NVD

Id
9  
Name
CVE-2008-0009  
Description
The vmsplice_to_user function in fs/splice.c in the Linux kernel 2.6.22 through 2.6.24 does not validate a certain userspace pointer before dereference, which might allow local users to access arbitrary kernel memory locations.  
Reject
 
CVSS Version
2  
CVSS Score
2.1  
Severity
Low  
CVSS Base Score
2.1  
CVSS Impact Subscore
2.9  
CVSS Exploit Subscore
3.9  
CVSS Vector
(AV:L/AC:L/Au:N/C:P/I:N/A:N)  
Pub Date
2017-01-03  
Published
2008-02-12  
Modified Date
2011-03-07  
Seq
2008-0009  

Actions

Related NVD References

Id NVD Id NVD No. Reference Actions
171 9 CVE-2008-0009 http://isec.pl/vulnerabilities/isec-0026-vmsplice_to_kernel.txt  View
172 9 CVE-2008-0009 http://www.kernel.org/pub/linux/kernel/v2.6/ChangeLog-2.6.24.1  View
173 9 CVE-2008-0009 20080212 CSA-L03: Linux kernel vmsplice unchecked user-pointer dereference  View
174 9 CVE-2008-0009 27704  View
175 9 CVE-2008-0009 27799  View
176 9 CVE-2008-0009 ADV-2008-0487  View
177 9 CVE-2008-0009 https://bugzilla.redhat.com/show_bug.cgi?id=431206  View
178 9 CVE-2008-0009 FEDORA-2008-1422  View
179 9 CVE-2008-0009 FEDORA-2008-1423  View

Related JVN

Id Name Title Summary Cveinfo Name Cveinfo Id Nvdinfo Name Nvdinfo Id Cvssv2 Cvssv3 Jvnurl Published Date Last Updated Date Actions
45790 JVNDB-2008-001100 Linux Kernel の vmsplice_to_user() 関数における任意のカーネルメモリへアクセスされる脆弱性 Linux Kernel の fs/splice.c における vmsplice_to_user() 関数には、参照前にユーザスペースのポインタを適切に検査をしないため、任意のカーネルメモリへアクセスされる可能性があります。 CVE-2008-0009 30122 CVE-2008-0009 9 2.1 http://jvndb.jvn.jp/ja/contents/2008/JVNDB-2008-001100.html 2008-02-12 2008-02-27 View