Lucene search
HistorySep 26, 2007 - 9:17 p.m.
CVE-2007-5093
CVSS2
4
Attack Vector
LOCAL
Attack Complexity
HIGH
Authentication
NONE
Confidentiality Impact
NONE
Integrity Impact
NONE
Availability Impact
COMPLETE
AV:L/AC:H/Au:N/C:N/I:N/A:C
AI Score
5
Confidence
High
EPSS
0
Percentile
10.1%
The disconnect method in the Philips USB Webcam (pwc) driver in Linux kernel 2.6.x before 2.6.22.6 “relies on user space to close the device,” which allows user-assisted local attackers to cause a denial of service (USB subsystem hang and CPU consumption in khubd) by not closing the device after the disconnect is invoked. NOTE: this rarely crosses privilege boundaries, unless the attacker can convince the victim to unplug the affected device.
Affected configurations
Node
linuxlinux_kernelMatch2.6.0
ORlinuxlinux_kernelMatch2.6.0test1
ORlinuxlinux_kernelMatch2.6.0test10
ORlinuxlinux_kernelMatch2.6.0test11
ORlinuxlinux_kernelMatch2.6.0test2
ORlinuxlinux_kernelMatch2.6.0test3
ORlinuxlinux_kernelMatch2.6.0test4
ORlinuxlinux_kernelMatch2.6.0test5
ORlinuxlinux_kernelMatch2.6.0test6
ORlinuxlinux_kernelMatch2.6.0test7
ORlinuxlinux_kernelMatch2.6.0test8
ORlinuxlinux_kernelMatch2.6.0test9
ORlinuxlinux_kernelMatch2.6.1
ORlinuxlinux_kernelMatch2.6.1rc1
ORlinuxlinux_kernelMatch2.6.1rc2
ORlinuxlinux_kernelMatch2.6.2
ORlinuxlinux_kernelMatch2.6.3
ORlinuxlinux_kernelMatch2.6.4
ORlinuxlinux_kernelMatch2.6.5
ORlinuxlinux_kernelMatch2.6.6
ORlinuxlinux_kernelMatch2.6.6rc1
ORlinuxlinux_kernelMatch2.6.6rc2
ORlinuxlinux_kernelMatch2.6.7
ORlinuxlinux_kernelMatch2.6.7rc1
ORlinuxlinux_kernelMatch2.6.8
ORlinuxlinux_kernelMatch2.6.8rc1
ORlinuxlinux_kernelMatch2.6.8rc2
ORlinuxlinux_kernelMatch2.6.8rc3
ORlinuxlinux_kernelMatch2.6.8.1
ORlinuxlinux_kernelMatch2.6.8.1.5
ORlinuxlinux_kernelMatch2.6.9
ORlinuxlinux_kernelMatch2.6.9rc1
ORlinuxlinux_kernelMatch2.6.9rc2
ORlinuxlinux_kernelMatch2.6.9rc3
ORlinuxlinux_kernelMatch2.6.9rc4
ORlinuxlinux_kernelMatch2.6.10
ORlinuxlinux_kernelMatch2.6.10rc1
ORlinuxlinux_kernelMatch2.6.10rc2
ORlinuxlinux_kernelMatch2.6.11
ORlinuxlinux_kernelMatch2.6.11rc1
ORlinuxlinux_kernelMatch2.6.11rc2
ORlinuxlinux_kernelMatch2.6.11rc3
ORlinuxlinux_kernelMatch2.6.11rc4
ORlinuxlinux_kernelMatch2.6.11.1
ORlinuxlinux_kernelMatch2.6.11.2
ORlinuxlinux_kernelMatch2.6.11.3
ORlinuxlinux_kernelMatch2.6.11.4
ORlinuxlinux_kernelMatch2.6.11.5
ORlinuxlinux_kernelMatch2.6.11.6
ORlinuxlinux_kernelMatch2.6.11.7
ORlinuxlinux_kernelMatch2.6.11.8
