Lucene search
MitreCVE-2008-1294HistoryMay 02, 2008 - 4:05 p.m.
CVE-2008-1294
2008-05-0216:05:00
CWE-399
CWE-20
mitre
web.nvd.nist.gov
33
linux kernel
cve-2008-1294
rlimit_cpu
resource limits
nvd
CVSS2
2.1
Attack Vector
LOCAL
Attack Complexity
LOW
Authentication
NONE
Confidentiality Impact
NONE
Integrity Impact
NONE
Availability Impact
PARTIAL
AV:L/AC:L/Au:N/C:N/I:N/A:P
AI Score
7.2
Confidence
High
EPSS
0
Percentile
5.1%
Linux kernel 2.6.17, and other versions before 2.6.22, does not check when a user attempts to set RLIMIT_CPU to 0 until after the change is made, which allows local users to bypass intended resource limits.
Affected configurations
Node
linuxlinux_kernelRange≤2.6.21rc7
ORlinuxlinux_kernelMatch2.6.2
ORlinuxlinux_kernelMatch2.6.2rc1
ORlinuxlinux_kernelMatch2.6.2rc2
ORlinuxlinux_kernelMatch2.6.2rc3
ORlinuxlinux_kernelMatch2.6.16
ORlinuxlinux_kernelMatch2.6.16rc1
ORlinuxlinux_kernelMatch2.6.16rc2
ORlinuxlinux_kernelMatch2.6.16rc3
ORlinuxlinux_kernelMatch2.6.16rc4
ORlinuxlinux_kernelMatch2.6.16rc5
ORlinuxlinux_kernelMatch2.6.16rc6
ORlinuxlinux_kernelMatch2.6.16.1
ORlinuxlinux_kernelMatch2.6.16.2
ORlinuxlinux_kernelMatch2.6.16.3
ORlinuxlinux_kernelMatch2.6.16.4
ORlinuxlinux_kernelMatch2.6.16.5
ORlinuxlinux_kernelMatch2.6.16.6
ORlinuxlinux_kernelMatch2.6.16.7
ORlinuxlinux_kernelMatch2.6.16.8
ORlinuxlinux_kernelMatch2.6.16.9
ORlinuxlinux_kernelMatch2.6.16.10
ORlinuxlinux_kernelMatch2.6.16.11
ORlinuxlinux_kernelMatch2.6.16.12
ORlinuxlinux_kernelMatch2.6.16.13
ORlinuxlinux_kernelMatch2.6.16.14
ORlinuxlinux_kernelMatch2.6.16.15
ORlinuxlinux_kernelMatch2.6.16.16
ORlinuxlinux_kernelMatch2.6.16.17
ORlinuxlinux_kernelMatch2.6.16.18
ORlinuxlinux_kernelMatch2.6.16.19
ORlinuxlinux_kernelMatch2.6.16.20
ORlinuxlinux_kernelMatch2.6.16.21
ORlinuxlinux_kernelMatch2.6.16.22
ORlinuxlinux_kernelMatch2.6.16.23
ORlinuxlinux_kernelMatch2.6.16.24
ORlinuxlinux_kernelMatch2.6.16.25
ORlinuxlinux_kernelMatch2.6.16.26
ORlinuxlinux_kernelMatch2.6.16.27
ORlinuxlinux_kernelMatch2.6.16.28
ORlinuxlinux_kernelMatch2.6.16.29
ORlinuxlinux_kernelMatch2.6.16.30
ORlinuxlinux_kernelMatch2.6.16.31
ORlinuxlinux_kernelMatch2.6.16.32
ORlinuxlinux_kernelMatch2.6.16.33
ORlinuxlinux_kernelMatch2.6.16.34
ORlinuxlinux_kernelMatch2.6.16.35
ORlinuxlinux_kernelMatch2.6.16.36
ORlinuxlinux_kernelMatch2.6.16.37
ORlinuxlinux_kernelMatch2.6.16.38
ORlinuxlinux_kernelMatch2.6.16.39
ORlinuxlinux_kernelMatch2.6.16.40
ORlinuxlinux_kernelMatch2.6.16.41
ORlinuxlinux_kernelMatch2.6.16.43
ORlinuxlinux_kernelMatch2.6.16.44
ORlinuxlinux_kernelMatch2.6.16.45
ORlinuxlinux_kernelMatch2.6.16.46
ORlinuxlinux_kernelMatch2.6.16.47
ORlinuxlinux_kernelMatch2.6.16.48
ORlinuxlinux_kernelMatch2.6.16.49
ORlinuxlinux_kernelMatch2.6.16.50
ORlinuxlinux_kernelMatch2.6.16.51
ORlinuxlinux_kernelMatch2.6.16.52
