CVE-2008-4410

2008-10-0300:00:00

ubuntu.com

4.9 Medium

CVSS2

Access Vector

LOCAL

Access Complexity

LOW

Authentication

NONE

Confidentiality Impact

NONE

Integrity Impact

NONE

Availability Impact

COMPLETE

AV:L/AC:L/Au:N/C:N/I:N/A:C

0.0004 Low

EPSS

Percentile

5.3%

JSON

The vmi_write_ldt_entry function in arch/x86/kernel/vmi_32.c in the Virtual
Machine Interface (VMI) in the Linux kernel 2.6.26.5 invokes
write_idt_entry where write_ldt_entry was intended, which allows local
users to cause a denial of service (persistent application failure) via
crafted function calls, related to the Java Runtime Environment (JRE)
experiencing improper LDT selector state, a different vulnerability than
CVE-2008-3247.