CVE

Id
40202  
CVE No.
CVE-2009-2767  
Status
Candidate  
Description
The init_posix_timers function in kernel/posix-timers.c in the Linux kernel before 2.6.31-rc6 allows local users to cause a denial of service (OOPS) or possibly gain privileges via a CLOCK_MONOTONIC_RAW clock_nanosleep call that triggers a NULL pointer dereference.  
Phase
Assigned (20090814)  
Votes
None (candidate not yet proposed)  
Comments
 

Actions

Related CVE References

Id CVE Id CVE No. Reference Actions
441889 40202 CVE-2009-2767 MLIST:[linux-kernel] 20090804 Re: [PATCH] posix-timers: fix oops in clock_nanosleep() with CLOCK_MONOTONIC_RAW  View
441890 40202 CVE-2009-2767 URL:http://lkml.org/lkml/2009/8/4/28  View
441891 40202 CVE-2009-2767 MLIST:[linux-kernel] 20090804 Re: [PATCH] posix-timers: fix oops in clock_nanosleep() with CLOCK_MONOTONIC_RAW  View
441892 40202 CVE-2009-2767 URL:http://lkml.org/lkml/2009/8/4/40  View
441893 40202 CVE-2009-2767 MLIST:[oss-security] 20090806 CVE request: kernel: clock_nanosleep() with CLOCK_MONOTONIC_RAW NULL pointer dereference  View
441894 40202 CVE-2009-2767 URL:http://www.openwall.com/lists/oss-security/2009/08/06/2  View
441895 40202 CVE-2009-2767 CONFIRM:http://git.kernel.org/?p=linux/kernel/git/torvalds/linux-2.6.git;a=commit;h=70d715fd0597f18528f389b5ac59102263067744  View
441896 40202 CVE-2009-2767 CONFIRM:http://www.kernel.org/pub/linux/kernel/v2.6/testing/ChangeLog-2.6.31-rc6  View
441897 40202 CVE-2009-2767 UBUNTU:USN-852-1  View
441898 40202 CVE-2009-2767 URL:http://www.ubuntu.com/usn/USN-852-1  View
441899 40202 CVE-2009-2767 SECUNIA:36200  View
441900 40202 CVE-2009-2767 URL:http://secunia.com/advisories/36200  View
441901 40202 CVE-2009-2767 SECUNIA:37105  View
441902 40202 CVE-2009-2767 URL:http://secunia.com/advisories/37105  View
441903 40202 CVE-2009-2767 VUPEN:ADV-2009-2197  View
441904 40202 CVE-2009-2767 URL:http://www.vupen.com/english/advisories/2009/2197  View
441905 40202 CVE-2009-2767 XF:linux-kernel-clocknanosleep-priv-escalation(52317)  View

Related JVN

Id JVN No. Title Summary CVE No. CVE Id CVSS_v2 CVSS_v3 JVN URL Actions
42664 JVNDB-2009-003671 Free Arcade Script におけるクロスサイトスクリプティングの脆弱性 Free Arcade Script には、クロスサイトスクリプティングの脆弱性が存在します。 CVE-2009-2771 40202 4.3 http://jvndb.jvn.jp/ja/contents/2009/JVNDB-2009-003671.html  View