in the Linux kernel before 2.6.23-rc2 do not check permissions for ioctls, which might allow local users to cause a denial of service or gain privileges."
            }
          ]
        },
        "problemtype": {
          "problemtype_data": [
            {
              "description": [
                {
                  "lang": "eng",
                  "value": "n/a"
                }
              ]
            }
          ]
        },
        "references": {
          "reference_data": [
            {
              "name": "[Security-announce] 20080221 VMSA-2008-0003 Moderate: Updated aacraid driver and samba and python service console updates",
              "refsource": "MLIST",
              "url": "http://lists.vmware.com/pipermail/security-announce/2008/000005.html"
            },
            {
              "name": "SUSE-SA:2008:017",
              "refsource": "SUSE",
              "url": "http://lists.opensuse.org/opensuse-security-announce/2008-03/msg00007.html"
            },
            {
              "name": "RHSA-2007:0940",
              "refsource": "REDHAT",
              "url": "http://www.redhat.com/support/errata/RHSA-2007-0940.html"
            },
            {
              "name": "27747",
              "refsource": "SECUNIA",
              "url": "http://secunia.com/advisories/27747"
            },
            {
              "name": "oval:org.mitre.oval:def:8872",
              "refsource": "OVAL",
              "url": "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A8872"
            },
            {
              "name": "27212",
              "refsource": "SECUNIA",
              "url": "http://secunia.com/advisories/27212"
            },
            {
              "name": "26643",
              "refsource": "SECUNIA",
              "url": "http://secunia.com/advisories/26643"
            },
            {
              "name": "http://kernel.org/pub/linux/kernel/v2.6/testing/ChangeLog-2.6.23-rc2",
              "refsource": "CONFIRM",
              "url": "http://kernel.org/pub/linux/kernel/v2.6/testing/ChangeLog-2.6.23-rc2"
            },
            {
              "name": "RHSA-2007:1049",
              "refsource": "REDHAT",
              "url": "http://www.redhat.com/support/errata/RHSA-2007-1049.html"
            },
            {
              "name": "28806",
              "refsource": "SECUNIA",
              "url": "http://secunia.com/advisories/28806"
            },
            {
              "name": "27913",
              "refsource": "SECUNIA",
              "url": "http://secunia.com/advisories/27913"
            },
            {
              "name": "27322",
              "refsource": "SECUNIA",
              "url": "http://secunia.com/advisories/27322"
            },
            {
              "name": "ADV-2007-2786",
              "refsource": "VUPEN",
              "url": "http://www.vupen.com/english/advisories/2007/2786"
            },
            {
              "name": "DSA-1363",
              "refsource": "DEBIAN",
              "url": "http://www.debian.org/security/2007/dsa-1363"
            },
            {
              "name": "26651",
              "refsource": "SECUNIA",
              "url": "http://secunia.com/advisories/26651"
            },
            {
              "name": "RHSA-2007:0939",
              "refsource": "REDHAT",
              "url": "http://www.redhat.com/support/errata/RHSA-2007-0939.html"
            },
            {
              "name": "26322",
              "refsource": "SECUNIA",
              "url": "http://secunia.com/advisories/26322"
            },
            {
              "name": "29032",
              "refsource": "SECUNIA",
              "url": "http://secunia.com/advisories/29032"
            },
            {
              "name": "USN-510-1",
              "refsource": "UBUNTU",
              "url": "http://www.ubuntu.com/usn/usn-510-1"
            },
            {
              "name": "1019470",
              "refsource": "SECTRACK",
              "url": "http://securitytracker.com/id?1019470"
            },
            {
              "name": "DSA-1504",
              "refsource": "DEBIAN",
              "url": "http://www.debian.org/security/2008/dsa-1504"
            },
            {
              "name": "http://support.avaya.com/elmodocs2/security/ASA-2007-474.htm",
              "refsource": "CONFIRM",
              "url": "http://support.avaya.com/elmodocs2/security/ASA-2007-474.htm"
            },
            {
              "name": "USN-509-1",
              "refsource": "UBUNTU",
              "url": "http://www.ubuntu.com/usn/usn-509-1"
            },
            {
              "name": "26647",
              "refsource": "SECUNIA",
              "url": "http://secunia.com/advisories/26647"
            },
            {
              "name": "27912",
              "refsource": "SECUNIA",
              "url": "http://secunia.com/advisories/27912"
            },
            {
              "name": "20080221 VMSA-2008-0003 Moderate: Updated aacraid driver and samba and python service console updates",
              "refsource": "BUGTRAQ",
              "url": "http://www.securityfocus.com/archive/1/488457/100/0/threaded"
            },
            {
              "name": "33280",
              "refsource": "SECUNIA",
              "url": "http://secunia.com/advisories/33280"
            },
            {
              "name": "ADV-2008-0637",
              "refsource": "VUPEN",
              "url": "http://www.vupen.com/english/advisories/2008/0637"
            },
            {
              "name": "http://lkml.org/lkml/2007/7/23/195",
              "refsource": "CONFIRM",
              "url": "http://lkml.org/lkml/2007/7/23/195"
            },
            {
              "name": "MDKSA-2007:196",
              "refsource": "MANDRIVA",
              "url": "http://www.mandriva.com/security/advisories?name=MDKSA-2007:196"
            },
            {
              "name": "SUSE-SA:2007:064",
              "refsource": "SUSE",
              "url": "http://lists.opensuse.org/opensuse-security-announce/2007-12/msg00001.html"
            },
            {
              "name": "25216",
              "refsource": "BID",
              "url": "http://www.securityfocus.com/bid/25216"
            },
            {
              "name": "SUSE-SA:2008:006",
              "refsource": "SUSE",
              "url": "http://lists.opensuse.org/opensuse-security-announce/2008-02/msg00002.html"
            },
            {
              "name": "DSA-1503",
              "refsource": "DEBIAN",
              "url": "http://www.debian.org/security/2008/dsa-1503"
            },
            {
              "name": "29058",
              "refsource": "SECUNIA",
              "url": "http://secunia.com/advisories/29058"
            },
            {
              "name": "RHSA-2008:0787",
              "refsource": "REDHAT",
              "url": "http://www.redhat.com/support/errata/RHSA-2008-0787.html"
            },
            {
              "name": "USN-508-1",
              "refsource": "UBUNTU",
              "url": "http://www.ubuntu.com/usn/usn-508-1"
            },
            {
              "name": "27436",
              "refsource": "SECUNIA",
              "url": "http://secunia.com/advisories/27436"
            },
            {
              "name": "29570",
              "refsource": "SECUNIA",
              "url": "http://secunia.com/advisories/29570"
            },
            {
              "name": "MDKSA-2007:195",
              "refsource": "MANDRIVA",
              "url": "http://www.mandriva.com/security/advisories?name=MDKSA-2007:195"
            }
          ]
        }
      }
    }
  },
  "cveMetadata": {
    "assignerOrgId": "8254265b-2729-46b6-b9e3-3dfca2d5bfca",
    "assignerShortName": "mitre",
    "cveId": "CVE-2007-4308",
    "datePublished": "2007-08-13T21:00:00.000Z",
    "dateReserved": "2007-08-13T00:00:00.000Z",
    "dateUpdated": "2024-08-07T14:53:55.997Z",
    "state": "PUBLISHED"
  },
  "dataType": "CVE_RECORD",
  "dataVersion": "5.1"
}

CVE-2008-3275 (GCVE-0-2008-3275)

Vulnerability from cvelistv5 – Published: 2008-08-12 23:00 – Updated: 2024-08-07 09:28

Summary

Severity ?

