NVD

Id
2284  
Name
CVE-2008-2365  
Description
Race condition in the ptrace and utrace support in the Linux kernel 2.6.9 through 2.6.25, as used in Red Hat Enterprise Linux (RHEL) 4, allows local users to cause a denial of service (oops) via a long series of PTRACE_ATTACH ptrace calls to another user"s process that trigger a conflict between utrace_detach and report_quiescent, related to "late ptrace_may_attach() check" and "race around &dead_engine_ops setting," a different vulnerability than CVE-2007-0771 and CVE-2008-1514. NOTE: this issue might only affect kernel versions before 2.6.16.x.  
Reject
 
CVSS Version
2  
CVSS Score
4.7  
Severity
Medium  
CVSS Base Score
4.7  
CVSS Impact Subscore
6.9  
CVSS Exploit Subscore
3.4  
CVSS Vector
(AV:L/AC:M/Au:N/C:N/I:N/A:C)  
Pub Date
2017-01-03  
Published
2008-06-30  
Modified Date
2012-03-19  
Seq
2008-2365  

Actions

Related NVD References

Id NVD Id NVD No. Reference Actions
14624 2284 CVE-2008-2365 http://git.kernel.org/?p=linux/kernel/git/stable/linux-2.6.25.y.git;a=commit;h=5ecfbae093f0c37311e89b29bfc0c9d586eace87  View
14625 2284 CVE-2008-2365 http://git.kernel.org/?p=linux/kernel/git/stable/linux-2.6.25.y.git;a=commit;h=f358166a9405e4f1d8e50d8f415c26d95505b6de  View
14626 2284 CVE-2008-2365 http://git.kernel.org/?p=linux/kernel/git/stable/linux-2.6.25.y.git;a=commit;h=f5b40e363ad6041a96e3da32281d8faa191597b9  View
14627 2284 CVE-2008-2365 [linux-kernel] 20070508 Re: [PATCH -utrace] Move utrace into task_struct  View
14628 2284 CVE-2008-2365 oval:org.mitre.oval:def:10749  View
14629 2284 CVE-2008-2365 RHSA-2008:0508  View
14630 2284 CVE-2008-2365 3965  View
14631 2284 CVE-2008-2365 http://sources.redhat.com/cgi-bin/cvsweb.cgi/~checkout~/tests/ptrace-tests/tests/late-ptrace-may-attach-check.c?cvsroot=systemtap  View
14632 2284 CVE-2008-2365 [oss-security] 20080626 CVE-2008-2365 kernel: ptrace: Crash on PTRACE_{ATTACH,DETACH} race -- affecting kernel versions <= 2.6.25  View
14633 2284 CVE-2008-2365 [oss-security] 20080714 Re: CVE-2008-2365 kernel: ptrace: Crash on PTRACE_{ATTACH,DETACH} race -- affecting kernel versions <= 2.6.25  View
14634 2284 CVE-2008-2365 29945  View
14635 2284 CVE-2008-2365 1020362  View
14636 2284 CVE-2008-2365 USN-625-1  View
14637 2284 CVE-2008-2365 linux-kernel-ptraceattach-dos(43567)  View
14638 2284 CVE-2008-2365 https://bugzilla.redhat.com/show_bug.cgi?id=449359  View

Related JVN

Id Name Title Summary Cveinfo Name Cveinfo Id Nvdinfo Name Nvdinfo Id Cvssv2 Cvssv3 Jvnurl Published Date Last Updated Date Actions
46162 JVNDB-2008-001472 Linux kernel の ptrace と utrace support における競合状態となる脆弱性 Linux kernel の ptrace と utrace support には、競合状態となる脆弱性が存在します。 CVE-2008-2365 32478 CVE-2008-2365 2284 4.7 http://jvndb.jvn.jp/ja/contents/2008/JVNDB-2008-001472.html 2008-06-25 2008-09-16 View