CVE-2007-6716
5.5 Medium
CVSS3
Attack Vector
LOCAL
Attack Complexity
LOW
Privileges Required
LOW
User Interaction
NONE
Scope
UNCHANGED
Confidentiality Impact
NONE
Integrity Impact
NONE
Availability Impact
HIGH
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H
4.9 Medium
AI Score
Confidence
High
4.9 Medium
CVSS2
Access Vector
LOCAL
Access Complexity
LOW
Authentication
NONE
Confidentiality Impact
NONE
Integrity Impact
NONE
Availability Impact
COMPLETE
AV:L/AC:L/Au:N/C:N/I:N/A:C
0.0004 Low
EPSS
Percentile
11.9%
fs/direct-io.c in the dio subsystem in the Linux kernel before 2.6.23 does not properly zero out the dio struct, which allows local users to cause a denial of service (OOPS), as demonstrated by a certain fio test.
References
git.kernel.org/?p=linux/kernel/git/torvalds/linux-2.6.git%3Ba=commit%3Bh=848c4dd5153c7a0de55470ce99a8e13a63b4703f
lists.opensuse.org/opensuse-security-announce/2008-10/msg00000.html
lists.opensuse.org/opensuse-security-announce/2008-10/msg00007.html
lists.opensuse.org/opensuse-security-announce/2008-10/msg00008.html
lists.opensuse.org/opensuse-security-announce/2008-11/msg00001.html
lists.opensuse.org/opensuse-security-announce/2008-12/msg00000.html
lkml.org/lkml/2007/7/30/448
rhn.redhat.com/errata/RHSA-2008-0972.html
secunia.com/advisories/32023
secunia.com/advisories/32103
secunia.com/advisories/32237
secunia.com/advisories/32356
secunia.com/advisories/32370
secunia.com/advisories/32393
secunia.com/advisories/32759
secunia.com/advisories/32799
www.debian.org/security/2008/dsa-1653
www.kernel.org/pub/linux/kernel/v2.6/ChangeLog-2.6.23
www.mandriva.com/security/advisories?name=MDVSA-2008:220
www.openwall.com/lists/oss-security/2008/09/04/1
www.redhat.com/support/errata/RHSA-2008-0885.html
www.securityfocus.com/bid/31515
www.ubuntu.com/usn/usn-659-1
bugzilla.redhat.com/show_bug.cgi?id=461082
oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A10053
Social References
More
Related
5.5 Medium
CVSS3
Attack Vector
LOCAL
Attack Complexity
LOW
Privileges Required
LOW
User Interaction
NONE
Scope
UNCHANGED
Confidentiality Impact
NONE
Integrity Impact
NONE
Availability Impact
HIGH
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H
4.9 Medium
AI Score
Confidence
High
4.9 Medium
CVSS2
Access Vector
LOCAL
Access Complexity
LOW
Authentication
NONE
Confidentiality Impact
NONE
Integrity Impact
NONE
Availability Impact
COMPLETE
AV:L/AC:L/Au:N/C:N/I:N/A:C
0.0004 Low
EPSS
Percentile
11.9%