Lucene search
Ubuntu.comUB:CVE-2008-4554HistoryOct 15, 2008 - 12:00 a.m.
CVE-2008-4554
2008-10-1500:00:00
ubuntu.com
ubuntu.com
8
4.6 Medium
CVSS2
Access Vector
LOCAL
Access Complexity
LOW
Authentication
NONE
Confidentiality Impact
PARTIAL
Integrity Impact
PARTIAL
Availability Impact
PARTIAL
AV:L/AC:L/Au:N/C:P/I:P/A:P
0.0004 Low
EPSS
Percentile
9.4%
The do_splice_from function in fs/splice.c in the Linux kernel before
2.6.27 does not reject file descriptors that have the O_APPEND flag set,
which allows local users to bypass append mode and make arbitrary changes
to other locations in the file.
Related
prion
prion
Remote file inclusion
2008-10-15 20:07:00
veracode
veracode
Access Control Bypass
2020-04-10 00:27:26
seebug
seebug
Linux Kernel 'do_splice_from()'本地安全绕过漏洞
2008-10-28 00:00:00
cve
cve
CVE-2008-4554
2008-10-15 20:07:00
openvas
openvas
RedHat Update for kernel RHSA-2008:1017-01
2009-03-06 00:00:00
Mandriva Update for kernel MDVSA-2008:224-1 (kernel)
2009-04-09 00:00:00
Oracle Linux Local Check: ELSA-2008-1017
2015-10-08 00:00:00
nessus
nessus
RHEL 5 : kernel (RHSA-2008:1017)
2008-12-16 00:00:00
Oracle Linux 5 : kernel (ELSA-2008-1017)
2013-07-12 00:00:00
Mandriva Linux Security Advisory : kernel (MDVSA-2008:224-1)
2009-04-23 00:00:00
redhat
redhat
(RHSA-2008:1017) Important: kernel security and bug fix update
2008-12-16 00:00:00
(RHSA-2009:0009) Important: kernel security and bug fix update
2009-01-22 00:00:00
centos
centos
kernel security update
2008-12-17 00:06:25
oraclelinux
oraclelinux
kernel security and bug fix update
2008-12-17 00:00:00
Oracle Enterprise Linux 5.3 kernel security and bug fix update
2009-01-27 00:00:00
fedora
fedora
[SECURITY] Fedora 8 Update: kernel-2.6.26.6-49.fc8
2008-10-23 16:38:12
[SECURITY] Fedora 9 Update: kernel-2.6.26.6-79.fc9
2008-10-23 16:39:28
suse
suse
local privilege escalation in kernel-debug
2009-01-20 17:01:02
remote code execution in kernel
2009-06-08 17:54:43
debian
debian
osv
osv
fai-kernels linux-2.6 user-mode-linux - several vulnerabilities
2008-12-15 00:00:00
linux-2.6.24 - several vulnerabilities
2008-12-04 00:00:00
ubuntu
ubuntu
Linux kernel vulnerabilities
2008-11-27 00:00:00
4.6 Medium
CVSS2
Access Vector
LOCAL
Access Complexity
LOW
Authentication
NONE
Confidentiality Impact
PARTIAL
Integrity Impact
PARTIAL
Availability Impact
PARTIAL
AV:L/AC:L/Au:N/C:P/I:P/A:P
0.0004 Low
EPSS
Percentile
9.4%
Related for UB:CVE-2008-4554