Lucene search

[email protected]NVD:CVE-2009-1338

HistoryApr 22, 2009 - 3:30 p.m.

CVE-2009-1338

2009-04-2215:30:00

CWE-264

[email protected]

web.nvd.nist.gov

CVSS2

4.6

Attack Vector

LOCAL

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

PARTIAL

AV:L/AC:L/Au:N/C:P/I:P/A:P

AI Score

4.5

Confidence

High

EPSS

Percentile

10.1%

JSON

The kill_something_info function in kernel/signal.c in the Linux kernel before 2.6.28 does not consider PID namespaces when processing signals directed to PID -1, which allows local users to bypass the intended namespace isolation, and send arbitrary signals to all processes in all namespaces, via a kill command.

Affected configurations

Nvd

Node

linuxlinux_kernelRange≤2.6.27.21

linuxlinux_kernelMatch2.2.27

linuxlinux_kernelMatch2.4.36

linuxlinux_kernelMatch2.4.36.1

linuxlinux_kernelMatch2.4.36.2

linuxlinux_kernelMatch2.4.36.3

linuxlinux_kernelMatch2.4.36.4

linuxlinux_kernelMatch2.4.36.5

linuxlinux_kernelMatch2.4.36.6

linuxlinux_kernelMatch2.6

linuxlinux_kernelMatch2.6.18

linuxlinux_kernelMatch2.6.18rc1

linuxlinux_kernelMatch2.6.18rc2

linuxlinux_kernelMatch2.6.18rc3

linuxlinux_kernelMatch2.6.18rc4

linuxlinux_kernelMatch2.6.18rc5

linuxlinux_kernelMatch2.6.18rc6

linuxlinux_kernelMatch2.6.18rc7

linuxlinux_kernelMatch2.6.19.4

linuxlinux_kernelMatch2.6.19.5

linuxlinux_kernelMatch2.6.19.6

linuxlinux_kernelMatch2.6.19.7

linuxlinux_kernelMatch2.6.20.16

linuxlinux_kernelMatch2.6.20.17

linuxlinux_kernelMatch2.6.20.18

linuxlinux_kernelMatch2.6.20.19

linuxlinux_kernelMatch2.6.20.20

linuxlinux_kernelMatch2.6.20.21

linuxlinux_kernelMatch2.6.21.5

linuxlinux_kernelMatch2.6.21.6

linuxlinux_kernelMatch2.6.21.7

linuxlinux_kernelMatch2.6.22

linuxlinux_kernelMatch2.6.22.1

linuxlinux_kernelMatch2.6.22.2

linuxlinux_kernelMatch2.6.22.8

linuxlinux_kernelMatch2.6.22.9

linuxlinux_kernelMatch2.6.22.10

linuxlinux_kernelMatch2.6.22.11

linuxlinux_kernelMatch2.6.22.12

linuxlinux_kernelMatch2.6.22.13

linuxlinux_kernelMatch2.6.22.14

linuxlinux_kernelMatch2.6.22.15

linuxlinux_kernelMatch2.6.22.17

linuxlinux_kernelMatch2.6.22.18

linuxlinux_kernelMatch2.6.22.19

linuxlinux_kernelMatch2.6.22.20

linuxlinux_kernelMatch2.6.22.21

linuxlinux_kernelMatch2.6.22.22

linuxlinux_kernelMatch2.6.22_rc1

linuxlinux_kernelMatch2.6.22_rc7

linuxlinux_kernelMatch2.6.23

linuxlinux_kernelMatch2.6.23.8

linuxlinux_kernelMatch2.6.23.9

linuxlinux_kernelMatch2.6.23.10

linuxlinux_kernelMatch2.6.23.11

linuxlinux_kernelMatch2.6.23.12

linuxlinux_kernelMatch2.6.23.13

linuxlinux_kernelMatch2.6.23.15

linuxlinux_kernelMatch2.6.23.16

linuxlinux_kernelMatch2.6.23.17

linuxlinux_kernelMatch2.6.23_rc1

linuxlinux_kernelMatch2.6.24

linuxlinux_kernelMatch2.6.24.1

linuxlinux_kernelMatch2.6.24.2

linuxlinux_kernelMatch2.6.24.3

linuxlinux_kernelMatch2.6.24.4

linuxlinux_kernelMatch2.6.24.5

linuxlinux_kernelMatch2.6.24.6

linuxlinux_kernelMatch2.6.24.7

linuxlinux_kernelMatch2.6.24_rc1

linuxlinux_kernelMatch2.6.24_rc4

linuxlinux_kernelMatch2.6.24_rc5

linuxlinux_kernelMatch2.6.25