ORlinuxlinux_kernelMatch2.6.16.53
ORlinuxlinux_kernelMatch2.6.16_rc7
ORlinuxlinux_kernelMatch2.6.17
ORlinuxlinux_kernelMatch2.6.17rc1
ORlinuxlinux_kernelMatch2.6.17rc2
ORlinuxlinux_kernelMatch2.6.17rc3
ORlinuxlinux_kernelMatch2.6.17rc4
ORlinuxlinux_kernelMatch2.6.17rc5
ORlinuxlinux_kernelMatch2.6.17rc6
ORlinuxlinux_kernelMatch2.6.17.1
ORlinuxlinux_kernelMatch2.6.17.2
ORlinuxlinux_kernelMatch2.6.17.3
ORlinuxlinux_kernelMatch2.6.17.4
ORlinuxlinux_kernelMatch2.6.17.5
ORlinuxlinux_kernelMatch2.6.17.6
ORlinuxlinux_kernelMatch2.6.17.7
ORlinuxlinux_kernelMatch2.6.17.8
ORlinuxlinux_kernelMatch2.6.17.9
ORlinuxlinux_kernelMatch2.6.17.10
ORlinuxlinux_kernelMatch2.6.17.11
ORlinuxlinux_kernelMatch2.6.17.12
ORlinuxlinux_kernelMatch2.6.17.13
ORlinuxlinux_kernelMatch2.6.17.14
ORlinuxlinux_kernelMatch2.6.18
ORlinuxlinux_kernelMatch2.6.18rc1
ORlinuxlinux_kernelMatch2.6.18rc2
ORlinuxlinux_kernelMatch2.6.18rc3
ORlinuxlinux_kernelMatch2.6.18rc4
ORlinuxlinux_kernelMatch2.6.18rc5
ORlinuxlinux_kernelMatch2.6.18rc6
ORlinuxlinux_kernelMatch2.6.18rc7
ORlinuxlinux_kernelMatch2.6.18.1
ORlinuxlinux_kernelMatch2.6.18.2
ORlinuxlinux_kernelMatch2.6.18.3
ORlinuxlinux_kernelMatch2.6.18.4
ORlinuxlinux_kernelMatch2.6.18.5
ORlinuxlinux_kernelMatch2.6.18.6
ORlinuxlinux_kernelMatch2.6.18.7
ORlinuxlinux_kernelMatch2.6.18.8
ORlinuxlinux_kernelMatch2.6.19
ORlinuxlinux_kernelMatch2.6.19rc1
ORlinuxlinux_kernelMatch2.6.19rc2
ORlinuxlinux_kernelMatch2.6.19rc3
ORlinuxlinux_kernelMatch2.6.19rc4
ORlinuxlinux_kernelMatch2.6.19.1
ORlinuxlinux_kernelMatch2.6.19.2
ORlinuxlinux_kernelMatch2.6.19.3
ORlinuxlinux_kernelMatch2.6.20
ORlinuxlinux_kernelMatch2.6.20rc2
ORlinuxlinux_kernelMatch2.6.20.1
ORlinuxlinux_kernelMatch2.6.20.2
ORlinuxlinux_kernelMatch2.6.20.3
ORlinuxlinux_kernelMatch2.6.20.4
ORlinuxlinux_kernelMatch2.6.20.5
ORlinuxlinux_kernelMatch2.6.20.6
ORlinuxlinux_kernelMatch2.6.20.7
ORlinuxlinux_kernelMatch2.6.20.8
ORlinuxlinux_kernelMatch2.6.20.9
ORlinuxlinux_kernelMatch2.6.20.10
ORlinuxlinux_kernelMatch2.6.20.11
ORlinuxlinux_kernelMatch2.6.20.12
ORlinuxlinux_kernelMatch2.6.20.13
ORlinuxlinux_kernelMatch2.6.20.14
ORlinuxlinux_kernelMatch2.6.20.15
ORlinuxlinux_kernelMatch2.6.21
ORlinuxlinux_kernelMatch2.6.21git1
ORlinuxlinux_kernelMatch2.6.21git2
ORlinuxlinux_kernelMatch2.6.21git3
ORlinuxlinux_kernelMatch2.6.21git4
ORlinuxlinux_kernelMatch2.6.21git5
ORlinuxlinux_kernelMatch2.6.21git6
ORlinuxlinux_kernelMatch2.6.21git7
ORlinuxlinux_kernelMatch2.6.21rc3
ORlinuxlinux_kernelMatch2.6.21rc4
ORlinuxlinux_kernelMatch2.6.21rc5
ORlinuxlinux_kernelMatch2.6.21rc6
ORlinuxlinux_kernelMatch2.6.21.1
ORlinuxlinux_kernelMatch2.6.21.2
ORlinuxlinux_kernelMatch2.6.21.3
ORlinuxlinux_kernelMatch2.6.21.4
| Vendor | Product | Version | CPE |
|---|---|---|---|
