Lucene search

K
cveRedhatCVE-2007-0997
HistorySep 18, 2007 - 7:17 p.m.

CVE-2007-0997

2007-09-1819:17:00
CWE-362
redhat
web.nvd.nist.gov
28
cve-2007-0997
linux kernel
race condition
sys_tee
dos
info disclosure
privilege escalation

CVSS2

6.9

Attack Vector

LOCAL

Attack Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

COMPLETE

Integrity Impact

COMPLETE

Availability Impact

COMPLETE

AV:L/AC:M/Au:N/C:C/I:C/A:C

AI Score

6.4

Confidence

Low

EPSS

0

Percentile

5.1%

Race condition in the tee (sys_tee) system call in the Linux kernel 2.6.17 through 2.6.17.6 might allow local users to cause a denial of service (system crash), obtain sensitive information (kernel memory contents), or gain privileges via unspecified vectors related to a potentially dropped ipipe lock during a race between two pipe readers.

Affected configurations

Nvd
Node
linuxlinux_kernelMatch2.6.17
OR
linuxlinux_kernelMatch2.6.17rc1
OR
linuxlinux_kernelMatch2.6.17rc2
OR
linuxlinux_kernelMatch2.6.17rc3
OR
linuxlinux_kernelMatch2.6.17rc4
OR
linuxlinux_kernelMatch2.6.17rc5
OR
linuxlinux_kernelMatch2.6.17rc6
OR
linuxlinux_kernelMatch2.6.17.1
OR
linuxlinux_kernelMatch2.6.17.2
OR
linuxlinux_kernelMatch2.6.17.3
OR
linuxlinux_kernelMatch2.6.17.4
OR
linuxlinux_kernelMatch2.6.17.5
OR
linuxlinux_kernelMatch2.6.17.6
VendorProductVersionCPE
linuxlinux_kernel2.6.17cpe:2.3:o:linux:linux_kernel:2.6.17:*:*:*:*:*:*:*
linuxlinux_kernel2.6.17cpe:2.3:o:linux:linux_kernel:2.6.17:rc1:*:*:*:*:*:*
linuxlinux_kernel2.6.17cpe:2.3:o:linux:linux_kernel:2.6.17:rc2:*:*:*:*:*:*
linuxlinux_kernel2.6.17cpe:2.3:o:linux:linux_kernel:2.6.17:rc3:*:*:*:*:*:*
linuxlinux_kernel2.6.17cpe:2.3:o:linux:linux_kernel:2.6.17:rc4:*:*:*:*:*:*
linuxlinux_kernel2.6.17cpe:2.3:o:linux:linux_kernel:2.6.17:rc5:*:*:*:*:*:*
linuxlinux_kernel2.6.17cpe:2.3:o:linux:linux_kernel:2.6.17:rc6:*:*:*:*:*:*
linuxlinux_kernel2.6.17.1cpe:2.3:o:linux:linux_kernel:2.6.17.1:*:*:*:*:*:*:*
linuxlinux_kernel2.6.17.2cpe:2.3:o:linux:linux_kernel:2.6.17.2:*:*:*:*:*:*:*
linuxlinux_kernel2.6.17.3cpe:2.3:o:linux:linux_kernel:2.6.17.3:*:*:*:*:*:*:*
Rows per page:
1-10 of 131

CVSS2

6.9

Attack Vector

LOCAL

Attack Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

COMPLETE

Integrity Impact

COMPLETE

Availability Impact

COMPLETE

AV:L/AC:M/Au:N/C:C/I:C/A:C

AI Score

6.4

Confidence

Low

EPSS

0

Percentile

5.1%

Related for CVE-2007-0997