NVD

Id
50068  
Name
CVE-2009-2846  
Description
The eisa_eeprom_read function in the parisc isa-eeprom component (drivers/parisc/eisa_eeprom.c) in the Linux kernel before 2.6.31-rc6 allows local users to access restricted memory via a negative ppos argument, which bypasses a check that assumes that ppos is positive and causes an out-of-bounds read in the readb function.  
Reject
 
CVSS Version
2  
CVSS Score
7.8  
Severity
High  
CVSS Base Score
7.8  
CVSS Impact Subscore
6.9  
CVSS Exploit Subscore
10  
CVSS Vector
(AV:N/AC:L/Au:N/C:C/I:N/A:N)  
Pub Date
2017-01-07  
Published
2009-08-18  
Modified Date
2012-03-19  
Seq
2009-2846  

Actions

Related NVD References

Id NVD Id NVD No. Reference Actions
253325 50068 CVE-2009-2846 http://git.kernel.org/?p=linux/kernel/git/torvalds/linux-2.6.git;a=commitdiff;h=6b4dbcd86a9d464057fcc7abe4d0574093071fcc  View
253326 50068 CVE-2009-2846 MDVSA-2010:198  View
253327 50068 CVE-2009-2846 [oss-security] 20090810 CVE request: kernel: parisc: isa-eeprom missing lower bound check  View
253328 50068 CVE-2009-2846 [oss-security] 20090818 Re: CVE request: kernel: parisc: isa-eeprom missing lower bound check  View
253329 50068 CVE-2009-2846 USN-852-1  View
253330 50068 CVE-2009-2846 kernel-eisaeepromread-sec-bypass(52906)  View

Related JVN

Id Name Title Summary Cveinfo Name Cveinfo Id Nvdinfo Name Nvdinfo Id Cvssv2 Cvssv3 Jvnurl Published Date Last Updated Date Actions
43872 JVNDB-2009-004879 Linux kernel の drivers/parisc/eisa_eeprom.c における制限されたメモリにアクセスされる脆弱性 Linux kernel の parisc isa-eeprom コンポーネント (drivers/parisc/eisa_eeprom.c) の eisa_eeprom_read 関数には、制限されたメモリにアクセスされる脆弱性が存在します。 CVE-2009-2846 40277 CVE-2009-2846 50068 7.8 http://jvndb.jvn.jp/ja/contents/2009/JVNDB-2009-004879.html 2009-07-20 2012-09-25 View