No CVSS data available.

CWE

Assigner

redhat

References

URL

Tags

	http://www.debian.org/security/2008/dsa-1630	vendor-advisoryx_refsource_DEBIAN
	http://www.redhat.com/support/errata/RHSA-2008-08…	vendor-advisoryx_refsource_REDHAT
	https://usn.ubuntu.com/637-1/	vendor-advisoryx_refsource_UBUNTU
	http://lkml.org/lkml/2008/7/2/83	mailing-listx_refsource_MLIST
	http://secunia.com/advisories/32190	third-party-advisoryx_refsource_SECUNIA
	https://oval.cisecurity.org/repository/search/def…	vdb-entrysignaturex_refsource_OVAL
	http://www.debian.org/security/2008/dsa-1636	vendor-advisoryx_refsource_DEBIAN
	http://secunia.com/advisories/31614	third-party-advisoryx_refsource_SECUNIA
	http://secunia.com/advisories/31881	third-party-advisoryx_refsource_SECUNIA
	http://secunia.com/advisories/32104	third-party-advisoryx_refsource_SECUNIA
	http://git.kernel.org/?p=linux/kernel/git/torvald…	x_refsource_CONFIRM
	http://secunia.com/advisories/31551	third-party-advisoryx_refsource_SECUNIA
	http://www.vupen.com/english/advisories/2008/2430	vdb-entryx_refsource_VUPEN
	http://www.redhat.com/support/errata/RHSA-2008-08…	vendor-advisoryx_refsource_REDHAT
	http://www.redhat.com/support/errata/RHSA-2009-00…	vendor-advisoryx_refsource_REDHAT
	http://lists.opensuse.org/opensuse-security-annou…	vendor-advisoryx_refsource_SUSE
	http://www.securitytracker.com/id?1020739	vdb-entryx_refsource_SECTRACK
	http://secunia.com/advisories/33280	third-party-advisoryx_refsource_SECUNIA
	http://secunia.com/advisories/33556	third-party-advisoryx_refsource_SECUNIA
	http://www.securityfocus.com/bid/30647	vdb-entryx_refsource_BID
	http://secunia.com/advisories/32023	third-party-advisoryx_refsource_SECUNIA
	https://bugzilla.redhat.com/show_bug.cgi?id=457858	x_refsource_CONFIRM
	http://www.mandriva.com/security/advisories?name=…	vendor-advisoryx_refsource_MANDRIVA
	http://secunia.com/advisories/32344	third-party-advisoryx_refsource_SECUNIA
	https://exchange.xforce.ibmcloud.com/vulnerabilit…	vdb-entryx_refsource_XF
	http://www.redhat.com/support/errata/RHSA-2008-09…	vendor-advisoryx_refsource_REDHAT
	http://secunia.com/advisories/31836	third-party-advisoryx_refsource_SECUNIA
	http://kernel.org/pub/linux/kernel/v2.6/ChangeLog…	x_refsource_CONFIRM
	http://www.redhat.com/support/errata/RHSA-2008-07…	vendor-advisoryx_refsource_REDHAT
	http://lists.opensuse.org/opensuse-security-annou…	vendor-advisoryx_refsource_SUSE
	http://secunia.com/advisories/33201	third-party-advisoryx_refsource_SECUNIA
	https://oval.cisecurity.org/repository/search/def…	vdb-entrysignaturex_refsource_OVAL

Date Public ?

