NVD

Id
2706  
Name
CVE-2008-2812  
Description
The Linux kernel before 2.6.25.10 does not properly perform tty operations, which allows local users to cause a denial of service (system crash) or possibly gain privileges via vectors involving NULL pointer dereference of function pointers in (1) hamradio/6pack.c, (2) hamradio/mkiss.c, (3) irda/irtty-sir.c, (4) ppp_async.c, (5) ppp_synctty.c, (6) slip.c, (7) wan/x25_asy.c, and (8) wireless/strip.c in drivers/net/.  
Reject
 
CVSS Version
2  
CVSS Score
7.2  
Severity
High  
CVSS Base Score
7.2  
CVSS Impact Subscore
10  
CVSS Exploit Subscore
3.9  
CVSS Vector
(AV:L/AC:L/Au:N/C:C/I:C/A:C)  
Pub Date
2017-01-03  
Published
2008-07-08  
Modified Date
2012-11-26  
Seq
2008-2812  

Actions

Related NVD References

Id NVD Id NVD No. Reference Actions
17299 2706 CVE-2008-2812 http://git.kernel.org/?p=linux/kernel/git/stable/linux-2.6.25.y.git;a=commitdiff;h=2a739dd53ad7ee010ae6e155438507f329dce788  View
17300 2706 CVE-2008-2812 http://kernel.org/pub/linux/kernel/v2.6/ChangeLog-2.6.25.10  View
17301 2706 CVE-2008-2812 SUSE-SA:2008:035  View
17302 2706 CVE-2008-2812 SUSE-SA:2008:037  View
17303 2706 CVE-2008-2812 SUSE-SA:2008:038  View
17304 2706 CVE-2008-2812 SUSE-SA:2008:047  View
17305 2706 CVE-2008-2812 SUSE-SA:2008:049  View
17306 2706 CVE-2008-2812 SUSE-SA:2008:052  View
17307 2706 CVE-2008-2812 SUSE-SR:2008:025  View
17308 2706 CVE-2008-2812 oval:org.mitre.oval:def:11632  View
17309 2706 CVE-2008-2812 oval:org.mitre.oval:def:6633  View
17310 2706 CVE-2008-2812 http://support.avaya.com/elmodocs2/security/ASA-2008-365.htm  View
17311 2706 CVE-2008-2812 DSA-1630  View
17312 2706 CVE-2008-2812 [oss-security] 20080703 2.6.25.10 security fixes, please assign CVE id  View
17313 2706 CVE-2008-2812 RHSA-2008:0612  View
17314 2706 CVE-2008-2812 RHSA-2008:0665  View
17315 2706 CVE-2008-2812 RHSA-2008:0973  View
17316 2706 CVE-2008-2812 30076  View
17317 2706 CVE-2008-2812 USN-637-1  View
17318 2706 CVE-2008-2812 ADV-2008-2063  View
17319 2706 CVE-2008-2812 kernel-tty-dos(43687)  View

Related JVN

Id Name Title Summary Cveinfo Name Cveinfo Id Nvdinfo Name Nvdinfo Id Cvssv2 Cvssv3 Jvnurl Published Date Last Updated Date Actions
46270 JVNDB-2008-001580 Linux kernel の tty オペレーションにおける権限昇格の脆弱性 Linux Kernel には、tty オペレーションの取り扱いに不備があり、driver/net/ の hamradio/6pack.c, hamradio/mkiss.c, irda/irtty-sir.c, ppp_async.c, ppp_synctty.c, slip.c, wan/x25_asy.c, wireless/strip.c の関数ポインタで NULL ポインタを参照することによる、権限昇格の脆弱性が存在します。 CVE-2008-2812 32925 CVE-2008-2812 2706 7.2 http://jvndb.jvn.jp/ja/contents/2008/JVNDB-2008-001580.html 2008-07-08 2009-03-31 View