Lucene search

K
nvd[email protected]NVD:CVE-2008-5300
HistoryDec 01, 2008 - 5:30 p.m.

CVE-2008-5300

2008-12-0117:30:00
CWE-399
web.nvd.nist.gov
1

4.9 Medium

CVSS2

Attack Vector

LOCAL

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

NONE

Integrity Impact

NONE

Availability Impact

COMPLETE

AV:L/AC:L/Au:N/C:N/I:N/A:C

5.8 Medium

AI Score

Confidence

High

0.0004 Low

EPSS

Percentile

10.1%

Linux kernel 2.6.28 allows local users to cause a denial of service (“soft lockup” and process loss) via a large number of sendmsg function calls, which does not block during AF_UNIX garbage collection and triggers an OOM condition, a different vulnerability than CVE-2008-5029.

Affected configurations

NVD
Node
linuxlinux_kernelMatch2.6.28
OR
linuxlinux_kernelMatch2.6.28rc1
OR
linuxlinux_kernelMatch2.6.28rc2
OR
linuxlinux_kernelMatch2.6.28rc3
OR
linuxlinux_kernelMatch2.6.28rc4
OR
linuxlinux_kernelMatch2.6.28rc5

References

4.9 Medium

CVSS2

Attack Vector

LOCAL

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

NONE

Integrity Impact

NONE

Availability Impact

COMPLETE

AV:L/AC:L/Au:N/C:N/I:N/A:C

5.8 Medium

AI Score

Confidence

High

0.0004 Low

EPSS

Percentile

10.1%