CVE-2008-3535
4.9 Medium
AI Score
Confidence
High
4.9 Medium
CVSS2
Access Vector
LOCAL
Access Complexity
LOW
Authentication
NONE
Confidentiality Impact
NONE
Integrity Impact
NONE
Availability Impact
COMPLETE
AV:L/AC:L/Au:N/C:N/I:N/A:C
0.0004 Low
EPSS
Percentile
5.3%
Off-by-one error in the iov_iter_advance function in mm/filemap.c in the Linux kernel before 2.6.27-rc2 allows local users to cause a denial of service (system crash) via a certain sequence of file I/O operations with readv and writev, as demonstrated by testcases/kernel/fs/ftest/ftest03 from the Linux Test Project.
References
mirror.celinuxforum.org/gitstat/commit-detail.php?commit=94ad374a0751f40d25e22e036c37f7263569d24c
secunia.com/advisories/31881
secunia.com/advisories/32190
secunia.com/advisories/32393
www.debian.org/security/2008/dsa-1636
www.kernel.org/pub/linux/kernel/v2.6/testing/ChangeLog-2.6.27-rc2
www.lkml.org/lkml/2008/7/30/446
www.redhat.com/support/errata/RHSA-2008-0857.html
www.securityfocus.com/bid/31132
www.ubuntu.com/usn/usn-659-1
exchange.xforce.ibmcloud.com/vulnerabilities/44492
Social References
More
Related
4.9 Medium
AI Score
Confidence
High
4.9 Medium
CVSS2
Access Vector
LOCAL
Access Complexity
LOW
Authentication
NONE
Confidentiality Impact
NONE
Integrity Impact
NONE
Availability Impact
COMPLETE
AV:L/AC:L/Au:N/C:N/I:N/A:C
0.0004 Low
EPSS
Percentile
5.3%