NVD

Id
49827  
Name
CVE-2009-2584  
Description
Off-by-one error in the options_write function in drivers/misc/sgi-gru/gruprocfs.c in the SGI GRU driver in the Linux kernel 2.6.30.2 and earlier on ia64 and x86 platforms might allow local users to overwrite arbitrary memory locations and gain privileges via a crafted count argument, which triggers a stack-based buffer overflow.  
Reject
 
CVSS Version
2  
CVSS Score
7.2  
Severity
High  
CVSS Base Score
7.2  
CVSS Impact Subscore
10  
CVSS Exploit Subscore
3.9  
CVSS Vector
(AV:L/AC:L/Au:N/C:C/I:C/A:C)  
Pub Date
2017-01-07  
Published
2009-07-23  
Modified Date
2012-03-19  
Seq
2009-2584  

Actions

Related NVD References

Id NVD Id NVD No. Reference Actions
251926 49827 CVE-2009-2584 http://grsecurity.net/~spender/exploit_demo.c  View
251927 49827 CVE-2009-2584 [linux-kernel] 20090721 [PATCH] sgi-gru: Fix kernel stack buffer overrun  View
251928 49827 CVE-2009-2584 [linux-kernel] 20090720 Re: [PATCH] sgi-gru: Fix kernel stack buffer overrun  View
251929 49827 CVE-2009-2584 35753  View
251930 49827 CVE-2009-2584 USN-852-1  View
251931 49827 CVE-2009-2584 kernel-sgigru-bo(51887)  View
251932 49827 CVE-2009-2584 http://xorl.wordpress.com/2009/07/21/linux-kernel-sgi-gru-driver-off-by-one-overwrite/  View

Related JVN

Id Name Title Summary Cveinfo Name Cveinfo Id Nvdinfo Name Nvdinfo Id Cvssv2 Cvssv3 Jvnurl Published Date Last Updated Date Actions
43829 JVNDB-2009-004836 ia64 などのプラットフォーム上の Linux kernel における任意のメモリ配置を上書きされる脆弱性 ia64 および x86 プラットフォーム上で稼動する Linux kernel の SGI GRU ドライバの drivers/misc/sgi-gru/gruprocfs.c の options_write 関数は、一つずれエラー (Off-by-one) が発生するため任意のメモリ配置を上書きされる、および権限を取得される脆弱性が存在します。 CVE-2009-2584 40015 CVE-2009-2584 49827 7.2 http://jvndb.jvn.jp/ja/contents/2009/JVNDB-2009-004836.html 2009-07-23 2012-09-25 View