CVE-2008-1514
4.8 Medium
AI Score
Confidence
High
4.9 Medium
CVSS2
Access Vector
LOCAL
Access Complexity
LOW
Authentication
NONE
Confidentiality Impact
NONE
Integrity Impact
NONE
Availability Impact
COMPLETE
AV:L/AC:L/Au:N/C:N/I:N/A:C
0.0004 Low
EPSS
Percentile
9.4%
arch/s390/kernel/ptrace.c in Linux kernel 2.6.9, and other versions before 2.6.27-rc6, on s390 platforms allows local users to cause a denial of service (kernel panic) via the user-area-padding test from the ptrace testsuite in 31-bit mode, which triggers an invalid dereference.
References
git.kernel.org/?p=linux/kernel/git/torvalds/linux-2.6.git%3Ba=commit%3Bh=3d6e48f43340343d97839eadb1ab7b6a3ea98797
kernel.org/pub/linux/kernel/v2.6/ChangeLog-2.6.26.6
kernel.org/pub/linux/kernel/v2.6/testing/ChangeLog-2.6.27-rc6
lists.opensuse.org/opensuse-security-announce/2008-10/msg00007.html
rhn.redhat.com/errata/RHSA-2008-0972.html
secunia.com/advisories/31826
secunia.com/advisories/32237
secunia.com/advisories/32315
secunia.com/advisories/32356
secunia.com/advisories/32799
sourceware.org/systemtap/wiki/utrace/tests
www.debian.org/security/2008/dsa-1653
www.debian.org/security/2008/dsa-1655
www.securityfocus.com/bid/31177
bugzilla.redhat.com/show_bug.cgi?id=438147
exchange.xforce.ibmcloud.com/vulnerabilities/41501
oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A9555
Social References
More
Related
4.8 Medium
AI Score
Confidence
High
4.9 Medium
CVSS2
Access Vector
LOCAL
Access Complexity
LOW
Authentication
NONE
Confidentiality Impact
NONE
Integrity Impact
NONE
Availability Impact
COMPLETE
AV:L/AC:L/Au:N/C:N/I:N/A:C
0.0004 Low
EPSS
Percentile
9.4%