NVD

Id
3158  
Name
CVE-2008-3275  
Description
The (1) real_lookup and (2) __lookup_hash functions in fs/namei.c in the vfs implementation in the Linux kernel before 2.6.25.15 do not prevent creation of a child dentry for a deleted (aka S_DEAD) directory, which allows local users to cause a denial of service ("overflow" of the UBIFS orphan area) via a series of attempted file creations within deleted directories.  
Reject
 
CVSS Version
2  
CVSS Score
4.9  
Severity
Medium  
CVSS Base Score
4.9  
CVSS Impact Subscore
6.9  
CVSS Exploit Subscore
3.9  
CVSS Vector
(AV:L/AC:L/Au:N/C:N/I:N/A:C)  
Pub Date
2017-01-03  
Published
2008-08-12  
Modified Date
2012-10-29  
Seq
2008-3275  

Actions

Related NVD References

Id NVD Id NVD No. Reference Actions
20058 3158 CVE-2008-3275 http://git.kernel.org/?p=linux/kernel/git/torvalds/linux-2.6.git;a=commit;h=d70b67c8bc72ee23b55381bd6a884f4796692f77  View
20059 3158 CVE-2008-3275 http://kernel.org/pub/linux/kernel/v2.6/ChangeLog-2.6.25.15  View
20060 3158 CVE-2008-3275 SUSE-SA:2008:048  View
20061 3158 CVE-2008-3275 SUSE-SA:2008:049  View
20062 3158 CVE-2008-3275 [linux-kernel] 20080702 Is VFS behavior fine?  View
20063 3158 CVE-2008-3275 oval:org.mitre.oval:def:10744  View
20064 3158 CVE-2008-3275 oval:org.mitre.oval:def:6551  View
20065 3158 CVE-2008-3275 DSA-1630  View
20066 3158 CVE-2008-3275 DSA-1636  View
20067 3158 CVE-2008-3275 MDVSA-2008:220  View
20068 3158 CVE-2008-3275 RHSA-2008:0787  View
20069 3158 CVE-2008-3275 RHSA-2008:0857  View
20070 3158 CVE-2008-3275 RHSA-2008:0885  View
20071 3158 CVE-2008-3275 RHSA-2008:0973  View
20072 3158 CVE-2008-3275 RHSA-2009:0014  View
20073 3158 CVE-2008-3275 30647  View
20074 3158 CVE-2008-3275 1020739  View
20075 3158 CVE-2008-3275 USN-637-1  View
20076 3158 CVE-2008-3275 ADV-2008-2430  View
20077 3158 CVE-2008-3275 linux-kernel-ubifs-dos(44410)  View
20078 3158 CVE-2008-3275 https://bugzilla.redhat.com/show_bug.cgi?id=457858  View

Related JVN

Id Name Title Summary Cveinfo Name Cveinfo Id Nvdinfo Name Nvdinfo Id Cvssv2 Cvssv3 Jvnurl Published Date Last Updated Date Actions
46433 JVNDB-2008-001743 Linux Kernel の vfs 実装におけるサービス運用妨害 (DoS) の脆弱性 Linux Kernel の vfs 実装における fs/namei.c の real_lookup 関数および __lookup_hash 関数には、削除されたディレクトリに対する子 dentry の作成を防止しないため、サービス運用妨害状態 (DoS) の脆弱性が存在します。 CVE-2008-3275 33388 CVE-2008-3275 3158 4.9 http://jvndb.jvn.jp/ja/contents/2008/JVNDB-2008-001743.html 2008-08-12 2009-03-31 View