CVE

Id
40723  
CVE No.
CVE-2009-3288  
Status
Candidate  
Description
The sg_build_indirect function in drivers/scsi/sg.c in Linux kernel 2.6.28-rc1 through 2.6.31-rc8 uses an incorrect variable when accessing an array, which allows local users to cause a denial of service (kernel OOPS and NULL pointer dereference), as demonstrated by using xcdroast to duplicate a CD. NOTE: this is only exploitable by users who can open the cdrom device.  
Phase
Assigned (20090922)  
Votes
None (candidate not yet proposed)  
Comments
 

Actions

Related CVE References

Id CVE Id CVE No. Reference Actions
446660 40723 CVE-2009-3288 MLIST:[linux-kernel] 20090902 [BUG] 2.6.31-rc8 readcd Oops  View
446661 40723 CVE-2009-3288 URL:http://lkml.org/lkml/2009/9/3/1  View
446662 40723 CVE-2009-3288 MLIST:[linux-kernel] 20090903 [PATCH] sg: fix oops in the error path in sg_build_indirect()  View
446663 40723 CVE-2009-3288 URL:http://lkml.org/lkml/2009/9/3/107  View
446664 40723 CVE-2009-3288 MLIST:[oss-security] 20090904 CVE request: kernel: NULL pointer dereference in sg_build_indirect()  View
446665 40723 CVE-2009-3288 URL:http://www.openwall.com/lists/oss-security/2009/09/03/4  View
446666 40723 CVE-2009-3288 UBUNTU:USN-852-1  View
446667 40723 CVE-2009-3288 URL:http://www.ubuntu.com/usn/USN-852-1  View
446668 40723 CVE-2009-3288 SECUNIA:37105  View

Related JVN

Id JVN No. Title Summary CVE No. CVE Id CVSS_v2 CVSS_v3 JVN URL Actions
41172 JVNDB-2009-002179 PHP における exif のチェックに関する脆弱性 PHP には、exif を適切にチェックしないことに関する詳細不明な脆弱性が存在します。 CVE-2009-3292 40723 7.5 http://jvndb.jvn.jp/ja/contents/2009/JVNDB-2009-002179.html  View