NVD

Id
51287  
Name
CVE-2009-4141  
Description
Use-after-free vulnerability in the fasync_helper function in fs/fcntl.c in the Linux kernel before 2.6.33-rc4-git1 allows local users to gain privileges via vectors that include enabling O_ASYNC (aka FASYNC or FIOASYNC) on a locked file, and then closing this file.  
Reject
 
CVSS Version
2  
CVSS Score
7.2  
Severity
High  
CVSS Base Score
7.2  
CVSS Impact Subscore
10  
CVSS Exploit Subscore
3.9  
CVSS Vector
(AV:L/AC:L/Au:N/C:C/I:C/A:C)  
Pub Date
2017-01-07  
Published
2010-01-19  
Modified Date
2012-03-19  
Seq
2009-4141  

Actions

Related NVD References

Id NVD Id NVD No. Reference Actions
260149 51287 CVE-2009-4141 20100114 Locked fasync file descriptors can be referenced after free in >= 2.6.28  View
260150 51287 CVE-2009-4141 http://git.kernel.org/?p=linux/kernel/git/torvalds/linux-2.6.git;a=commit;h=53281b6d34d44308372d16acb7fb5327609f68b6  View
260151 51287 CVE-2009-4141 SUSE-SA:2010:010  View
260152 51287 CVE-2009-4141 http://lock.cmpxchg8b.com/5ebe2294ecd0e0f08eab7690d2a6ee69/create_elf_tables.c  View
260153 51287 CVE-2009-4141 oval:org.mitre.oval:def:7054  View
260154 51287 CVE-2009-4141 oval:org.mitre.oval:def:9201  View
260155 51287 CVE-2009-4141 http://support.avaya.com/css/P8/documents/100073666  View
260156 51287 CVE-2009-4141 http://twitter.com/taviso/statuses/7744108017  View
260157 51287 CVE-2009-4141 http://www.kernel.org/pub/linux/kernel/v2.6/snapshots/patch-2.6.33-rc4-git1.bz2  View
260158 51287 CVE-2009-4141 RHSA-2010:0161  View
260159 51287 CVE-2009-4141 37806  View
260160 51287 CVE-2009-4141 https://bugzilla.redhat.com/show_bug.cgi?id=547906  View
260161 51287 CVE-2009-4141 RHSA-2010:0046  View
260162 51287 CVE-2009-4141 RHSA-2010:0095  View

Related JVN

Id Name Title Summary Cveinfo Name Cveinfo Id Nvdinfo Name Nvdinfo Id Cvssv2 Cvssv3 Jvnurl Published Date Last Updated Date Actions
35275 JVNDB-2010-001055 Linux kernel の fasync_helper 関数における権限昇格の脆弱性 Linux kernel の fs/fcntl.c の fasync_helper 関数には、権限を取得される脆弱性が存在します。 CVE-2009-4141 41572 CVE-2009-4141 51287 7.2 http://jvndb.jvn.jp/ja/contents/2010/JVNDB-2010-001055.html 2010-01-19 2010-03-29 View