NVD

Id
50129  
Name
CVE-2009-2908  
Description
The d_delete function in fs/ecryptfs/inode.c in eCryptfs in the Linux kernel 2.6.31 allows local users to cause a denial of service (kernel OOPS) and possibly execute arbitrary code via unspecified vectors that cause a "negative dentry" and trigger a NULL pointer dereference, as demonstrated via a Mutt temporary directory in an eCryptfs mount.  
Reject
 
CVSS Version
2  
CVSS Score
4.9  
Severity
Medium  
CVSS Base Score
4.9  
CVSS Impact Subscore
6.9  
CVSS Exploit Subscore
3.9  
CVSS Vector
(AV:L/AC:L/Au:N/C:N/I:N/A:C)  
Pub Date
2017-01-07  
Published
2009-10-13  
Modified Date
2012-03-19  
Seq
2009-2908  

Actions

Related NVD References

Id NVD Id NVD No. Reference Actions
253757 50129 CVE-2009-2908 http://git.kernel.org/?p=linux/kernel/git/stable/linux-2.6.31.y.git;a=commit;h=afc2b6932f48f200736d3e36ad66fee0ec733136  View
253758 50129 CVE-2009-2908 [security-announce] 20100303 VMSA-2010-0004 ESX Service Console and vMA third party updates  View
253759 50129 CVE-2009-2908 oval:org.mitre.oval:def:10216  View
253760 50129 CVE-2009-2908 oval:org.mitre.oval:def:6992  View
253761 50129 CVE-2009-2908 [oss-security] 20091006 Kernel ecryptfs CVE id (CVE-2009-2908)  View
253762 50129 CVE-2009-2908 36639  View
253763 50129 CVE-2009-2908 USN-852-1  View
253764 50129 CVE-2009-2908 ADV-2010-0528  View
253765 50129 CVE-2009-2908 kernel-ecryptfs-dos(53693)  View
253766 50129 CVE-2009-2908 https://bugs.launchpad.net/ecryptfs/+bug/387073  View
253767 50129 CVE-2009-2908 https://bugzilla.redhat.com/show_bug.cgi?id=527534  View
253768 50129 CVE-2009-2908 RHSA-2009:1548  View
253769 50129 CVE-2009-2908 FEDORA-2009-10525  View

Related JVN

Id Name Title Summary Cveinfo Name Cveinfo Id Nvdinfo Name Nvdinfo Id Cvssv2 Cvssv3 Jvnurl Published Date Last Updated Date Actions
41354 JVNDB-2009-002361 Linux Kernel の d_delete 関数における任意のコードを実行される脆弱性 Linux Kernel の eCryptfs の fs/ecryptfs/inode.c の d_delete 関数には、サービス運用妨害 (DoS) の状態となるおよび任意のコードを実行される脆弱性が存在します。 CVE-2009-2908 40339 CVE-2009-2908 50129 4.9 http://jvndb.jvn.jp/ja/contents/2009/JVNDB-2009-002361.html 2009-10-13 2010-01-26 View