2008-08-06 00:00

Show details on NVD website

JSON

To clipboard

{
  "containers": {
    "adp": [
      {
        "providerMetadata": {
          "dateUpdated": "2024-08-07T09:28:41.988Z",
          "orgId": "af854a3a-2127-422b-91ae-364da2661108",
          "shortName": "CVE"
        },
        "references": [
          {
            "name": "DSA-1630",
            "tags": [
              "vendor-advisory",
              "x_refsource_DEBIAN",
              "x_transferred"
            ],
            "url": "http://www.debian.org/security/2008/dsa-1630"
          },
          {
            "name": "RHSA-2008:0885",
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT",
              "x_transferred"
            ],
            "url": "http://www.redhat.com/support/errata/RHSA-2008-0885.html"
          },
          {
            "name": "USN-637-1",
            "tags": [
              "vendor-advisory",
              "x_refsource_UBUNTU",
              "x_transferred"
            ],
            "url": "https://usn.ubuntu.com/637-1/"
          },
          {
            "name": "[linux-kernel] 20080702 Is VFS behavior fine?",
            "tags": [
              "mailing-list",
              "x_refsource_MLIST",
              "x_transferred"
            ],
            "url": "http://lkml.org/lkml/2008/7/2/83"
          },
          {
            "name": "32190",
            "tags": [
              "third-party-advisory",
              "x_refsource_SECUNIA",
              "x_transferred"
            ],
            "url": "http://secunia.com/advisories/32190"
          },
          {
            "name": "oval:org.mitre.oval:def:6551",
            "tags": [
              "vdb-entry",
              "signature",
              "x_refsource_OVAL",
              "x_transferred"
            ],
            "url": "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A6551"
          },
          {
            "name": "DSA-1636",
            "tags": [
              "vendor-advisory",
              "x_refsource_DEBIAN",
              "x_transferred"
            ],
            "url": "http://www.debian.org/security/2008/dsa-1636"
          },
          {
            "name": "31614",
            "tags": [
              "third-party-advisory",
              "x_refsource_SECUNIA",
              "x_transferred"
            ],
            "url": "http://secunia.com/advisories/31614"
          },
          {
            "name": "31881",
            "tags": [
              "third-party-advisory",
              "x_refsource_SECUNIA",
              "x_transferred"
            ],
            "url": "http://secunia.com/advisories/31881"
          },
          {
            "name": "32104",
            "tags": [
              "third-party-advisory",
              "x_refsource_SECUNIA",
              "x_transferred"
            ],
            "url": "http://secunia.com/advisories/32104"
          },
          {
            "tags": [
              "x_refsource_CONFIRM",
              "x_transferred"
            ],
            "url": "http://git.kernel.org/?p=linux/kernel/git/torvalds/linux-2.6.git%3Ba=commit%3Bh=d70b67c8bc72ee23b55381bd6a884f4796692f77"
          },
          {
            "name": "31551",
            "tags": [
              "third-party-advisory",
              "x_refsource_SECUNIA",
              "x_transferred"
            ],
            "url": "http://secunia.com/advisories/31551"
          },
          {
            "name": "ADV-2008-2430",
            "tags": [
              "vdb-entry",
              "x_refsource_VUPEN",
              "x_transferred"
            ],
            "url": "http://www.vupen.com/english/advisories/2008/2430"
          },
          {
            "name": "RHSA-2008:0857",
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT",
              "x_transferred"
            ],
            "url": "http://www.redhat.com/support/errata/RHSA-2008-0857.html"
          },
          {
            "name": "RHSA-2009:0014",
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT",
              "x_transferred"
            ],
            "url": "http://www.redhat.com/support/errata/RHSA-2009-0014.html"
          },
          {
            "name": "SUSE-SA:2008:048",
            "tags": [
              "vendor-advisory",
              "x_refsource_SUSE",
              "x_transferred"
            ],
            "url": "http://lists.opensuse.org/opensuse-security-announce/2008-10/msg00001.html"
          },
          {
            "name": "1020739",
            "tags": [
              "vdb-entry",
              "x_refsource_SECTRACK",
              "x_transferred"
            ],
            "url": "http://www.securitytracker.com/id?1020739"
          },
          {
            "name": "33280",
            "tags": [
              "third-party-advisory",
              "x_refsource_SECUNIA",
              "x_transferred"
            ],
            "url": "http://secunia.com/advisories/33280"
          },
          {
            "name": "33556",
            "tags": [
              "third-party-advisory",
              "x_refsource_SECUNIA",
              "x_transferred"
            ],
            "url": "http://secunia.com/advisories/33556"
          },
          {
            "name": "30647",
            "tags": [
              "vdb-entry",
              "x_refsource_BID",
              "x_transferred"
            ],
            "url": "http://www.securityfocus.com/bid/30647"
          },
          {
            "name": "32023",
            "tags": [
              "third-party-advisory",
              "x_refsource_SECUNIA",
              "x_transferred"
            ],
            "url": "http://secunia.com/advisories/32023"
          },
          {
            "tags": [
              "x_refsource_CONFIRM",
              "x_transferred"
            ],
            "url": "https://bugzilla.redhat.com/show_bug.cgi?id=457858"
          },
          {
            "name": "MDVSA-2008:220",
            "tags": [
              "vendor-advisory",
              "x_refsource_MANDRIVA",
              "x_transferred"
            ],
            "url": "http://www.mandriva.com/security/advisories?name=MDVSA-2008:220"
          },
          {
            "name": "32344",
            "tags": [
              "third-party-advisory",
              "x_refsource_SECUNIA",
              "x_transferred"
            ],
            "url": "http://secunia.com/advisories/32344"
          },
          {
            "name": "linux-kernel-ubifs-dos(44410)",
            "tags": [
              "vdb-entry",
              "x_refsource_XF",
              "x_transferred"
            ],
            "url": "https://exchange.xforce.ibmcloud.com/vulnerabilities/44410"
          },
          {
            "name": "RHSA-2008:0973",
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT",
              "x_transferred"
            ],
            "url": "http://www.redhat.com/support/errata/RHSA-2008-0973.html"
          },
          {
            "name": "31836",
            "tags": [
              "third-party-advisory",
              "x_refsource_SECUNIA",
              "x_transferred"
            ],
            "url": "http://secunia.com/advisories/31836"
          },
          {
            "tags": [
              "x_refsource_CONFIRM",
              "x_transferred"
            ],
            "url": "http://kernel.org/pub/linux/kernel/v2.6/ChangeLog-2.6.25.15"
          },
          {
            "name": "RHSA-2008:0787",
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT",
              "x_transferred"
            ],
            "url": "http://www.redhat.com/support/errata/RHSA-2008-0787.html"
          },
          {
            "name": "SUSE-SA:2008:049",
            "tags": [
              "vendor-advisory",
              "x_refsource_SUSE",
              "x_transferred"
            ],
            "url": "http://lists.opensuse.org/opensuse-security-announce/2008-10/msg00003.html"
          },
          {
            "name": "33201",
            "tags": [
              "third-party-advisory",
              "x_refsource_SECUNIA",
              "x_transferred"
            ],
            "url": "http://secunia.com/advisories/33201"
          },
          {
            "name": "oval:org.mitre.oval:def:10744",
            "tags": [
              "vdb-entry",
              "signature",
              "x_refsource_OVAL",
              "x_transferred"
            ],
            "url": "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A10744"
          }
        ],
        "title": "CVE Program Container"
      }
    ],
    "cna": {
      "affected": [
        {
          "product": "n/a",
          "vendor": "n/a",
          "versions": [
            {
              "status": "affected",
              "version": "n/a"
            }
          ]
        }
      ],
      "datePublic": "2008-08-06T00:00:00.000Z",
      "descriptions": [
        {
          "lang": "en",
          "value": "The (1) real_lookup and (2) __lookup_hash functions in fs/namei.c in the vfs implementation in the Linux kernel before 2.6.25.15 do not prevent creation of a child dentry for a deleted (aka S_DEAD) directory, which allows local users to cause a denial of service (\"overflow\" of the UBIFS orphan area) via a series of attempted file creations within deleted directories."
        }
      ],
      "problemTypes": [
        {
          "descriptions": [
            {
              "description": "n/a",
              "lang": "en",
              "type": "text"
            }
          ]
        }
      ],
      "providerMetadata": {
        "dateUpdated": "2018-10-03T20:57:01.000Z",
        "orgId": "53f830b8-0a3f-465b-8143-3b8a9948e749",
        "shortName": "redhat"
      },
      "references": [
        {
          "name": "DSA-1630",
          "tags": [
            "vendor-advisory",
            "x_refsource_DEBIAN"
          ],
          "url": "http://www.debian.org/security/2008/dsa-1630"
        },
        {
          "name": "RHSA-2008:0885",
          "tags": [
            "vendor-advisory",
            "x_refsource_REDHAT"
          ],
          "url": "http://www.redhat.com/support/errata/RHSA-2008-0885.html"
        },
        {
          "name": "USN-637-1",
          "tags": [
            "vendor-advisory",
            "x_refsource_UBUNTU"
          ],
          "url": "https://usn.ubuntu.com/637-1/"
        },
        {
          "name": "[linux-kernel] 20080702 Is VFS behavior fine?",
          "tags": [
            "mailing-list",
            "x_refsource_MLIST"
          ],
          "url": "http://lkml.org/lkml/2008/7/2/83"
        },
        {
          "name": "32190",
          "tags": [
            "third-party-advisory",
            "x_refsource_SECUNIA"
          ],
          "url": "http://secunia.com/advisories/32190"
        },
        {
          "name": "oval:org.mitre.oval:def:6551",
          "tags": [
            "vdb-entry",
            "signature",
            "x_refsource_OVAL"
          ],
          "url": "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A6551"
        },
        {
          "name": "DSA-1636",
          "tags": [
            "vendor-advisory",
            "x_refsource_DEBIAN"
          ],
          "url": "http://www.debian.org/security/2008/dsa-1636"
        },
        {
          "name": "31614",
          "tags": [
            "third-party-advisory",
            "x_refsource_SECUNIA"
          ],
          "url": "http://secunia.com/advisories/31614"
        },
        {
          "name": "31881",
          "tags": [
            "third-party-advisory",
            "x_refsource_SECUNIA"
          ],
          "url": "http://secunia.com/advisories/31881"
        },
        {
          "name": "32104",
          "tags": [
            "third-party-advisory",
            "x_refsource_SECUNIA"
          ],
          "url": "http://secunia.com/advisories/32104"
        },
        {
          "tags": [
            "x_refsource_CONFIRM"
          ],
          "url": "http://git.kernel.org/?p=linux/kernel/git/torvalds/linux-2.6.git%3Ba=commit%3Bh=d70b67c8bc72ee23b55381bd6a884f4796692f77"
        },
        {
          "name": "31551",
          "tags": [
            "third-party-advisory",
            "x_refsource_SECUNIA"
          ],
          "url": "http://secunia.com/advisories/31551"
        },
        {
          "name": "ADV-2008-2430",
          "tags": [
            "vdb-entry",
            "x_refsource_VUPEN"
          ],
          "url": "http://www.vupen.com/english/advisories/2008/2430"
        },
        {
          "name": "RHSA-2008:0857",
          "tags": [
            "vendor-advisory",
            "x_refsource_REDHAT"
          ],
          "url": "http://www.redhat.com/support/errata/RHSA-2008-0857.html"
        },
        {
          "name": "RHSA-2009:0014",
          "tags": [
            "vendor-advisory",
            "x_refsource_REDHAT"
          ],
          "url": "http://www.redhat.com/support/errata/RHSA-2009-0014.html"
        },
        {
          "name": "SUSE-SA:2008:048",
          "tags": [
            "vendor-advisory",
            "x_refsource_SUSE"
          ],
          "url": "http://lists.opensuse.org/opensuse-security-announce/2008-10/msg00001.html"
        },
        {
          "name": "1020739",
          "tags": [
            "vdb-entry",
            "x_refsource_SECTRACK"
          ],
          "url": "http://www.securitytracker.com/id?1020739"
        },
        {
          "name": "33280",
          "tags": [
            "third-party-advisory",
            "x_refsource_SECUNIA"
          ],
          "url": "http://secunia.com/advisories/33280"
        },
        {
          "name": "33556",
          "tags": [
            "third-party-advisory",
            "x_refsource_SECUNIA"
          ],
          "url": "http://secunia.com/advisories/33556"
        },
        {
          "name": "30647",
          "tags": [
            "vdb-entry",
            "x_refsource_BID"
          ],
          "url": "http://www.securityfocus.com/bid/30647"
        },
        {
          "name": "32023",
          "tags": [
            "third-party-advisory",
            "x_refsource_SECUNIA"
          ],
          "url": "http://secunia.com/advisories/32023"
        },
        {
          "tags": [
            "x_refsource_CONFIRM"
          ],
          "url": "https://bugzilla.redhat.com/show_bug.cgi?id=457858"
        },
        {
          "name": "MDVSA-2008:220",
          "tags": [
            "vendor-advisory",
            "x_refsource_MANDRIVA"
          ],
          "url": "http://www.mandriva.com/security/advisories?name=MDVSA-2008:220"
        },
        {
          "name": "32344",
          "tags": [
            "third-party-advisory",
            "x_refsource_SECUNIA"
          ],
          "url": "http://secunia.com/advisories/32344"
        },
        {
          "name": "linux-kernel-ubifs-dos(44410)",
          "tags": [
            "vdb-entry",
            "x_refsource_XF"
          ],
          "url": "https://exchange.xforce.ibmcloud.com/vulnerabilities/44410"
        },
        {
          "name": "RHSA-2008:0973",
          "tags": [
            "vendor-advisory",
            "x_refsource_REDHAT"
          ],
          "url": "http://www.redhat.com/support/errata/RHSA-2008-0973.html"
        },
        {
          "name": "31836",
          "tags": [
            "third-party-advisory",
            "x_refsource_SECUNIA"
          ],
          "url": "http://secunia.com/advisories/31836"
        },
        {
          "tags": [
            "x_refsource_CONFIRM"
          ],
          "url": "http://kernel.org/pub/linux/kernel/v2.6/ChangeLog-2.6.25.15"
        },
        {
          "name": "RHSA-2008:0787",
          "tags": [
            "vendor-advisory",
            "x_refsource_REDHAT"
          ],
          "url": "http://www.redhat.com/support/errata/RHSA-2008-0787.html"
        },
        {
          "name": "SUSE-SA:2008:049",
          "tags": [
            "vendor-advisory",
            "x_refsource_SUSE"
          ],
          "url": "http://lists.opensuse.org/opensuse-security-announce/2008-10/msg00003.html"
        },
        {
          "name": "33201",
          "tags": [
            "third-party-advisory",
            "x_refsource_SECUNIA"
          ],
          "url": "http://secunia.com/advisories/33201"
        },
        {
          "name": "oval:org.mitre.oval:def:10744",
          "tags": [
            "vdb-entry",
            "signature",
            "x_refsource_OVAL"
          ],
          "url": "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A10744"
        }
      ]
    }
  },
  "cveMetadata": {
    "assignerOrgId": "53f830b8-0a3f-465b-8143-3b8a9948e749",
    "assignerShortName": "redhat",
    "cveId": "CVE-2008-3275",
    "datePublished": "2008-08-12T23:00:00.000Z",
    "dateReserved": "2008-07-24T00:00:00.000Z",
    "dateUpdated": "2024-08-07T09:28:41.988Z",
    "state": "PUBLISHED"
  },
  "dataType": "CVE_RECORD",
  "dataVersion": "5.1"
}

