NVD

Id
49933  
Name
CVE-2009-2692  
Description
The Linux kernel 2.6.0 through 2.6.30.4, and 2.4.4 through 2.4.37.4, does not initialize all function pointers for socket operations in proto_ops structures, which allows local users to trigger a NULL pointer dereference and gain privileges by using mmap to map page zero, placing arbitrary code on this page, and then invoking an unavailable operation, as demonstrated by the sendpage operation (sock_sendpage function) on a PF_PPPOX socket.  
Reject
 
CVSS Version
2  
CVSS Score
7.2  
Severity
High  
CVSS Base Score
7.2  
CVSS Impact Subscore
10  
CVSS Exploit Subscore
3.9  
CVSS Vector
(AV:L/AC:L/Au:N/C:C/I:C/A:C)  
Pub Date
2017-01-07  
Published
2009-08-14  
Modified Date
2012-10-22  
Seq
2009-2692  

Actions

Related NVD References

Id NVD Id NVD No. Reference Actions
252600 49933 CVE-2009-2692 20090813 Linux NULL pointer dereference due to incorrect proto_ops initializations  View
252601 49933 CVE-2009-2692 http://blog.cr0.org/2009/08/linux-null-pointer-dereference-due-to.html  View
252602 49933 CVE-2009-2692 http://git.kernel.org/?p=linux/kernel/git/stable/linux-2.4.37.y.git;a=commit;h=c18d0fe535a73b219f960d1af3d0c264555a12e3  View
252603 49933 CVE-2009-2692 http://git.kernel.org/?p=linux/kernel/git/torvalds/linux-2.6.git;a=commit;h=e694958388c50148389b0e9b9e9e8945cf0f1b98  View
252604 49933 CVE-2009-2692 http://grsecurity.net/~spender/wunderbar_emporium.tgz  View
252605 49933 CVE-2009-2692 SUSE-SR:2009:015  View
252606 49933 CVE-2009-2692 oval:org.mitre.oval:def:11526  View
252607 49933 CVE-2009-2692 oval:org.mitre.oval:def:11591  View
252608 49933 CVE-2009-2692 oval:org.mitre.oval:def:8657  View
252609 49933 CVE-2009-2692 RHSA-2009:1222  View
252610 49933 CVE-2009-2692 RHSA-2009:1223  View
252611 49933 CVE-2009-2692 http://support.avaya.com/css/P8/documents/100067254  View
252612 49933 CVE-2009-2692 http://wiki.rpath.com/wiki/Advisories:rPSA-2009-0121  View
252613 49933 CVE-2009-2692 DSA-1865  View
252614 49933 CVE-2009-2692 19933  View
252615 49933 CVE-2009-2692 http://www.kernel.org/pub/linux/kernel/v2.4/ChangeLog-2.4.37.5  View
252616 49933 CVE-2009-2692 http://www.kernel.org/pub/linux/kernel/v2.6/ChangeLog-2.6.30.5  View
252617 49933 CVE-2009-2692 http://www.kernel.org/pub/linux/kernel/v2.6/testing/ChangeLog-2.6.31-rc6  View
252618 49933 CVE-2009-2692 MDVSA-2009:233  View
252619 49933 CVE-2009-2692 [oss-security] 20090814 CVE-2009-2692 kernel: uninit op in SOCKOPS_WRAP() leads to privesc  View
252620 49933 CVE-2009-2692 RHSA-2009:1233  View
252621 49933 CVE-2009-2692 20090813 Linux NULL pointer dereference due to incorrect proto_ops initializations  View
252622 49933 CVE-2009-2692 20090818 rPSA-2009-0121-1 kernel open-vm-tools  View
252623 49933 CVE-2009-2692 20091120 VMSA-2009-0016 VMware vCenter and ESX update release and vMA patch release address multiple security issue in third party components  View
252624 49933 CVE-2009-2692 20100625 VMSA-2010-0010 ESX 3.5 third party update for Service Console kernel  View
252625 49933 CVE-2009-2692 36038  View
252626 49933 CVE-2009-2692 http://www.vmware.com/security/advisories/VMSA-2009-0016.html  View
252627 49933 CVE-2009-2692 ADV-2009-2272  View
252628 49933 CVE-2009-2692 ADV-2009-3316  View
252629 49933 CVE-2009-2692 http://zenthought.org/content/file/android-root-2009-08-16-source  View
252630 49933 CVE-2009-2692 https://bugzilla.redhat.com/show_bug.cgi?id=516949  View
252631 49933 CVE-2009-2692 https://issues.rpath.com/browse/RPL-3103  View

Related JVN

Id Name Title Summary Cveinfo Name Cveinfo Id Nvdinfo Name Nvdinfo Id Cvssv2 Cvssv3 Jvnurl Published Date Last Updated Date Actions
41049 JVNDB-2009-002056 Linux kernel における proto_ops 構造体の初期化処理に関する権限昇格の脆弱性 Linux kernel には、proto_ops 構造体の初期化処理に不備が存在するため、mmap の page zero をマッピングし、任意のコードを書き込むことで権限を取得可能な脆弱性が存在します。 CVE-2009-2692 40123 CVE-2009-2692 49933 7.2 http://jvndb.jvn.jp/ja/contents/2009/JVNDB-2009-002056.html 2009-08-14 2010-02-17 View