NVD

Id
2071  
Name
CVE-2008-2137  
Description
The (1) sparc_mmap_check function in arch/sparc/kernel/sys_sparc.c and the (2) sparc64_mmap_check function in arch/sparc64/kernel/sys_sparc.c, in the Linux kernel 2.4 before 2.4.36.5 and 2.6 before 2.6.25.3, omit some virtual-address range (aka span) checks when the mmap MAP_FIXED bit is not set, which allows local users to cause a denial of service (panic) via unspecified mmap calls.  
Reject
 
CVSS Version
2  
CVSS Score
4.4  
Severity
Medium  
CVSS Base Score
4.4  
CVSS Impact Subscore
6.4  
CVSS Exploit Subscore
3.4  
CVSS Vector
(AV:L/AC:M/Au:N/C:P/I:P/A:P)  
Pub Date
2017-01-03  
Published
2008-05-29  
Modified Date
2012-03-19  
Seq
2008-2137  

Actions

Related NVD References

Id NVD Id NVD No. Reference Actions
13300 2071 CVE-2008-2137 [git-commits-head] 20080507 sparc: Fix mmap VA span checking.  View
13301 2071 CVE-2008-2137 DSA-1588  View
13302 2071 CVE-2008-2137 http://www.kernel.org/pub/linux/kernel/v2.4/ChangeLog-2.4.36.5  View
13303 2071 CVE-2008-2137 http://www.kernel.org/pub/linux/kernel/v2.6/ChangeLog-2.6.25.3  View
13304 2071 CVE-2008-2137 29397  View
13305 2071 CVE-2008-2137 1020119  View
13306 2071 CVE-2008-2137 USN-625-1  View
13307 2071 CVE-2008-2137 ADV-2008-1716  View
13308 2071 CVE-2008-2137 linux-kernel-mmap-dos(42681)  View

Related JVN

Id Name Title Summary Cveinfo Name Cveinfo Id Nvdinfo Name Nvdinfo Id Cvssv2 Cvssv3 Jvnurl Published Date Last Updated Date Actions
47733 JVNDB-2008-003043 Linux kernel 内の arch/sparc/kernel/sys_sparc.c におけるサービス運用妨害 (DoS) の脆弱性 (1) Linux kernel 内の arch/sparc/kernel/sys_sparc.c の sparc_mmap_check 関数および (2) Linux kernel 内の arch/sparc64/kernel/sys_sparc.c の sparc64_mmap_check 関数は、mmap MAP_FIXED ビットが設定されていない際、仮想アドレス範囲のチェックを省略するため、サービス運用妨害 (パニック) 状態となる脆弱性が存在します。 CVE-2008-2137 32250 CVE-2008-2137 2071 4.4 http://jvndb.jvn.jp/ja/contents/2008/JVNDB-2008-003043.html 2008-05-27 2012-06-26 View