CVE-2008-4210 (GCVE-0-2008-4210)

Vulnerability from cvelistv5 – Published: 2008-09-29 17:00 – Updated: 2024-08-07 10:08

Summary

Severity ?

No CVSS data available.

CWE

Assigner

mitre

References

URL

Tags

	http://www.kernel.org/pub/linux/kernel/v2.6/Chang…	x_refsource_CONFIRM
	http://secunia.com/advisories/32485	third-party-advisoryx_refsource_SECUNIA
	http://www.securityfocus.com/bid/31368	vdb-entryx_refsource_BID
	http://git.kernel.org/?p=linux/kernel/git/stable/…	x_refsource_CONFIRM
	http://secunia.com/advisories/32237	third-party-advisoryx_refsource_SECUNIA
	http://www.redhat.com/support/errata/RHSA-2008-09…	vendor-advisoryx_refsource_REDHAT
	http://rhn.redhat.com/errata/RHSA-2008-0972.html	vendor-advisoryx_refsource_REDHAT
	http://www.openwall.com/lists/oss-security/2008/09/24/8	mailing-listx_refsource_MLIST
	http://lists.opensuse.org/opensuse-security-annou…	vendor-advisoryx_refsource_SUSE
	https://oval.cisecurity.org/repository/search/def…	vdb-entrysignaturex_refsource_OVAL
	http://secunia.com/advisories/33280	third-party-advisoryx_refsource_SECUNIA
	http://www.debian.org/security/2008/dsa-1653	vendor-advisoryx_refsource_DEBIAN
	http://www.openwall.com/lists/oss-security/2008/09/24/5	mailing-listx_refsource_MLIST
	http://secunia.com/advisories/32356	third-party-advisoryx_refsource_SECUNIA
	http://secunia.com/advisories/32918	third-party-advisoryx_refsource_SECUNIA
	http://www.ubuntu.com/usn/usn-679-1	vendor-advisoryx_refsource_UBUNTU
	https://oval.cisecurity.org/repository/search/def…	vdb-entrysignaturex_refsource_OVAL
	http://secunia.com/advisories/32759	third-party-advisoryx_refsource_SECUNIA
	http://www.mandriva.com/security/advisories?name=…	vendor-advisoryx_refsource_MANDRIVA
	http://secunia.com/advisories/32344	third-party-advisoryx_refsource_SECUNIA
	https://bugzilla.redhat.com/show_bug.cgi?id=463661	x_refsource_CONFIRM
	http://bugzilla.kernel.org/show_bug.cgi?id=8420	x_refsource_CONFIRM
	http://kernel.org/pub/linux/kernel/v2.6/ChangeLog…	x_refsource_CONFIRM
	http://www.redhat.com/support/errata/RHSA-2008-09…	vendor-advisoryx_refsource_REDHAT
	http://www.redhat.com/support/errata/RHSA-2008-07…	vendor-advisoryx_refsource_REDHAT
	http://lists.opensuse.org/opensuse-security-annou…	vendor-advisoryx_refsource_SUSE
	http://secunia.com/advisories/32799	third-party-advisoryx_refsource_SECUNIA
	https://exchange.xforce.ibmcloud.com/vulnerabilit…	vdb-entryx_refsource_XF
	http://lists.opensuse.org/opensuse-security-annou…	vendor-advisoryx_refsource_SUSE
	http://lists.opensuse.org/opensuse-security-annou…	vendor-advisoryx_refsource_SUSE
	http://secunia.com/advisories/33201	third-party-advisoryx_refsource_SECUNIA

Date Public ?

