NVD

Id
10  
Name
CVE-2008-0010  
Description
The copy_from_user_mmap_sem function in fs/splice.c in the Linux kernel 2.6.22 through 2.6.24 does not validate a certain userspace pointer before dereference, which allow local users to read from arbitrary kernel memory locations.  
Reject
 
CVSS Version
2  
CVSS Score
2.1  
Severity
Low  
CVSS Base Score
2.1  
CVSS Impact Subscore
2.9  
CVSS Exploit Subscore
3.9  
CVSS Vector
(AV:L/AC:L/Au:N/C:P/I:N/A:N)  
Pub Date
2017-01-03  
Published
2008-02-12  
Modified Date
2011-03-07  
Seq
2008-0010  

Actions

Related NVD References

Id NVD Id NVD No. Reference Actions
180 10 CVE-2008-0010 http://isec.pl/vulnerabilities/isec-0026-vmsplice_to_kernel.txt  View
181 10 CVE-2008-0010 DSA-1494  View
182 10 CVE-2008-0010 http://www.kernel.org/pub/linux/kernel/v2.6/ChangeLog-2.6.24.1  View
183 10 CVE-2008-0010 5093  View
184 10 CVE-2008-0010 20080212 CSA-L03: Linux kernel vmsplice unchecked user-pointer dereference  View
185 10 CVE-2008-0010 27704  View
186 10 CVE-2008-0010 27796  View
187 10 CVE-2008-0010 ADV-2008-0487  View
188 10 CVE-2008-0010 FEDORA-2008-1422  View
189 10 CVE-2008-0010 FEDORA-2008-1423  View

Related JVN

Id Name Title Summary Cveinfo Name Cveinfo Id Nvdinfo Name Nvdinfo Id Cvssv2 Cvssv3 Jvnurl Published Date Last Updated Date Actions
45791 JVNDB-2008-001101 Linux Kernel の copy_from_user_mmap_sem() 関数における任意のカーネルメモリへアクセスされる脆弱性 Linux Kernel の fs/splice.c における copy_from_user_mmap_sem() 関数には、参照前にユーザスペースのポインタを適切に検査をしないため、任意のカーネルメモリへアクセスされる可能性があります。 CVE-2008-0010 30123 CVE-2008-0010 10 2.1 http://jvndb.jvn.jp/ja/contents/2008/JVNDB-2008-001101.html 2008-02-12 2008-02-27 View