CVE

Id
40203  
CVE No.
CVE-2009-2768  
Status
Candidate  
Description
The load_flat_shared_library function in fs/binfmt_flat.c in the flat subsystem in the Linux kernel before 2.6.31-rc6 allows local users to cause a denial of service (NULL pointer dereference and system crash) or possibly have unspecified other impact by executing a shared flat binary, which triggers an access of an "uninitialized cred pointer."  
Phase
Assigned (20090814)  
Votes
None (candidate not yet proposed)  
Comments
 

Actions

Related CVE References

Id CVE Id CVE No. Reference Actions
441906 40203 CVE-2009-2768 MLIST:[linux-kernel] 20090622 Fix for shared flat binary format in 2.6.30  View
441907 40203 CVE-2009-2768 URL:http://lkml.org/lkml/2009/6/22/91  View
441908 40203 CVE-2009-2768 MLIST:[oss-security] 20090813 CVE request: kernel: flat: fix uninitialized ptr with shared libs  View
441909 40203 CVE-2009-2768 URL:http://www.openwall.com/lists/oss-security/2009/08/13/1  View
441910 40203 CVE-2009-2768 CONFIRM:http://git.kernel.org/?p=linux/kernel/git/torvalds/linux-2.6.git;a=commit;h=3440625d78711bee41a84cf29c3d8c579b522666  View
441911 40203 CVE-2009-2768 CONFIRM:http://thread.gmane.org/gmane.linux.hardware.blackfin.kernel.devel/1905  View
441912 40203 CVE-2009-2768 CONFIRM:http://www.kernel.org/pub/linux/kernel/v2.6/testing/ChangeLog-2.6.31-rc6  View
441913 40203 CVE-2009-2768 CONFIRM:http://www.kernel.org/pub/linux/kernel/v2.6/ChangeLog-2.6.30.5  View
441914 40203 CVE-2009-2768 MANDRIVA:MDVSA-2011:051  View
441915 40203 CVE-2009-2768 URL:http://www.mandriva.com/security/advisories?name=MDVSA-2011:051  View
441916 40203 CVE-2009-2768 BID:36037  View
441917 40203 CVE-2009-2768 URL:http://www.securityfocus.com/bid/36037  View
441918 40203 CVE-2009-2768 SECUNIA:36278  View
441919 40203 CVE-2009-2768 URL:http://secunia.com/advisories/36278  View
441920 40203 CVE-2009-2768 XF:kernel-loadflatsharedlibrary-dos(52909)  View

Related JVN

Id JVN No. Title Summary CVE No. CVE Id CVSS_v2 CVSS_v3 JVN URL Actions
45207 JVNDB-2009-006214 PG Roommate Finder Solution におけるクロスサイトスクリプティングの脆弱性 PG Roommate Finder Solution には、クロスサイトスクリプティングの脆弱性が存在します。 CVE-2009-2772 40203 4.3 http://jvndb.jvn.jp/ja/contents/2009/JVNDB-2009-006214.html  View