2007-07-08 00:00

Show details on NVD website

JSON

To clipboard

{
  "containers": {
    "adp": [
      {
        "providerMetadata": {
          "dateUpdated": "2024-08-07T10:08:34.949Z",
          "orgId": "af854a3a-2127-422b-91ae-364da2661108",
          "shortName": "CVE"
        },
        "references": [
          {
            "tags": [
              "x_refsource_CONFIRM",
              "x_transferred"
            ],
            "url": "http://www.kernel.org/pub/linux/kernel/v2.6/ChangeLog-2.6.22"
          },
          {
            "name": "32485",
            "tags": [
              "third-party-advisory",
              "x_refsource_SECUNIA",
              "x_transferred"
            ],
            "url": "http://secunia.com/advisories/32485"
          },
          {
            "name": "31368",
            "tags": [
              "vdb-entry",
              "x_refsource_BID",
              "x_transferred"
            ],
            "url": "http://www.securityfocus.com/bid/31368"
          },
          {
            "tags": [
              "x_refsource_CONFIRM",
              "x_transferred"
            ],
            "url": "http://git.kernel.org/?p=linux/kernel/git/stable/linux-2.6.26.y.git%3Ba=commit%3Bh=7b82dc0e64e93f430182f36b46b79fcee87d3532"
          },
          {
            "name": "32237",
            "tags": [
              "third-party-advisory",
              "x_refsource_SECUNIA",
              "x_transferred"
            ],
            "url": "http://secunia.com/advisories/32237"
          },
          {
            "name": "RHSA-2008:0957",
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT",
              "x_transferred"
            ],
            "url": "http://www.redhat.com/support/errata/RHSA-2008-0957.html"
          },
          {
            "name": "RHSA-2008:0972",
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT",
              "x_transferred"
            ],
            "url": "http://rhn.redhat.com/errata/RHSA-2008-0972.html"
          },
          {
            "name": "[oss-security] 20080924 Re: CVE request: kernel: open() call allows setgid bit when user is not in new file\u0027s group",
            "tags": [
              "mailing-list",
              "x_refsource_MLIST",
              "x_transferred"
            ],
            "url": "http://www.openwall.com/lists/oss-security/2008/09/24/8"
          },
          {
            "name": "SUSE-SA:2008:056",
            "tags": [
              "vendor-advisory",
              "x_refsource_SUSE",
              "x_transferred"
            ],
            "url": "http://lists.opensuse.org/opensuse-security-announce/2008-12/msg00000.html"
          },
          {
            "name": "oval:org.mitre.oval:def:6386",
            "tags": [
              "vdb-entry",
              "signature",
              "x_refsource_OVAL",
              "x_transferred"
            ],
            "url": "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A6386"
          },
          {
            "name": "33280",
            "tags": [
              "third-party-advisory",
              "x_refsource_SECUNIA",
              "x_transferred"
            ],
            "url": "http://secunia.com/advisories/33280"
          },
          {
            "name": "DSA-1653",
            "tags": [
              "vendor-advisory",
              "x_refsource_DEBIAN",
              "x_transferred"
            ],
            "url": "http://www.debian.org/security/2008/dsa-1653"
          },
          {
            "name": "[oss-security] 20080924 CVE request: kernel: open() call allows setgid bit when user is not in new file\u0027s group",
            "tags": [
              "mailing-list",
              "x_refsource_MLIST",
              "x_transferred"
            ],
            "url": "http://www.openwall.com/lists/oss-security/2008/09/24/5"
          },
          {
            "name": "32356",
            "tags": [
              "third-party-advisory",
              "x_refsource_SECUNIA",
              "x_transferred"
            ],
            "url": "http://secunia.com/advisories/32356"
          },
          {
            "name": "32918",
            "tags": [
              "third-party-advisory",
              "x_refsource_SECUNIA",
              "x_transferred"
            ],
            "url": "http://secunia.com/advisories/32918"
          },
          {
            "name": "USN-679-1",
            "tags": [
              "vendor-advisory",
              "x_refsource_UBUNTU",
              "x_transferred"
            ],
            "url": "http://www.ubuntu.com/usn/usn-679-1"
          },
          {
            "name": "oval:org.mitre.oval:def:9511",
            "tags": [
              "vdb-entry",
              "signature",
              "x_refsource_OVAL",
              "x_transferred"
            ],
            "url": "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A9511"
          },
          {
            "name": "32759",
            "tags": [
              "third-party-advisory",
              "x_refsource_SECUNIA",
              "x_transferred"
            ],
            "url": "http://secunia.com/advisories/32759"
          },
          {
            "name": "MDVSA-2008:220",
            "tags": [
              "vendor-advisory",
              "x_refsource_MANDRIVA",
              "x_transferred"
            ],
            "url": "http://www.mandriva.com/security/advisories?name=MDVSA-2008:220"
          },
          {
            "name": "32344",
            "tags": [
              "third-party-advisory",
              "x_refsource_SECUNIA",
              "x_transferred"
            ],
            "url": "http://secunia.com/advisories/32344"
          },
          {
            "tags": [
              "x_refsource_CONFIRM",
              "x_transferred"
            ],
            "url": "https://bugzilla.redhat.com/show_bug.cgi?id=463661"
          },
          {
            "tags": [
              "x_refsource_CONFIRM",
              "x_transferred"
            ],
            "url": "http://bugzilla.kernel.org/show_bug.cgi?id=8420"
          },
          {
            "tags": [
              "x_refsource_CONFIRM",
              "x_transferred"
            ],
            "url": "http://kernel.org/pub/linux/kernel/v2.6/ChangeLog-2.6.22"
          },
          {
            "name": "RHSA-2008:0973",
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT",
              "x_transferred"
            ],
            "url": "http://www.redhat.com/support/errata/RHSA-2008-0973.html"
          },
          {
            "name": "RHSA-2008:0787",
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT",
              "x_transferred"
            ],
            "url": "http://www.redhat.com/support/errata/RHSA-2008-0787.html"
          },
          {
            "name": "SUSE-SA:2008:051",
            "tags": [
              "vendor-advisory",
              "x_refsource_SUSE",
              "x_transferred"
            ],
            "url": "http://lists.opensuse.org/opensuse-security-announce/2008-10/msg00007.html"
          },
          {
            "name": "32799",
            "tags": [
              "third-party-advisory",
              "x_refsource_SECUNIA",
              "x_transferred"
            ],
            "url": "http://secunia.com/advisories/32799"
          },
          {
            "name": "linux-kernel-open-privilege-escalation(45539)",
            "tags": [
              "vdb-entry",
              "x_refsource_XF",
              "x_transferred"
            ],
            "url": "https://exchange.xforce.ibmcloud.com/vulnerabilities/45539"
          },
          {
            "name": "SUSE-SA:2008:057",
            "tags": [
              "vendor-advisory",
              "x_refsource_SUSE",
              "x_transferred"
            ],
            "url": "http://lists.opensuse.org/opensuse-security-announce/2008-12/msg00001.html"
          },
          {
            "name": "SUSE-SR:2008:025",
            "tags": [
              "vendor-advisory",
              "x_refsource_SUSE",
              "x_transferred"
            ],
            "url": "http://lists.opensuse.org/opensuse-security-announce/2008-11/msg00001.html"
          },
          {
            "name": "33201",
