CVE-2008-5029
5.2 Medium
AI Score
Confidence
High
4.9 Medium
CVSS2
Access Vector
LOCAL
Access Complexity
LOW
Authentication
NONE
Confidentiality Impact
NONE
Integrity Impact
NONE
Availability Impact
COMPLETE
AV:L/AC:L/Au:N/C:N/I:N/A:C
0.0004 Low
EPSS
Percentile
9.3%
The __scm_destroy function in net/core/scm.c in the Linux kernel 2.6.27.4, 2.6.26, and earlier makes indirect recursive calls to itself through calls to the fput function, which allows local users to cause a denial of service (panic) via vectors related to sending an SCM_RIGHTS message through a UNIX domain socket and closing file descriptors.
References
archives.neohapsis.com/archives/bugtraq/2009-01/0006.html
darkircop.org/unix.c
kernel.org/pub/linux/kernel/v2.4/ChangeLog-2.4.36.9
lists.opensuse.org/opensuse-security-announce/2008-12/msg00001.html
lists.opensuse.org/opensuse-security-announce/2009-01/msg00006.html
lists.opensuse.org/opensuse-security-announce/2009-01/msg00010.html
marc.info/?l=linux-netdev&m=122593044330973&w=2
secunia.com/advisories/32918
secunia.com/advisories/32998
secunia.com/advisories/33180
secunia.com/advisories/33556
secunia.com/advisories/33586
secunia.com/advisories/33623
secunia.com/advisories/33641
secunia.com/advisories/33704
securityreason.com/securityalert/4573
www.debian.org/security/2008/dsa-1681
www.debian.org/security/2008/dsa-1687
www.mandriva.com/security/advisories?name=MDVSA-2008:234
www.openwall.com/lists/oss-security/2008/11/06/1
www.redhat.com/support/errata/RHSA-2009-0009.html
www.redhat.com/support/errata/RHSA-2009-0014.html
www.redhat.com/support/errata/RHSA-2009-0225.html
www.securityfocus.com/archive/1/499700/100/0/threaded
www.securityfocus.com/archive/1/499744/100/0/threaded
www.securityfocus.com/archive/1/512019/100/0/threaded
www.securityfocus.com/bid/32154
www.securityfocus.com/bid/33079
www.securitytracker.com/id?1021292
www.securitytracker.com/id?1021511
www.ubuntu.com/usn/usn-679-1
bugzilla.redhat.com/show_bug.cgi?id=470201
exchange.xforce.ibmcloud.com/vulnerabilities/46538
oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A11694
oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A9558
rhn.redhat.com/errata/RHSA-2009-1550.html
Social References
More
Related
5.2 Medium
AI Score
Confidence
High
4.9 Medium
CVSS2
Access Vector
LOCAL
Access Complexity
LOW
Authentication
NONE
Confidentiality Impact
NONE
Integrity Impact
NONE
Availability Impact
COMPLETE
AV:L/AC:L/Au:N/C:N/I:N/A:C
0.0004 Low
EPSS
Percentile
9.3%