ORlinuxlinux_kernelMatch2.6.11.9
ORlinuxlinux_kernelMatch2.6.11.10
ORlinuxlinux_kernelMatch2.6.11.11
ORlinuxlinux_kernelMatch2.6.11.12
ORlinuxlinux_kernelMatch2.6.11_rc1_bk6
ORlinuxlinux_kernelMatch2.6.12
ORlinuxlinux_kernelMatch2.6.12rc1
ORlinuxlinux_kernelMatch2.6.12rc2
ORlinuxlinux_kernelMatch2.6.12rc3
ORlinuxlinux_kernelMatch2.6.12rc4
ORlinuxlinux_kernelMatch2.6.12rc5
ORlinuxlinux_kernelMatch2.6.12rc6
ORlinuxlinux_kernelMatch2.6.12.1
ORlinuxlinux_kernelMatch2.6.12.2
ORlinuxlinux_kernelMatch2.6.12.3
ORlinuxlinux_kernelMatch2.6.12.4
ORlinuxlinux_kernelMatch2.6.12.5
ORlinuxlinux_kernelMatch2.6.12.6
ORlinuxlinux_kernelMatch2.6.12.12
ORlinuxlinux_kernelMatch2.6.12.22
ORlinuxlinux_kernelMatch2.6.13
ORlinuxlinux_kernelMatch2.6.13rc1
ORlinuxlinux_kernelMatch2.6.13rc2
ORlinuxlinux_kernelMatch2.6.13rc3
ORlinuxlinux_kernelMatch2.6.13rc4
ORlinuxlinux_kernelMatch2.6.13rc5
ORlinuxlinux_kernelMatch2.6.13rc6
ORlinuxlinux_kernelMatch2.6.13rc7
ORlinuxlinux_kernelMatch2.6.13.1
ORlinuxlinux_kernelMatch2.6.13.2
ORlinuxlinux_kernelMatch2.6.13.3
ORlinuxlinux_kernelMatch2.6.13.4
ORlinuxlinux_kernelMatch2.6.13.5
ORlinuxlinux_kernelMatch2.6.14
ORlinuxlinux_kernelMatch2.6.14rc1
ORlinuxlinux_kernelMatch2.6.14rc2
ORlinuxlinux_kernelMatch2.6.14rc3
ORlinuxlinux_kernelMatch2.6.14rc4
ORlinuxlinux_kernelMatch2.6.14.1
ORlinuxlinux_kernelMatch2.6.14.2
ORlinuxlinux_kernelMatch2.6.14.3
ORlinuxlinux_kernelMatch2.6.14.4
ORlinuxlinux_kernelMatch2.6.14.5
ORlinuxlinux_kernelMatch2.6.15
ORlinuxlinux_kernelMatch2.6.15rc1
ORlinuxlinux_kernelMatch2.6.15rc2
ORlinuxlinux_kernelMatch2.6.15rc3
ORlinuxlinux_kernelMatch2.6.15.1
ORlinuxlinux_kernelMatch2.6.15.2
ORlinuxlinux_kernelMatch2.6.15.3
ORlinuxlinux_kernelMatch2.6.15.4
ORlinuxlinux_kernelMatch2.6.15.5
ORlinuxlinux_kernelMatch2.6.15.6
ORlinuxlinux_kernelMatch2.6.15.7
ORlinuxlinux_kernelMatch2.6.15.11
ORlinuxlinux_kernelMatch2.6.16
ORlinuxlinux_kernelMatch2.6.16rc1
ORlinuxlinux_kernelMatch2.6.16rc3
ORlinuxlinux_kernelMatch2.6.16.1
ORlinuxlinux_kernelMatch2.6.16.2
ORlinuxlinux_kernelMatch2.6.16.3
ORlinuxlinux_kernelMatch2.6.16.4
ORlinuxlinux_kernelMatch2.6.16.5
ORlinuxlinux_kernelMatch2.6.16.7
ORlinuxlinux_kernelMatch2.6.16.9
ORlinuxlinux_kernelMatch2.6.16.10
ORlinuxlinux_kernelMatch2.6.16.11
ORlinuxlinux_kernelMatch2.6.16.12
ORlinuxlinux_kernelMatch2.6.16.19
ORlinuxlinux_kernelMatch2.6.16.23
ORlinuxlinux_kernelMatch2.6.16.27
ORlinuxlinux_kernelMatch2.6.17
ORlinuxlinux_kernelMatch2.6.17rc1
