CVE-2007-5500
5.8 Medium
AI Score
Confidence
Low
4.9 Medium
CVSS2
Access Vector
LOCAL
Access Complexity
LOW
Authentication
NONE
Confidentiality Impact
NONE
Integrity Impact
NONE
Availability Impact
COMPLETE
AV:L/AC:L/Au:N/C:N/I:N/A:C
0.0004 Low
EPSS
Percentile
9.6%
The wait_task_stopped function in the Linux kernel before 2.6.23.8 checks a TASK_TRACED bit instead of an exit_state value, which allows local users to cause a denial of service (machine crash) via unspecified vectors. NOTE: some of these details are obtained from third party information.
| CPE | Name | Operator | Version |
|---|---|---|---|
| linux:linux_kernel | linux linux kernel | le | 2.6.23.7 |
References
git.kernel.org/?p=linux/kernel/git/stable/linux-2.6.23.y.git%3Ba=commitdiff%3Bh=36ef66c5d137b9a31fd8c35d236fb9e26ef74f97
lists.opensuse.org/opensuse-security-announce/2008-03/msg00002.html
lists.opensuse.org/opensuse-security-announce/2008-06/msg00006.html
lists.opensuse.org/opensuse-security-announce/2008-07/msg00002.html
rhn.redhat.com/errata/RHSA-2008-0055.html
secunia.com/advisories/27664
secunia.com/advisories/27703
secunia.com/advisories/27888
secunia.com/advisories/27919
secunia.com/advisories/27922
secunia.com/advisories/28033
secunia.com/advisories/28170
secunia.com/advisories/28706
secunia.com/advisories/28748
secunia.com/advisories/28971
secunia.com/advisories/29245
secunia.com/advisories/30818
secunia.com/advisories/30962
www.debian.org/security/2007/dsa-1428
www.kernel.org/pub/linux/kernel/v2.6/ChangeLog-2.6.23.8
www.mandriva.com/security/advisories?name=MDVSA-2008:008
www.mandriva.com/security/advisories?name=MDVSA-2008:044
www.mandriva.com/security/advisories?name=MDVSA-2008:112
www.novell.com/linux/security/advisories/2007_63_kernel.html
www.securityfocus.com/bid/26477
www.ubuntu.com/usn/usn-558-1
www.ubuntu.com/usn/usn-574-1
www.ubuntu.com/usn/usn-578-1
www.vupen.com/english/advisories/2007/3902
exchange.xforce.ibmcloud.com/vulnerabilities/38547
issues.rpath.com/browse/RPL-1965
oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A9868
www.redhat.com/archives/fedora-package-announce/2007-December/msg00032.html
www.redhat.com/archives/fedora-package-announce/2007-December/msg00170.html
www.redhat.com/archives/fedora-package-announce/2007-December/msg00302.html
Social References
More
Related
5.8 Medium
AI Score
Confidence
Low
4.9 Medium
CVSS2
Access Vector
LOCAL
Access Complexity
LOW
Authentication
NONE
Confidentiality Impact
NONE
Integrity Impact
NONE
Availability Impact
COMPLETE
AV:L/AC:L/Au:N/C:N/I:N/A:C
0.0004 Low
EPSS
Percentile
9.6%