CVE-2008-5300

2008-12-0117:30:00

CWE-399

[email protected]

web.nvd.nist.gov

linux

kernel

2.6.28

denial of service

cve-2008-5300

nvd

CVSS2

4.9

Attack Vector

LOCAL

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

NONE

Integrity Impact

NONE

Availability Impact

COMPLETE

AV:L/AC:L/Au:N/C:N/I:N/A:C

AI Score

5.7

Confidence

High

EPSS

Percentile

10.1%

JSON

Linux kernel 2.6.28 allows local users to cause a denial of service (“soft lockup” and process loss) via a large number of sendmsg function calls, which does not block during AF_UNIX garbage collection and triggers an OOM condition, a different vulnerability than CVE-2008-5029.

Affected configurations

NVD

Node

linuxlinux_kernelMatch2.6.28

linuxlinux_kernelMatch2.6.28rc1

linuxlinux_kernelMatch2.6.28rc2

linuxlinux_kernelMatch2.6.28rc3

linuxlinux_kernelMatch2.6.28rc4

linuxlinux_kernelMatch2.6.28rc5

VendorProductVersionCPE
linuxlinux_kernel2.6.28cpe:/o:linux:linux_kernel:2.6.28:rc1::
linuxlinux_kernel2.6.28cpe:/o:linux:linux_kernel:2.6.28:rc2::
linuxlinux_kernel2.6.28cpe:/o:linux:linux_kernel:2.6.28:rc5::
linuxlinux_kernel2.6.28cpe:/o:linux:linux_kernel:2.6.28:rc4::
linuxlinux_kernel2.6.28cpe:/o:linux:linux_kernel:2.6.28:::
linuxlinux_kernel2.6.28cpe:/o:linux:linux_kernel:2.6.28:rc3::

Vendor	Product	Version	CPE
linux	linux_kernel	2.6.28	cpe:/o:linux:linux_kernel:2.6.28:rc1::
linux	linux_kernel	2.6.28	cpe:/o:linux:linux_kernel:2.6.28:rc2::
linux	linux_kernel	2.6.28	cpe:/o:linux:linux_kernel:2.6.28:rc5::
linux	linux_kernel	2.6.28	cpe:/o:linux:linux_kernel:2.6.28:rc4::
linux	linux_kernel	2.6.28	cpe:/o:linux:linux_kernel:2.6.28:::
linux	linux_kernel	2.6.28	cpe:/o:linux:linux_kernel:2.6.28:rc3::