linuxlinux_kernelMatch2.6.25x86_64

linuxlinux_kernelMatch2.6.25.1

linuxlinux_kernelMatch2.6.25.1x86_64

linuxlinux_kernelMatch2.6.25.2

linuxlinux_kernelMatch2.6.25.2x86_64

linuxlinux_kernelMatch2.6.25.3

linuxlinux_kernelMatch2.6.25.3x86_64

linuxlinux_kernelMatch2.6.25.4

linuxlinux_kernelMatch2.6.25.4x86_64

linuxlinux_kernelMatch2.6.25.5

linuxlinux_kernelMatch2.6.25.5x86_64

linuxlinux_kernelMatch2.6.25.6

linuxlinux_kernelMatch2.6.25.6x86_64

linuxlinux_kernelMatch2.6.25.7

linuxlinux_kernelMatch2.6.25.7x86_64

linuxlinux_kernelMatch2.6.25.8

linuxlinux_kernelMatch2.6.25.8x86_64

linuxlinux_kernelMatch2.6.25.9

linuxlinux_kernelMatch2.6.25.9x86_64

linuxlinux_kernelMatch2.6.25.10

linuxlinux_kernelMatch2.6.25.10x86_64

linuxlinux_kernelMatch2.6.25.11

linuxlinux_kernelMatch2.6.25.11x86_64

linuxlinux_kernelMatch2.6.25.12

linuxlinux_kernelMatch2.6.25.12x86_64

linuxlinux_kernelMatch2.6.25.13

linuxlinux_kernelMatch2.6.25.14

linuxlinux_kernelMatch2.6.25.15

linuxlinux_kernelMatch2.6.25.16

linuxlinux_kernelMatch2.6.25.17

linuxlinux_kernelMatch2.6.26

linuxlinux_kernelMatch2.6.26.1

linuxlinux_kernelMatch2.6.26.2

linuxlinux_kernelMatch2.6.26.3

linuxlinux_kernelMatch2.6.26.4

linuxlinux_kernelMatch2.6.26.5

linuxlinux_kernelMatch2.6.27

linuxlinux_kernelMatch2.6.27.1

linuxlinux_kernelMatch2.6.27.2

linuxlinux_kernelMatch2.6.27.3

linuxlinux_kernelMatch2.6.27.4

linuxlinux_kernelMatch2.6.27.5

linuxlinux_kernelMatch2.6.27.6

linuxlinux_kernelMatch2.6.27.7

linuxlinux_kernelMatch2.6.27.8

linuxlinux_kernelMatch2.6.27.9

linuxlinux_kernelMatch2.6.27.10

linuxlinux_kernelMatch2.6.27.11

linuxlinux_kernelMatch2.6.27.12

linuxlinux_kernelMatch2.6.27.13

linuxlinux_kernelMatch2.6.27.14

linuxlinux_kernelMatch2.6.27.15

linuxlinux_kernelMatch2.6.27.16

linuxlinux_kernelMatch2.6.27.17

linuxlinux_kernelMatch2.6.27.18

linuxlinux_kernelMatch2.6.27.19

linuxlinux_kernelMatch2.6.27.20

References

git.kernel.org/?p=linux/kernel/git/torvalds/linux-2.6.git%3Ba=commit%3Bh=d25141a818383b3c3b09f065698c544a7a0ec6e7

lkml.org/lkml/2008/7/23/148

secunia.com/advisories/34981

secunia.com/advisories/35120

secunia.com/advisories/35121

secunia.com/advisories/35343

secunia.com/advisories/35656

wiki.rpath.com/Advisories:rPSA-2009-0084

www.debian.org/security/2009/dsa-1787

www.debian.org/security/2009/dsa-1800

www.kernel.org/pub/linux/kernel/v2.6/ChangeLog-2.6.28

www.openwall.com/lists/oss-security/2009/04/16/2

www.openwall.com/lists/oss-security/2009/04/17/4

www.openwall.com/lists/oss-security/2009/04/21/1

www.redhat.com/support/errata/RHSA-2009-1081.html

www.securityfocus.com/archive/1/503610/100/0/threaded

www.ubuntu.com/usn/usn-793-1

bugzilla.redhat.com/show_bug.cgi?id=496031

exchange.xforce.ibmcloud.com/vulnerabilities/50386

CVSS2

4.6

Attack Vector

LOCAL

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

PARTIAL

AV:L/AC:L/Au:N/C:P/I:P/A:P

AI Score

4.5

Confidence

High

EPSS

Percentile

10.1%

JSON

Related for NVD:CVE-2009-1338

cvelist1 veracode1 prion1 cve1 ubuntucve1 openvas8 redhat1 securityvulns2 debian2 nessus3 osv2 ubuntu1