Lucene search

K
cve[email protected]CVE-2008-4307
HistoryJan 13, 2009 - 5:00 p.m.

CVE-2008-4307

2009-01-1317:00:00
CWE-362
web.nvd.nist.gov
61
cve-2008-4307
race condition
do_setlk
linux kernel
denial of service
nvd

3.7 Low

AI Score

Confidence

High

4 Medium

CVSS2

Access Vector

LOCAL

Access Complexity

HIGH

Authentication

NONE

Confidentiality Impact

NONE

Integrity Impact

NONE

Availability Impact

COMPLETE

AV:L/AC:H/Au:N/C:N/I:N/A:C

0.0004 Low

EPSS

Percentile

9.4%

Race condition in the do_setlk function in fs/nfs/file.c in the Linux kernel before 2.6.26 allows local users to cause a denial of service (crash) via vectors resulting in an interrupted RPC call that leads to a stray FL_POSIX lock, related to improper handling of a race between fcntl and close in the EINTR case.

References

3.7 Low

AI Score

Confidence

High

4 Medium

CVSS2

Access Vector

LOCAL

Access Complexity

HIGH

Authentication

NONE

Confidentiality Impact

NONE

Integrity Impact

NONE

Availability Impact

COMPLETE

AV:L/AC:H/Au:N/C:N/I:N/A:C

0.0004 Low

EPSS

Percentile

9.4%