NVD

Id
4135  
Name
CVE-2008-4307  
Description
Race condition in the do_setlk function in fs/nfs/file.c in the Linux kernel before 2.6.26 allows local users to cause a denial of service (crash) via vectors resulting in an interrupted RPC call that leads to a stray FL_POSIX lock, related to improper handling of a race between fcntl and close in the EINTR case.  
Reject
 
CVSS Version
2  
CVSS Score
4  
Severity
Medium  
CVSS Base Score
4  
CVSS Impact Subscore
6.9  
CVSS Exploit Subscore
1.9  
CVSS Vector
(AV:L/AC:H/Au:N/C:N/I:N/A:C)  
Pub Date
2017-01-03  
Published
2009-01-13  
Modified Date
2012-03-19  
Seq
2008-4307  

Actions

Related NVD References

Id NVD Id NVD No. Reference Actions
26355 4135 CVE-2008-4307 http://git.kernel.org/?p=linux/kernel/git/stable/linux-2.6.27.y.git;a=commit;h=c4d7c402b788b73dc24f1e54a57f89d3dc5eb7bc  View
26356 4135 CVE-2008-4307 [oss-security] 20090113 CVE-2008-4307 kernel: local denial of service in locks_remove_flock  View
26357 4135 CVE-2008-4307 oval:org.mitre.oval:def:7728  View
26358 4135 CVE-2008-4307 oval:org.mitre.oval:def:9233  View
26359 4135 CVE-2008-4307 RHSA-2009:0459  View
26360 4135 CVE-2008-4307 RHSA-2009:0473  View
26361 4135 CVE-2008-4307 DSA-1787  View
26362 4135 CVE-2008-4307 DSA-1794  View
26363 4135 CVE-2008-4307 http://www.kernel.org/pub/linux/kernel/v2.6/ChangeLog-2.6.26  View
26364 4135 CVE-2008-4307 RHSA-2009:0451  View
26365 4135 CVE-2008-4307 20091120 VMSA-2009-0016 VMware vCenter and ESX update release and vMA patch release address multiple security issue in third party components  View
26366 4135 CVE-2008-4307 USN-751-1  View
26367 4135 CVE-2008-4307 http://www.vmware.com/security/advisories/VMSA-2009-0016.html  View
26368 4135 CVE-2008-4307 ADV-2009-3316  View
26369 4135 CVE-2008-4307 https://bugzilla.redhat.com/show_bug.cgi?id=456282  View

Related JVN

Id Name Title Summary Cveinfo Name Cveinfo Id Nvdinfo Name Nvdinfo Id Cvssv2 Cvssv3 Jvnurl Published Date Last Updated Date Actions
40285 JVNDB-2009-001291 Linux Kernel の do_setlk 関数における競合状態の脆弱性 Linux Kernel の fs/nfs/file.c にある do_setlk 関数には、RPC コールが中断されることにより FL_POSIX ロックとなる競合状態の脆弱性が存在します。 CVE-2008-4307 34420 CVE-2008-4307 4135 4 http://jvndb.jvn.jp/ja/contents/2009/JVNDB-2009-001291.html 2009-01-13 2009-06-22 View