Lucene search

K
ubuntucveUbuntu.comUB:CVE-2008-3528
HistorySep 27, 2008 - 12:00 a.m.

CVE-2008-3528

2008-09-2700:00:00
ubuntu.com
ubuntu.com
8

2.1 Low

CVSS2

Access Vector

LOCAL

Access Complexity

LOW

Authentication

NONE

Confidentiality Impact

NONE

Integrity Impact

NONE

Availability Impact

PARTIAL

AV:L/AC:L/Au:N/C:N/I:N/A:P

0.001 Low

EPSS

Percentile

46.0%

The error-reporting functionality in (1) fs/ext2/dir.c, (2) fs/ext3/dir.c,
and possibly (3) fs/ext4/dir.c in the Linux kernel 2.6.26.5 does not limit
the number of printk console messages that report directory corruption,
which allows physically proximate attackers to cause a denial of service
(temporary system hang) by mounting a filesystem that has corrupted
dir->i_size and dir->i_blocks values and performing (a) read or (b) write
operations. NOTE: there are limited scenarios in which this crosses
privilege boundaries.

2.1 Low

CVSS2

Access Vector

LOCAL

Access Complexity

LOW

Authentication

NONE

Confidentiality Impact

NONE

Integrity Impact

NONE

Availability Impact

PARTIAL

AV:L/AC:L/Au:N/C:N/I:N/A:P

0.001 Low

EPSS

Percentile

46.0%