            "tags": [
              "third-party-advisory",
              "x_refsource_SECUNIA",
              "x_transferred"
            ],
            "url": "http://secunia.com/advisories/33201"
          }
        ],
        "title": "CVE Program Container"
      }
    ],
    "cna": {
      "affected": [
        {
          "product": "n/a",
          "vendor": "n/a",
          "versions": [
            {
              "status": "affected",
              "version": "n/a"
            }
          ]
        }
      ],
      "datePublic": "2007-07-08T00:00:00.000Z",
      "descriptions": [
        {
          "lang": "en",
          "value": "fs/open.c in the Linux kernel before 2.6.22 does not properly strip setuid and setgid bits when there is a write to a file, which allows local users to gain the privileges of a different group, and obtain sensitive information or possibly have unspecified other impact, by creating an executable file in a setgid directory through the (1) truncate or (2) ftruncate function in conjunction with memory-mapped I/O."
        }
      ],
      "problemTypes": [
        {
          "descriptions": [
            {
              "description": "n/a",
              "lang": "en",
              "type": "text"
            }
          ]
        }
      ],
      "providerMetadata": {
        "dateUpdated": "2017-09-28T12:57:01.000Z",
        "orgId": "8254265b-2729-46b6-b9e3-3dfca2d5bfca",
        "shortName": "mitre"
      },
      "references": [
        {
          "tags": [
            "x_refsource_CONFIRM"
          ],
          "url": "http://www.kernel.org/pub/linux/kernel/v2.6/ChangeLog-2.6.22"
        },
        {
          "name": "32485",
          "tags": [
            "third-party-advisory",
            "x_refsource_SECUNIA"
          ],
          "url": "http://secunia.com/advisories/32485"
        },
        {
          "name": "31368",
          "tags": [
            "vdb-entry",
            "x_refsource_BID"
          ],
          "url": "http://www.securityfocus.com/bid/31368"
        },
        {
          "tags": [
            "x_refsource_CONFIRM"
          ],
          "url": "http://git.kernel.org/?p=linux/kernel/git/stable/linux-2.6.26.y.git%3Ba=commit%3Bh=7b82dc0e64e93f430182f36b46b79fcee87d3532"
        },
        {
          "name": "32237",
          "tags": [
            "third-party-advisory",
            "x_refsource_SECUNIA"
          ],
          "url": "http://secunia.com/advisories/32237"
        },
        {
          "name": "RHSA-2008:0957",
          "tags": [
            "vendor-advisory",
            "x_refsource_REDHAT"
          ],
          "url": "http://www.redhat.com/support/errata/RHSA-2008-0957.html"
        },
        {
          "name": "RHSA-2008:0972",
          "tags": [
            "vendor-advisory",
            "x_refsource_REDHAT"
          ],
          "url": "http://rhn.redhat.com/errata/RHSA-2008-0972.html"
        },
        {
          "name": "[oss-security] 20080924 Re: CVE request: kernel: open() call allows setgid bit when user is not in new file\u0027s group",
          "tags": [
            "mailing-list",
            "x_refsource_MLIST"
          ],
          "url": "http://www.openwall.com/lists/oss-security/2008/09/24/8"
        },
        {
          "name": "SUSE-SA:2008:056",
          "tags": [
            "vendor-advisory",
            "x_refsource_SUSE"
          ],
          "url": "http://lists.opensuse.org/opensuse-security-announce/2008-12/msg00000.html"
        },
        {
          "name": "oval:org.mitre.oval:def:6386",
          "tags": [
            "vdb-entry",
            "signature",
            "x_refsource_OVAL"
          ],
          "url": "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A6386"
        },
        {
          "name": "33280",
          "tags": [
            "third-party-advisory",
            "x_refsource_SECUNIA"
          ],
          "url": "http://secunia.com/advisories/33280"
        },
        {
          "name": "DSA-1653",
          "tags": [
            "vendor-advisory",
            "x_refsource_DEBIAN"
          ],
          "url": "http://www.debian.org/security/2008/dsa-1653"
        },
        {
          "name": "[oss-security] 20080924 CVE request: kernel: open() call allows setgid bit when user is not in new file\u0027s group",
          "tags": [
            "mailing-list",
            "x_refsource_MLIST"
          ],
          "url": "http://www.openwall.com/lists/oss-security/2008/09/24/5"
        },
        {
          "name": "32356",
          "tags": [
            "third-party-advisory",
            "x_refsource_SECUNIA"
          ],
          "url": "http://secunia.com/advisories/32356"
        },
        {
          "name": "32918",
          "tags": [
            "third-party-advisory",
            "x_refsource_SECUNIA"
          ],
          "url": "http://secunia.com/advisories/32918"
        },
        {
          "name": "USN-679-1",
          "tags": [
            "vendor-advisory",
            "x_refsource_UBUNTU"
          ],
          "url": "http://www.ubuntu.com/usn/usn-679-1"
        },
        {
          "name": "oval:org.mitre.oval:def:9511",
          "tags": [
            "vdb-entry",
            "signature",
            "x_refsource_OVAL"
          ],
          "url": "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A9511"
        },
        {
          "name": "32759",
          "tags": [
            "third-party-advisory",
            "x_refsource_SECUNIA"
          ],
          "url": "http://secunia.com/advisories/32759"
        },
        {
          "name": "MDVSA-2008:220",
          "tags": [
            "vendor-advisory",
            "x_refsource_MANDRIVA"
          ],
          "url": "http://www.mandriva.com/security/advisories?name=MDVSA-2008:220"
        },
        {
          "name": "32344",
          "tags": [
            "third-party-advisory",
            "x_refsource_SECUNIA"
          ],
          "url": "http://secunia.com/advisories/32344"
        },
        {
          "tags": [
            "x_refsource_CONFIRM"
          ],
          "url": "https://bugzilla.redhat.com/show_bug.cgi?id=463661"
        },
        {
          "tags": [
            "x_refsource_CONFIRM"
          ],
          "url": "http://bugzilla.kernel.org/show_bug.cgi?id=8420"
        },
        {
          "tags": [
            "x_refsource_CONFIRM"
          ],
          "url": "http://kernel.org/pub/linux/kernel/v2.6/ChangeLog-2.6.22"
        },
        {
          "name": "RHSA-2008:0973",
          "tags": [
            "vendor-advisory",
            "x_refsource_REDHAT"
          ],
          "url": "http://www.redhat.com/support/errata/RHSA-2008-0973.html"
        },
        {
          "name": "RHSA-2008:0787",
          "tags": [
            "vendor-advisory",
            "x_refsource_REDHAT"
          ],
          "url": "http://www.redhat.com/support/errata/RHSA-2008-0787.html"
        },
        {
          "name": "SUSE-SA:2008:051",
          "tags": [
            "vendor-advisory",
            "x_refsource_SUSE"
          ],
          "url": "http://lists.opensuse.org/opensuse-security-announce/2008-10/msg00007.html"
        },
        {
          "name": "32799",
          "tags": [
            "third-party-advisory",
            "x_refsource_SECUNIA"
          ],
          "url": "http://secunia.com/advisories/32799"
        },
        {
          "name": "linux-kernel-open-privilege-escalation(45539)",
          "tags": [
            "vdb-entry",
            "x_refsource_XF"
          ],
          "url": "https://exchange.xforce.ibmcloud.com/vulnerabilities/45539"
        },
        {
          "name": "SUSE-SA:2008:057",
          "tags": [
            "vendor-advisory",
            "x_refsource_SUSE"
          ],
          "url": "http://lists.opensuse.org/opensuse-security-announce/2008-12/msg00001.html"
        },
        {
          "name": "SUSE-SR:2008:025",
          "tags": [
            "vendor-advisory",
            "x_refsource_SUSE"
          ],
          "url": "http://lists.opensuse.org/opensuse-security-announce/2008-11/msg00001.html"
        },
        {
          "name": "33201",
          "tags": [
            "third-party-advisory",
            "x_refsource_SECUNIA"
