Lucene search

K
ubuntucve
Ubuntu.comUB:CVE-2009-2849
HistoryAug 18, 2009 - 12:00 a.m.

CVE-2009-2849

2009-08-1800:00:00
ubuntu.com
ubuntu.com
6

4.7 Medium

CVSS2

Access Vector

LOCAL

Access Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

NONE

Integrity Impact

NONE

Availability Impact

COMPLETE

AV:L/AC:M/Au:N/C:N/I:N/A:C

0.0004 Low

EPSS

Percentile

8.1%

The md driver (drivers/md/md.c) in the Linux kernel before 2.6.30.2 might
allow local users to cause a denial of service (NULL pointer dereference)
via vectors related to “suspend_* sysfs attributes” and the (1)
suspend_lo_store or (2) suspend_hi_store functions. NOTE: this is only a
vulnerability when sysfs is writable by an attacker.

OSVersionArchitecturePackageVersionFilename
ubuntu08.04noarchlinux< 2.6.24-25.63UNKNOWN
ubuntu08.10noarchlinux< 2.6.27-15.43UNKNOWN
ubuntu09.04noarchlinux< 2.6.28-16.55UNKNOWN
How to protect your server from attacks?

4.7 Medium

CVSS2

Access Vector

LOCAL

Access Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

NONE

Integrity Impact

NONE

Availability Impact

COMPLETE

AV:L/AC:M/Au:N/C:N/I:N/A:C

0.0004 Low

EPSS

Percentile

8.1%

Related for UB:CVE-2009-2849