ORlinuxlinux_kernelMatch2.6.17rc2
ORlinuxlinux_kernelMatch2.6.17rc3
ORlinuxlinux_kernelMatch2.6.17rc4
ORlinuxlinux_kernelMatch2.6.17rc5
ORlinuxlinux_kernelMatch2.6.17rc6
ORlinuxlinux_kernelMatch2.6.17.1
ORlinuxlinux_kernelMatch2.6.17.2
ORlinuxlinux_kernelMatch2.6.17.3
ORlinuxlinux_kernelMatch2.6.17.4
ORlinuxlinux_kernelMatch2.6.17.5
ORlinuxlinux_kernelMatch2.6.17.6
ORlinuxlinux_kernelMatch2.6.17.7
ORlinuxlinux_kernelMatch2.6.17.8
ORlinuxlinux_kernelMatch2.6.17.9
ORlinuxlinux_kernelMatch2.6.17.10
ORlinuxlinux_kernelMatch2.6.17.11
ORlinuxlinux_kernelMatch2.6.17.12
ORlinuxlinux_kernelMatch2.6.17.13
ORlinuxlinux_kernelMatch2.6.17.14
ORlinuxlinux_kernelMatch2.6.18
ORlinuxlinux_kernelMatch2.6.18.1
ORlinuxlinux_kernelMatch2.6.18.2
ORlinuxlinux_kernelMatch2.6.18.3
ORlinuxlinux_kernelMatch2.6.18.4
ORlinuxlinux_kernelMatch2.6.19
ORlinuxlinux_kernelMatch2.6.19rc1
ORlinuxlinux_kernelMatch2.6.19rc2
ORlinuxlinux_kernelMatch2.6.19rc3
ORlinuxlinux_kernelMatch2.6.19rc4
ORlinuxlinux_kernelMatch2.6.19.1
ORlinuxlinux_kernelMatch2.6.19.2
ORlinuxlinux_kernelMatch2.6.20
ORlinuxlinux_kernelMatch2.6.20rc2
ORlinuxlinux_kernelMatch2.6.20.1
ORlinuxlinux_kernelMatch2.6.20.2
ORlinuxlinux_kernelMatch2.6.20.3
ORlinuxlinux_kernelMatch2.6.20.4
ORlinuxlinux_kernelMatch2.6.20.5
ORlinuxlinux_kernelMatch2.6.20.8
ORlinuxlinux_kernelMatch2.6.20.9
ORlinuxlinux_kernelMatch2.6.20.10
ORlinuxlinux_kernelMatch2.6.20.11
ORlinuxlinux_kernelMatch2.6.20.12
ORlinuxlinux_kernelMatch2.6.20.13
ORlinuxlinux_kernelMatch2.6.20.14
ORlinuxlinux_kernelMatch2.6.20.15
ORlinuxlinux_kernelMatch2.6.21
ORlinuxlinux_kernelMatch2.6.21rc3
ORlinuxlinux_kernelMatch2.6.21rc4
ORlinuxlinux_kernelMatch2.6.21rc5
ORlinuxlinux_kernelMatch2.6.21rc6
ORlinuxlinux_kernelMatch2.6.21rc7
ORlinuxlinux_kernelMatch2.6.21.1
ORlinuxlinux_kernelMatch2.6.21.2
ORlinuxlinux_kernelMatch2.6.21.3
ORlinuxlinux_kernelMatch2.6.21.4
ORlinuxlinux_kernelMatch2.6.22
ORlinuxlinux_kernelMatch2.6.22rc6
ORlinuxlinux_kernelMatch2.6.22.1
ORlinuxlinux_kernelMatch2.6.22.3
ORlinuxlinux_kernelMatch2.6.22.4
ORlinuxlinux_kernelMatch2.6.22.5
ORlinuxlinux_kernelMatch2.6.22.6
ORlinuxlinux_kernelMatch2.6.22.7
ORlinuxlinux_kernelMatch2.6.23rc1
ORlinuxlinux_kernelMatch2.6.23rc2
ORlinuxlinux_kernelMatch2.6_test9_cvs
References
marc.info/?l=linux-kernel&m=118873457814808&w=2
marc.info/?l=linux-kernel&m=118880154122548&w=2
rhn.redhat.com/errata/RHSA-2008-0972.html
secunia.com/advisories/26994
secunia.com/advisories/28170