          ],
          "url": "http://secunia.com/advisories/33201"
        }
      ],
      "x_legacyV4Record": {
        "CVE_data_meta": {
          "ASSIGNER": "cve@mitre.org",
          "ID": "CVE-2008-4210",
          "STATE": "PUBLIC"
        },
        "affects": {
          "vendor": {
            "vendor_data": [
              {
                "product": {
                  "product_data": [
                    {
                      "product_name": "n/a",
                      "version": {
                        "version_data": [
                          {
                            "version_value": "n/a"
                          }
                        ]
                      }
                    }
                  ]
                },
                "vendor_name": "n/a"
              }
            ]
          }
        },
        "data_format": "MITRE",
        "data_type": "CVE",
        "data_version": "4.0",
        "description": {
          "description_data": [
            {
              "lang": "eng",
              "value": "fs/open.c in the Linux kernel before 2.6.22 does not properly strip setuid and setgid bits when there is a write to a file, which allows local users to gain the privileges of a different group, and obtain sensitive information or possibly have unspecified other impact, by creating an executable file in a setgid directory through the (1) truncate or (2) ftruncate function in conjunction with memory-mapped I/O."
            }
          ]
        },
        "problemtype": {
          "problemtype_data": [
            {
              "description": [
                {
                  "lang": "eng",
                  "value": "n/a"
                }
              ]
            }
          ]
        },
        "references": {
          "reference_data": [
            {
              "name": "http://www.kernel.org/pub/linux/kernel/v2.6/ChangeLog-2.6.22",
              "refsource": "CONFIRM",
              "url": "http://www.kernel.org/pub/linux/kernel/v2.6/ChangeLog-2.6.22"
            },
            {
              "name": "32485",
              "refsource": "SECUNIA",
              "url": "http://secunia.com/advisories/32485"
            },
            {
              "name": "31368",
              "refsource": "BID",
              "url": "http://www.securityfocus.com/bid/31368"
            },
            {
              "name": "http://git.kernel.org/?p=linux/kernel/git/stable/linux-2.6.26.y.git;a=commit;h=7b82dc0e64e93f430182f36b46b79fcee87d3532",
              "refsource": "CONFIRM",
              "url": "http://git.kernel.org/?p=linux/kernel/git/stable/linux-2.6.26.y.git;a=commit;h=7b82dc0e64e93f430182f36b46b79fcee87d3532"
            },
            {
              "name": "32237",
              "refsource": "SECUNIA",
              "url": "http://secunia.com/advisories/32237"
            },
            {
              "name": "RHSA-2008:0957",
              "refsource": "REDHAT",
              "url": "http://www.redhat.com/support/errata/RHSA-2008-0957.html"
            },
            {
              "name": "RHSA-2008:0972",
              "refsource": "REDHAT",
              "url": "http://rhn.redhat.com/errata/RHSA-2008-0972.html"
            },
            {
              "name": "[oss-security] 20080924 Re: CVE request: kernel: open() call allows setgid bit when user is not in new file\u0027s group",
              "refsource": "MLIST",
              "url": "http://www.openwall.com/lists/oss-security/2008/09/24/8"
            },
            {
              "name": "SUSE-SA:2008:056",
              "refsource": "SUSE",
              "url": "http://lists.opensuse.org/opensuse-security-announce/2008-12/msg00000.html"
            },
            {
              "name": "oval:org.mitre.oval:def:6386",
              "refsource": "OVAL",
              "url": "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A6386"
            },
            {
              "name": "33280",
              "refsource": "SECUNIA",
              "url": "http://secunia.com/advisories/33280"
            },
            {
              "name": "DSA-1653",
              "refsource": "DEBIAN",
              "url": "http://www.debian.org/security/2008/dsa-1653"
            },
            {
              "name": "[oss-security] 20080924 CVE request: kernel: open() call allows setgid bit when user is not in new file\u0027s group",
              "refsource": "MLIST",
              "url": "http://www.openwall.com/lists/oss-security/2008/09/24/5"
            },
            {
              "name": "32356",
              "refsource": "SECUNIA",
              "url": "http://secunia.com/advisories/32356"
            },
            {
              "name": "32918",
              "refsource": "SECUNIA",
              "url": "http://secunia.com/advisories/32918"
            },
            {
              "name": "USN-679-1",
              "refsource": "UBUNTU",
              "url": "http://www.ubuntu.com/usn/usn-679-1"
            },
            {
              "name": "oval:org.mitre.oval:def:9511",
              "refsource": "OVAL",
              "url": "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A9511"
            },
            {
              "name": "32759",
              "refsource": "SECUNIA",
              "url": "http://secunia.com/advisories/32759"
            },
            {
              "name": "MDVSA-2008:220",
              "refsource": "MANDRIVA",
              "url": "http://www.mandriva.com/security/advisories?name=MDVSA-2008:220"
            },
            {
              "name": "32344",
              "refsource": "SECUNIA",
              "url": "http://secunia.com/advisories/32344"
            },
            {
              "name": "https://bugzilla.redhat.com/show_bug.cgi?id=463661",
              "refsource": "CONFIRM",
              "url": "https://bugzilla.redhat.com/show_bug.cgi?id=463661"
            },
            {
              "name": "http://bugzilla.kernel.org/show_bug.cgi?id=8420",
              "refsource": "CONFIRM",
              "url": "http://bugzilla.kernel.org/show_bug.cgi?id=8420"
            },
            {
              "name": "http://kernel.org/pub/linux/kernel/v2.6/ChangeLog-2.6.22",
              "refsource": "CONFIRM",
              "url": "http://kernel.org/pub/linux/kernel/v2.6/ChangeLog-2.6.22"
            },
            {
              "name": "RHSA-2008:0973",
              "refsource": "REDHAT",
              "url": "http://www.redhat.com/support/errata/RHSA-2008-0973.html"
            },
            {
              "name": "RHSA-2008:0787",
              "refsource": "REDHAT",
              "url": "http://www.redhat.com/support/errata/RHSA-2008-0787.html"
            },
            {
              "name": "SUSE-SA:2008:051",
              "refsource": "SUSE",
              "url": "http://lists.opensuse.org/opensuse-security-announce/2008-10/msg00007.html"
            },
            {
              "name": "32799",
              "refsource": "SECUNIA",
              "url": "http://secunia.com/advisories/32799"
            },
            {
              "name": "linux-kernel-open-privilege-escalation(45539)",
              "refsource": "XF",
              "url": "https://exchange.xforce.ibmcloud.com/vulnerabilities/45539"
            },
            {
              "name": "SUSE-SA:2008:057",
              "refsource": "SUSE",
              "url": "http://lists.opensuse.org/opensuse-security-announce/2008-12/msg00001.html"
            },
            {
              "name": "SUSE-SR:2008:025",
              "refsource": "SUSE",
              "url": "http://lists.opensuse.org/opensuse-security-announce/2008-11/msg00001.html"
            },
            {
              "name": "33201",
              "refsource": "SECUNIA",
              "url": "http://secunia.com/advisories/33201"
            }
          ]
        }
      }
    }
  },
  "cveMetadata": {
    "assignerOrgId": "8254265b-2729-46b6-b9e3-3dfca2d5bfca",
    "assignerShortName": "mitre",
    "cveId": "CVE-2008-4210",
    "datePublished": "2008-09-29T17:00:00.000Z",
    "dateReserved": "2008-09-24T00:00:00.000Z",
    "dateUpdated": "2024-08-07T10:08:34.949Z",
    "state": "PUBLISHED"
  },
  "dataType": "CVE_RECORD",
  "dataVersion": "5.1"
}

