NVD

Id
48149  
Name
CVE-2009-0834  
Description
The audit_syscall_entry function in the Linux kernel 2.6.28.7 and earlier on the x86_64 platform does not properly handle (1) a 32-bit process making a 64-bit syscall or (2) a 64-bit process making a 32-bit syscall, which allows local users to bypass certain syscall audit configurations via crafted syscalls, a related issue to CVE-2009-0342 and CVE-2009-0343.  
Reject
 
CVSS Version
2  
CVSS Score
3.6  
Severity
Low  
CVSS Base Score
3.6  
CVSS Impact Subscore
4.9  
CVSS Exploit Subscore
3.9  
CVSS Vector
(AV:L/AC:L/Au:N/C:P/I:P/A:N)  
Pub Date
2017-01-07  
Published
2009-03-06  
Modified Date
2012-03-19  
Seq
2009-0834  

Actions

Related NVD References

Id NVD Id NVD No. Reference Actions
241799 48149 CVE-2009-0834 http://git.kernel.org/?p=linux/kernel/git/torvalds/linux-2.6.git;a=commit;h=ccbe495caa5e604b04d5a31d7459a6f6a76a756c  View
241800 48149 CVE-2009-0834 SUSE-SA:2009:028  View
241801 48149 CVE-2009-0834 SUSE-SA:2009:030  View
241802 48149 CVE-2009-0834 SUSE-SA:2009:031  View
241803 48149 CVE-2009-0834 [linux-kernel] 20090228 [PATCH 0/2] x86-64: 32/64 syscall arch holes  View
241804 48149 CVE-2009-0834 [linux-kernel] 20090228 [PATCH 1/2] x86-64: syscall-audit: fix 32/64 syscall hole  View
241805 48149 CVE-2009-0834 [oss-security] 20090302 CVE request: kernel: x86-64: syscall-audit: 32/64 syscall hole  View
241806 48149 CVE-2009-0834 oval:org.mitre.oval:def:8508  View
241807 48149 CVE-2009-0834 oval:org.mitre.oval:def:9600  View
241808 48149 CVE-2009-0834 RHSA-2009:0459  View
241809 48149 CVE-2009-0834 RHSA-2009:0473  View
241810 48149 CVE-2009-0834 http://scary.beasts.org/security/CESA-2009-001.html  View
241811 48149 CVE-2009-0834 http://wiki.rpath.com/Advisories:rPSA-2009-0084  View
241812 48149 CVE-2009-0834 DSA-1787  View
241813 48149 CVE-2009-0834 DSA-1794  View
241814 48149 CVE-2009-0834 DSA-1800  View
241815 48149 CVE-2009-0834 MDVSA-2009:118  View
241816 48149 CVE-2009-0834 RHSA-2009:0451  View
241817 48149 CVE-2009-0834 20090516 rPSA-2009-0084-1 kernel  View
241818 48149 CVE-2009-0834 20091120 VMSA-2009-0016 VMware vCenter and ESX update release and vMA patch release address multiple security issue in third party components  View
241819 48149 CVE-2009-0834 33951  View
241820 48149 CVE-2009-0834 1022153  View
241821 48149 CVE-2009-0834 USN-751-1  View
241822 48149 CVE-2009-0834 http://www.vmware.com/security/advisories/VMSA-2009-0016.html  View
241823 48149 CVE-2009-0834 ADV-2009-3316  View
241824 48149 CVE-2009-0834 linux-kernel-auditsyscallentry-sec-bypass(49061)  View
241825 48149 CVE-2009-0834 https://bugzilla.redhat.com/show_bug.cgi?id=487990  View

Related JVN

Id Name Title Summary Cveinfo Name Cveinfo Id Nvdinfo Name Nvdinfo Id Cvssv2 Cvssv3 Jvnurl Published Date Last Updated Date Actions
40286 JVNDB-2009-001292 Linux Kernel の audit_syscall_entry 関数におけるシステムコール監査設定を回避される脆弱性 Linux Kernel の audit_syscall_entry 関数には、64 ビットのシステムコールを作成する32ビットのプロセス、または 32 ビットのシステムコールを作成する 64 ビットのプロセスを正しく処理しないため、特定のシステムコール監査設定を回避される脆弱性が存在します。 CVE-2009-0834 38265 CVE-2009-0834 48149 7.2 http://jvndb.jvn.jp/ja/contents/2009/JVNDB-2009-001292.html 2009-03-06 2010-02-25 View