| linux | linux_kernel | 2.6.20.13 | cpe:/o:linux:linux_kernel:2.6.20.13::: |
| linux | linux_kernel | 2.6.16.46 | cpe:/o:linux:linux_kernel:2.6.16.46::: |
| linux | linux_kernel | 2.6.19 | cpe:/o:linux:linux_kernel:2.6.19:rc2:: |
| linux | linux_kernel | 2.6.16.2 | cpe:/o:linux:linux_kernel:2.6.16.2::: |
| linux | linux_kernel | 2.6.20.7 | cpe:/o:linux:linux_kernel:2.6.20.7::: |
| linux | linux_kernel | 2.6.17.2 | cpe:/o:linux:linux_kernel:2.6.17.2::: |
| linux | linux_kernel | 2.6.16 | cpe:/o:linux:linux_kernel:2.6.16:rc6:: |
| linux | linux_kernel | 2.6.18 | cpe:/o:linux:linux_kernel:2.6.18:rc7:: |
| linux | linux_kernel | 2.6.19 | cpe:/o:linux:linux_kernel:2.6.19::: |
| linux | linux_kernel | 2.6.17.7 | cpe:/o:linux:linux_kernel:2.6.17.7::: |
References
bugs.gentoo.org/show_bug.cgi?id=215000
git.kernel.org/?p=linux/kernel/git/torvalds/linux-2.6.git%3Ba=commitdiff%3Bh=9926e4c74300c4b31dee007298c6475d33369df0
kernel.org/pub/linux/kernel/v2.6/ChangeLog-2.6.22
secunia.com/advisories/30018
secunia.com/advisories/30769
secunia.com/advisories/31341
www.debian.org/security/2008/dsa-1565
www.redhat.com/support/errata/RHSA-2008-0612.html
www.securityfocus.com/bid/29004
www.ubuntu.com/usn/usn-618-1
exchange.xforce.ibmcloud.com/vulnerabilities/42145
oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A10974
Related
prion
prion
Design/Logic Flaw
2008-05-02 16:05:00
veracode
veracode
Denial Of Service (DoS)
2020-04-10 00:25:18
cvelist
cvelist
CVE-2008-1294
2008-05-02 16:00:00
ubuntucve
ubuntucve
CVE-2008-1294
2008-05-02 00:00:00
nvd
nvd
CVE-2008-1294
2008-05-02 16:05:00
nessus
nessus
Scientific Linux Security Update : kernel on SL5.x i386/x86_64
2012-08-01 00:00:00
CentOS 5 : kernel (CESA-2008:0612)
2010-01-06 00:00:00
RHEL 5 : kernel (RHSA-2008:0612)
2008-08-05 00:00:00
redhat
redhat
(RHSA-2008:0612) Important: kernel security and bug fix update
2008-08-04 00:00:00
centos
centos
kernel security update
2008-08-06 09:53:20
osv
osv
linux-2.6 - several vulnerabilities
2008-05-01 00:00:00
openvas
openvas
Debian Security Advisory DSA 1565-1 (linux-2.6)
2008-05-12 00:00:00
Oracle: Security Advisory (ELSA-2008-0612)
2015-10-08 00:00:00
RedHat Update for kernel RHSA-2008:0612-01
2009-03-06 00:00:00
securityvulns
securityvulns
Linux multiple security vulnerabilities
2008-05-02 00:00:00
debian
debian
oraclelinux
oraclelinux
kernel security and bug fix update
2008-08-05 00:00:00
suse
suse
remote denial of service in kernel
2009-04-03 14:20:16
ubuntu
ubuntu
Linux kernel vulnerabilities
2008-06-19 00:00:00
CVSS2
2.1
Attack Vector
LOCAL
Attack Complexity
LOW
Authentication
NONE
Confidentiality Impact
NONE
Integrity Impact
NONE
Availability Impact
PARTIAL
AV:L/AC:L/Au:N/C:N/I:N/A:P
AI Score
7.2
Confidence
High
EPSS
0
Percentile
5.1%
Related for CVE-2008-1294