Vulnerability Details : CVE-2009-2908
The d_delete function in fs/ecryptfs/inode.c in eCryptfs in the Linux kernel 2.6.31 allows local users to cause a denial of service (kernel OOPS) and possibly execute arbitrary code via unspecified vectors that cause a "negative dentry" and trigger a NULL pointer dereference, as demonstrated via a Mutt temporary directory in an eCryptfs mount.
Vulnerability category: Memory CorruptionExecute codeDenial of service
Exploit prediction scoring system (EPSS) score for CVE-2009-2908
Probability of exploitation activity in the next 30 days: 0.04%
Percentile, the proportion of vulnerabilities that are scored at or less: ~ 8 % EPSS Score History EPSS FAQ
CVSS scores for CVE-2009-2908
| Base Score | Base Severity | CVSS Vector | Exploitability Score | Impact Score | Source |
|---|---|---|---|---|---|
|
4.9
|
MEDIUM | AV:L/AC:L/Au:N/C:N/I:N/A:C |
3.9
|
6.9
|
[email protected] |
Vendor statements for CVE-2009-2908
-
Red Hat 2009-11-04The Linux kernel as shipped with Red Hat Enterprise Linux 3, 4, and Red Hat Enterprise MRG do not include support for eCryptfs, and therefore are not affected by this issue. It was addressed in Red Hat Enterprise Linux 5 via: https://rhn.redhat.com/errata/RHSA-2009-1548.html
-
https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A10216
- http://www.vupen.com/english/advisories/2010/0528
-
https://bugzilla.redhat.com/show_bug.cgi?id=527534
- http://lists.vmware.com/pipermail/security-announce/2010/000082.html
-
https://bugs.launchpad.net/ecryptfs/+bug/387073
-
http://www.securityfocus.com/bid/36639
Patch
-
http://www.openwall.com/lists/oss-security/2009/10/06/1
- http://www.ubuntu.com/usn/USN-852-1
- https://www.redhat.com/archives/fedora-package-announce/2009-October/msg00483.html
-
http://git.kernel.org/?p=linux/kernel/git/stable/linux-2.6.31.y.git%3Ba=commit%3Bh=afc2b6932f48f200736d3e36ad66fee0ec733136
-
https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A6992
-
https://exchange.xforce.ibmcloud.com/vulnerabilities/53693
- https://rhn.redhat.com/errata/RHSA-2009-1548.html
- cpe:2.3:o:linux:linux_kernel:2.6.31:*:*:*:*:*:*:*