Tags

Taxonomy of the tags.

All sightings related to this event Export sightings related to this event

Sightings

Author	Source	Type	Date

Nomenclature

Seen: The vulnerability was mentioned, discussed, or observed by the user.
Confirmed: The vulnerability has been validated from an analyst's perspective.
Published Proof of Concept: A public proof of concept is available for this vulnerability.
Exploited: The vulnerability was observed as exploited by the user who reported the sighting.
Patched: The vulnerability was observed as successfully patched by the user who reported the sighting.
Not exploited: The vulnerability was not observed as exploited by the user who reported the sighting.
Not confirmed: The user expressed doubt about the validity of the vulnerability.
Not patched: The vulnerability was not observed as successfully patched by the user who reported the sighting.

Detection rules are retrieved from Rulezet.

Action not permitted

RHSA-2009:0001

CVE-2008-0007 (GCVE-0-2008-0007)

CVE-2007-6063 (GCVE-0-2007-6063)

CVE-2007-2172 (GCVE-0-2007-2172)

CVE-2007-6206 (GCVE-0-2007-6206)

CVE-2008-2136 (GCVE-0-2008-2136)

CVE-2008-3525 (GCVE-0-2008-3525)

CVE-2007-6151 (GCVE-0-2007-6151)

CVE-2006-4814 (GCVE-0-2006-4814)

CVE-2007-3848 (GCVE-0-2007-3848)

CVE-2007-4308 (GCVE-0-2007-4308)

CVE-2008-3275 (GCVE-0-2008-3275)

CVE-2008-4210 (GCVE-0-2008-4210)

Tags

Sightings

Nomenclature