CVE

Id
32482  
CVE No.
CVE-2008-2365  
Status
Candidate  
Description
Race condition in the ptrace and utrace support in the Linux kernel 2.6.9 through 2.6.25, as used in Red Hat Enterprise Linux (RHEL) 4, allows local users to cause a denial of service (oops) via a long series of PTRACE_ATTACH ptrace calls to another user"s process that trigger a conflict between utrace_detach and report_quiescent, related to "late ptrace_may_attach() check" and "race around &dead_engine_ops setting," a different vulnerability than CVE-2007-0771 and CVE-2008-1514. NOTE: this issue might only affect kernel versions before 2.6.16.x.  
Phase
Assigned (20080521)  
Votes
None (candidate not yet proposed)  
Comments
 

Actions

Related CVE References

Id CVE Id CVE No. Reference Actions
351366 32482 CVE-2008-2365 MLIST:[linux-kernel] 20070508 Re: [PATCH -utrace] Move utrace into task_struct  View
351367 32482 CVE-2008-2365 URL:http://marc.info/?l=linux-kernel&m=117863520707703&w=2  View
351368 32482 CVE-2008-2365 MLIST:[oss-security] 20080626 CVE-2008-2365 kernel: ptrace: Crash on PTRACE_{ATTACH,DETACH} race -- affecting kernel versions <= 2.6.25  View
351369 32482 CVE-2008-2365 URL:http://www.openwall.com/lists/oss-security/2008/06/26/1  View
351370 32482 CVE-2008-2365 MLIST:[oss-security] 20080714 Re: CVE-2008-2365 kernel: ptrace: Crash on PTRACE_{ATTACH,DETACH} race -- affecting kernel versions <= 2.6.25  View
351371 32482 CVE-2008-2365 URL:http://www.openwall.com/lists/oss-security/2008/07/14/1  View
351372 32482 CVE-2008-2365 MISC:http://sources.redhat.com/cgi-bin/cvsweb.cgi/~checkout~/tests/ptrace-tests/tests/late-ptrace-may-attach-check.c?cvsroot=systemtap  View
351373 32482 CVE-2008-2365 CONFIRM:http://git.kernel.org/?p=linux/kernel/git/stable/linux-2.6.25.y.git;a=commit;h=5ecfbae093f0c37311e89b29bfc0c9d586eace87  View
351374 32482 CVE-2008-2365 CONFIRM:http://git.kernel.org/?p=linux/kernel/git/stable/linux-2.6.25.y.git;a=commit;h=f358166a9405e4f1d8e50d8f415c26d95505b6de  View
351375 32482 CVE-2008-2365 CONFIRM:http://git.kernel.org/?p=linux/kernel/git/stable/linux-2.6.25.y.git;a=commit;h=f5b40e363ad6041a96e3da32281d8faa191597b9  View
351376 32482 CVE-2008-2365 CONFIRM:https://bugzilla.redhat.com/show_bug.cgi?id=449359  View
351377 32482 CVE-2008-2365 REDHAT:RHSA-2008:0508  View
351378 32482 CVE-2008-2365 URL:http://rhn.redhat.com/errata/RHSA-2008-0508.html  View
351379 32482 CVE-2008-2365 UBUNTU:USN-625-1  View
351380 32482 CVE-2008-2365 URL:http://www.ubuntu.com/usn/usn-625-1  View
351381 32482 CVE-2008-2365 BID:29945  View
351382 32482 CVE-2008-2365 URL:http://www.securityfocus.com/bid/29945  View
351383 32482 CVE-2008-2365 OVAL:oval:org.mitre.oval:def:10749  View
351384 32482 CVE-2008-2365 URL:http://oval.mitre.org/repository/data/getDef?id=oval:org.mitre.oval:def:10749  View
351385 32482 CVE-2008-2365 SECTRACK:1020362  View
351386 32482 CVE-2008-2365 URL:http://www.securitytracker.com/id?1020362  View
351387 32482 CVE-2008-2365 SECUNIA:30850  View
351388 32482 CVE-2008-2365 URL:http://secunia.com/advisories/30850  View
351389 32482 CVE-2008-2365 SECUNIA:31107  View
351390 32482 CVE-2008-2365 URL:http://secunia.com/advisories/31107  View
351391 32482 CVE-2008-2365 SREASON:3965  View
351392 32482 CVE-2008-2365 URL:http://securityreason.com/securityalert/3965  View
351393 32482 CVE-2008-2365 XF:linux-kernel-ptraceattach-dos(43567)  View

Related JVN

Id JVN No. Title Summary CVE No. CVE Id CVSS_v2 CVSS_v3 JVN URL Actions
50509 JVNDB-2008-005819 Red Hat Network Satellite Server の manzier.pxt における重要な情報を取得される脆弱性 Red Hat Network Satellite Server の manzier.pxt は、ハードコーディングされた認証鍵を持っているため、サーバへ接続される、ユーザアカウントおよび資格について重要な情報を取得される脆弱性が存在します。 CVE-2008-2369 32482 6.4 http://jvndb.jvn.jp/ja/contents/2008/JVNDB-2008-005819.html  View