NVD

Id
6987  
Name
CVE-2008-7256  
Description
mm/shmem.c in the Linux kernel before 2.6.28-rc8, when strict overcommit is enabled and CONFIG_SECURITY is disabled, does not properly handle the export of shmemfs objects by knfsd, which allows attackers to cause a denial of service (NULL pointer dereference and knfsd crash) or possibly have unspecified other impact via unknown vectors. NOTE: this vulnerability exists because of an incomplete fix for CVE-2010-1643.  
Reject
 
CVSS Version
2  
CVSS Score
1.2  
Severity
Low  
CVSS Base Score
1.2  
CVSS Impact Subscore
2.9  
CVSS Exploit Subscore
1.9  
CVSS Vector
(AV:L/AC:H/Au:N/C:N/I:N/A:P)  
Pub Date
2017-01-03  
Published
2010-06-03  
Modified Date
2012-03-19  
Seq
2008-7256  

Actions

Related NVD References

Id NVD Id NVD No. Reference Actions
39449 6987 CVE-2008-7256 http://git.kernel.org/?p=linux/kernel/git/torvalds/linux-2.6.git;a=commit;h=1b79cd04fab80be61dcd2732e2423aafde9a4c1c  View
39450 6987 CVE-2008-7256 http://www.kernel.org/pub/linux/kernel/v2.6/testing/v2.6.28/ChangeLog-2.6.28-rc8  View
39451 6987 CVE-2008-7256 MDVSA-2010:198  View
39452 6987 CVE-2008-7256 [oss-security] 20100527 Re: CVE request - kernel: nfsd: fix vm overcommit crash  View
39453 6987 CVE-2008-7256 kernel-shmem-dos(59224)  View
39454 6987 CVE-2008-7256 https://bugzilla.redhat.com/show_bug.cgi?id=595970  View

Related JVN

Id Name Title Summary Cveinfo Name Cveinfo Id Nvdinfo Name Nvdinfo Id Cvssv2 Cvssv3 Jvnurl Published Date Last Updated Date Actions
49944 JVNDB-2008-005254 Linux kernel の mm/shmem.c におけるサービス運用妨害 (DoS) の脆弱性 Linux kernel の mm/shmem.c は、strict overcommit が有効およびCONFIG_SECURITY が無効になっている際、knfsd によって shmemfs オブジェクトの外部出力を適切に処理しないため、サービス運用妨害 (NULL ポインタデリファレンスおよび knfsd クラッシュ) 状態となるなど、不特定の影響を受ける脆弱性が存在します。 CVE-2008-7256 37369 CVE-2008-7256 6987 1.2 http://jvndb.jvn.jp/ja/contents/2008/JVNDB-2008-005254.html 2008-12-02 2012-09-25 View