CVE-2008-3272

Опубликовано: 08 авг. 2008

Источник: nvd

CVSS2: 2.1

EPSS Низкий

Описание

The snd_seq_oss_synth_make_info function in sound/core/seq/oss/seq_oss_synth.c in the sound subsystem in the Linux kernel before 2.6.27-rc2 does not verify that the device number is within the range defined by max_synthdev before returning certain data to the caller, which allows local users to obtain sensitive information.

Ссылки

http://git.kernel.org/?p=linux/kernel/git/torvalds/linux-2.6.git%3Ba=commit%3Bh=82e68f7ffec3800425f2391c8c86277606860442
http://kernel.org/pub/linux/kernel/v2.6/testing/ChangeLog-2.6.27-rc2
Broken Link
http://lists.opensuse.org/opensuse-security-announce/2008-10/msg00000.html
Mailing List
Third Party Advisory
http://lists.opensuse.org/opensuse-security-announce/2008-10/msg00001.html
Mailing List
Third Party Advisory
http://lists.opensuse.org/opensuse-security-announce/2008-10/msg00003.html
Mailing List
Third Party Advisory
http://lists.opensuse.org/opensuse-security-announce/2008-10/msg00008.html
Mailing List
Third Party Advisory
http://lists.opensuse.org/opensuse-security-announce/2008-11/msg00001.html
Mailing List
Third Party Advisory
http://rhn.redhat.com/errata/RHSA-2008-0972.html
Third Party Advisory
http://secunia.com/advisories/31366
Third Party Advisory
http://secunia.com/advisories/31551
Third Party Advisory
http://secunia.com/advisories/31614
Third Party Advisory
http://secunia.com/advisories/31836
Third Party Advisory
http://secunia.com/advisories/31881
Third Party Advisory
http://secunia.com/advisories/32023
Third Party Advisory
http://secunia.com/advisories/32103
Third Party Advisory
http://secunia.com/advisories/32104
Third Party Advisory
http://secunia.com/advisories/32190
Third Party Advisory
http://secunia.com/advisories/32370
Third Party Advisory
http://secunia.com/advisories/32759
Third Party Advisory
http://secunia.com/advisories/32799
Third Party Advisory

Уязвимые конфигурации

Конфигурация 1

Одно из

cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*

Версия до 2.6.27 (исключая)

cpe:2.3:o:linux:linux_kernel:2.6.27:-:*:*:*:*:*:*

cpe:2.3:o:linux:linux_kernel:2.6.27:rc1:*:*:*:*:*:*

Конфигурация 2

cpe:2.3:o:debian:debian_linux:4.0:*:*:*:*:*:*:*

Конфигурация 3

Одно из

cpe:2.3:o:canonical:ubuntu_linux:6.06:*:*:*:lts:*:*:*

cpe:2.3:o:canonical:ubuntu_linux:7.04:*:*:*:*:*:*:*

cpe:2.3:o:canonical:ubuntu_linux:7.10:*:*:*:*:*:*:*

cpe:2.3:o:canonical:ubuntu_linux:8.04:*:*:*:lts:*:*:*

Конфигурация 4

Одно из

cpe:2.3:o:redhat:enterprise_linux_desktop:4.0:*:*:*:*:*:*:*

cpe:2.3:o:redhat:enterprise_linux_eus:4.7:*:*:*:*:*:*:*

cpe:2.3:o:redhat:enterprise_linux_server:4.0:*:*:*:*:*:*:*

cpe:2.3:o:redhat:enterprise_linux_workstation:4.0:*:*:*:*:*:*:*

EPSS

Процентиль: 20%

0.00063

Низкий

2.1 Low

CVSS2

Дефекты

CWE-200

Связанные уязвимости

CVE-2008-3272

ubuntu

почти 17 лет назад

CVE-2008-3272

redhat

почти 17 лет назад

CVE-2008-3272

debian

почти 17 лет назад

The snd_seq_oss_synth_make_info function in sound/core/seq/oss/seq_oss ...

GHSA-qg44-g4p3-cf6x

github

около 3 лет назад

BDU:2015-05017

fstec

больше 10 лет назад

Уязвимости операционной системы openSUSE, позволяющие злоумышленнику нарушить конфиденциальность, целостность и доступность защищаемой информации

EPSS

Процентиль: 20%

0.00063

Низкий

2.1 Low

CVSS2

Дефекты

CWE-200