secunia.com/advisories/28706
secunia.com/advisories/28971
secunia.com/advisories/29058
secunia.com/advisories/30294
secunia.com/advisories/32799
www.debian.org/security/2007/dsa-1381
www.debian.org/security/2008/dsa-1503
www.debian.org/security/2008/dsa-1504
www.kernel.org/pub/linux/kernel/v2.6/ChangeLog-2.6.22.6
www.mandriva.com/security/advisories?name=MDVSA-2008:008
www.mandriva.com/security/advisories?name=MDVSA-2008:105
www.redhat.com/support/errata/RHSA-2008-0275.html
www.securityfocus.com/bid/25504
www.ubuntu.com/usn/usn-558-1
www.ubuntu.com/usn/usn-574-1
www.ubuntu.com/usn/usn-578-1
oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A10494
Related
veracode
veracode
Denial Of Service (DoS)
2020-04-10 00:22:13
ubuntucve
ubuntucve
CVE-2007-5093
2007-09-26 00:00:00
prion
prion
Design/Logic Flaw
2007-09-26 21:17:00
cvelist
cvelist
CVE-2007-5093
2007-09-26 21:00:00
cve
cve
CVE-2007-5093
2007-09-26 21:17:00
securityvulns
securityvulns
Linux kernel multiple security vulnerabilities
2007-10-04 00:00:00
nessus
nessus
CentOS 5 : kernel (CESA-2008:0275)
2010-01-06 00:00:00
Debian DSA-1381-2 : linux-2.6 - several vulnerabilities
2007-10-03 00:00:00
Oracle Linux 5 : kernel (ELSA-2008-0275)
2013-07-12 00:00:00
centos
centos
kernel security update
2008-05-21 12:48:13
kernel security update
2008-11-20 14:26:01
redhat
redhat
(RHSA-2008:0275) Important: kernel security and bug fix update
2008-05-20 00:00:00
(RHSA-2008:0972) Important: kernel security and bug fix update
2008-11-19 00:00:00
openvas
openvas
Debian: Security Advisory (DSA-1381-2)
2008-01-17 00:00:00
Debian Security Advisory DSA 1381-2 (linux-2.6)
2008-01-17 00:00:00
RedHat Update for kernel RHSA-2008:0275-01
2009-03-06 00:00:00
debian
debian
osv
osv
linux-2.6
2007-10-02 00:00:00
kernel-image-2.6.8 - several issues
2008-02-22 00:00:00
kernel-source-2.4.27 - several vulnerabilities
2008-02-22 00:00:00
oraclelinux
oraclelinux
kernel security and bug fix update
2008-05-20 00:00:00
kernel security and bug fix update
2008-11-19 00:00:00
ubuntu
ubuntu
Linux kernel vulnerabilities
2007-12-19 00:00:00
Linux kernel vulnerabilities
2008-02-14 00:00:00
Linux kernel vulnerabilities
2008-02-04 00:00:00
CVSS2
4
Attack Vector
LOCAL
Attack Complexity
HIGH
Authentication
NONE
Confidentiality Impact
NONE
Integrity Impact
NONE
Availability Impact
COMPLETE
AV:L/AC:H/Au:N/C:N/I:N/A:C
AI Score
5
Confidence
High
EPSS
0
Percentile
10.1%
Related for NVD:CVE-2007-5093