Vulnerability Details : CVE-2009-2848
The execve function in the Linux kernel, possibly 2.6.30-rc6 and earlier, does not properly clear the current->clear_child_tid pointer, which allows local users to cause a denial of service (memory corruption) or possibly gain privileges via a clone system call with CLONE_CHILD_SETTID or CLONE_CHILD_CLEARTID enabled, which is not properly handled during thread creation and exit.
Vulnerability category: Memory CorruptionDenial of service
Products affected by CVE-2009-2848
- cpe:2.3:o:novell:linux_desktop:9:*:*:*:*:*:*:*
- cpe:2.3:o:redhat:enterprise_linux_desktop:3.0:*:*:*:*:*:*:*
- cpe:2.3:o:redhat:enterprise_linux_desktop:5.0:*:*:*:*:*:*:*
- cpe:2.3:o:redhat:enterprise_linux_server:5.0:*:*:*:*:*:*:*
- cpe:2.3:o:redhat:enterprise_linux_server:3.0:*:*:*:*:*:*:*
- cpe:2.3:o:redhat:enterprise_linux_workstation:5.0:*:*:*:*:*:*:*
- cpe:2.3:o:redhat:enterprise_linux_workstation:3.0:*:*:*:*:*:*:*
- cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*
- cpe:2.3:o:linux:linux_kernel:2.6.30:rc1:*:*:*:*:*:*
- cpe:2.3:o:linux:linux_kernel:2.6.30:rc3:*:*:*:*:*:*
- cpe:2.3:o:linux:linux_kernel:2.6.30:rc2:*:*:*:*:*:*
- cpe:2.3:o:linux:linux_kernel:2.6.30:rc5:*:*:*:*:*:*
- cpe:2.3:o:linux:linux_kernel:2.6.30:rc6:*:*:*:*:*:*
- cpe:2.3:o:linux:linux_kernel:2.6.30:-:*:*:*:*:*:*
- cpe:2.3:o:linux:linux_kernel:2.6.30:rc4:*:*:*:*:*:*
- cpe:2.3:o:suse:linux_enterprise_desktop:10:sp2:*:*:*:*:*:*
- cpe:2.3:o:suse:linux_enterprise_server:9:*:*:*:*:*:*:*
- cpe:2.3:o:suse:linux_enterprise_server:10:sp2:*:*:*:*:*:*
- cpe:2.3:o:vmware:esx:4.0:*:*:*:*:*:*:*
- cpe:2.3:a:vmware:vma:4.0:*:*:*:*:*:*:*
- cpe:2.3:o:canonical:ubuntu_linux:6.06:*:*:*:*:*:*:*
- cpe:2.3:o:canonical:ubuntu_linux:8.10:*:*:*:*:*:*:*
- cpe:2.3:o:canonical:ubuntu_linux:8.04:*:*:*:*:*:*:*
- cpe:2.3:o:canonical:ubuntu_linux:9.04:*:*:*:*:*:*:*
- cpe:2.3:o:fedoraproject:fedora:11:*:*:*:*:*:*:*
- cpe:2.3:o:opensuse:opensuse:11.0:*:*:*:*:*:*:*
Exploit prediction scoring system (EPSS) score for CVE-2009-2848
0.06%
Probability of exploitation activity in the next 30 days
EPSS Score History
~ 26 %
Percentile, the proportion of vulnerabilities that are scored at or less
CVSS scores for CVE-2009-2848
| Base Score | Base Severity | CVSS Vector | Exploitability Score | Impact Score | Score Source | First Seen |
|---|---|---|---|---|---|---|
|
5.9
|
MEDIUM | AV:L/AC:M/Au:N/C:P/I:P/A:C |
3.4
|
8.5
|
NIST |
CWE ids for CVE-2009-2848
-
The product does not properly assign, modify, track, or check privileges for an actor, creating an unintended sphere of control for that actor.Assigned by: nvd@nist.gov (Primary)
References for CVE-2009-2848
-
http://www.redhat.com/support/errata/RHSA-2009-1438.html
SupportBroken Link
-
http://www.securityfocus.com/archive/1/512019/100/0/threaded
Third Party Advisory;VDB Entry
-
https://rhn.redhat.com/errata/RHSA-2009-1550.html
RHSA-2009:1550 - Security Advisory - Red Hat Customer PortalThird Party Advisory
-
https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A9766
Third Party Advisory
-
http://lists.opensuse.org/opensuse-security-announce/2010-02/msg00005.html
[security-announce] SUSE Security Announcement: Linux kernel (SUSE-SA:20Mailing List;Third Party Advisory
-
http://www.openwall.com/lists/oss-security/2009/08/04/2
Exploit;Mailing List;Third Party Advisory
-
http://www.vmware.com/security/advisories/VMSA-2009-0016.html
VMSA-2009-0016.6Third Party Advisory
-
http://www.vupen.com/english/advisories/2009/3316
Webmail: access your OVH emails on ovhcloud.com | OVHcloudBroken Link
-
http://www.openwall.com/lists/oss-security/2009/08/05/10
Exploit;Mailing List;Third Party Advisory
-
https://exchange.xforce.ibmcloud.com/vulnerabilities/52899
Third Party Advisory;VDB Entry
-
http://lists.opensuse.org/opensuse-security-announce/2009-11/msg00007.html
[security-announce] SUSE Security Announcement: Linux kernel (SUSE-SA:2009:056) - openSUSE Security Announce - openSUSE Mailing ListsMailing List;Third Party Advisory
-
http://article.gmane.org/gmane.linux.kernel/871942
Broken Link
-
http://lists.opensuse.org/opensuse-security-announce/2009-11/msg00005.html
[security-announce] SUSE Security Announcement: Linux kernel (SUSE-SA:2009:054) - openSUSE Security Announce - openSUSE Mailing ListsMailing List;Third Party Advisory
-
https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A8598
Third Party Advisory
-
https://www.redhat.com/archives/fedora-package-announce/2009-August/msg01256.html
Mailing List;Third Party Advisory
-
http://www.ubuntu.com/usn/USN-852-1
USN-852-1: Linux kernel vulnerabilities | Ubuntu security notices | UbuntuThird Party Advisory
-
http://www.securityfocus.com/archive/1/507985/100/0/threaded
Third Party Advisory;VDB Entry
-
https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A11412
Third Party Advisory
-
http://rhn.redhat.com/errata/RHSA-2009-1243.html
Third Party Advisory
Jump to