CVE-2009-0834

Опубликовано: 06 мар. 2009

Источник: nvd

CVSS2: 3.6

EPSS Низкий

Описание

The audit_syscall_entry function in the Linux kernel 2.6.28.7 and earlier on the x86_64 platform does not properly handle (1) a 32-bit process making a 64-bit syscall or (2) a 64-bit process making a 32-bit syscall, which allows local users to bypass certain syscall audit configurations via crafted syscalls, a related issue to CVE-2009-0342 and CVE-2009-0343.

Ссылки

http://git.kernel.org/?p=linux/kernel/git/torvalds/linux-2.6.git%3Ba=commit%3Bh=ccbe495caa5e604b04d5a31d7459a6f6a76a756c
http://lists.opensuse.org/opensuse-security-announce/2009-05/msg00002.html
Mailing List
Third Party Advisory
http://lists.opensuse.org/opensuse-security-announce/2009-06/msg00000.html
Mailing List
Third Party Advisory
http://lists.opensuse.org/opensuse-security-announce/2009-06/msg00001.html
Mailing List
Third Party Advisory
http://marc.info/?l=linux-kernel&m=123579056530191&w=2
Third Party Advisory
http://marc.info/?l=linux-kernel&m=123579065130246&w=2
Third Party Advisory
http://marc.info/?l=oss-security&m=123597642832637&w=2
Third Party Advisory
http://rhn.redhat.com/errata/RHSA-2009-0459.html
Third Party Advisory
http://rhn.redhat.com/errata/RHSA-2009-0473.html
Third Party Advisory
http://scary.beasts.org/security/CESA-2009-001.html
Third Party Advisory
http://secunia.com/advisories/34084
Third Party Advisory
http://secunia.com/advisories/34917
Third Party Advisory
http://secunia.com/advisories/34962
Third Party Advisory
http://secunia.com/advisories/34981
Third Party Advisory
http://secunia.com/advisories/35011
Third Party Advisory
http://secunia.com/advisories/35015
Third Party Advisory
http://secunia.com/advisories/35120
Third Party Advisory
http://secunia.com/advisories/35121
Third Party Advisory
http://secunia.com/advisories/35185
Third Party Advisory
http://secunia.com/advisories/35390
Third Party Advisory

Уязвимые конфигурации

Конфигурация 1

cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*

Версия до 2.6.28.7 (включая)

Конфигурация 2

Одно из

cpe:2.3:o:debian:debian_linux:4.0:*:*:*:*:*:*:*

cpe:2.3:o:debian:debian_linux:5.0:*:*:*:*:*:*:*

Конфигурация 3

Одно из

cpe:2.3:o:canonical:ubuntu_linux:7.10:*:*:*:*:*:*:*

cpe:2.3:o:canonical:ubuntu_linux:8.04:*:*:*:-:*:*:*

cpe:2.3:o:canonical:ubuntu_linux:8.10:*:*:*:*:*:*:*

Конфигурация 4

Одно из

cpe:2.3:o:redhat:enterprise_linux_desktop:4.0:*:*:*:*:*:*:*

cpe:2.3:o:redhat:enterprise_linux_desktop:5.0:*:*:*:*:*:*:*

cpe:2.3:o:redhat:enterprise_linux_eus:4.7:*:*:*:*:*:*:*

cpe:2.3:o:redhat:enterprise_linux_eus:5.3:*:*:*:*:*:*:*

cpe:2.3:o:redhat:enterprise_linux_server:4.0:*:*:*:*:*:*:*

cpe:2.3:o:redhat:enterprise_linux_server:5.0:*:*:*:*:*:*:*

cpe:2.3:o:redhat:enterprise_linux_server_aus:5.3:*:*:*:*:*:*:*

cpe:2.3:o:redhat:enterprise_linux_workstation:4.0:*:*:*:*:*:*:*

cpe:2.3:o:redhat:enterprise_linux_workstation:5.0:*:*:*:*:*:*:*

Конфигурация 5

Одно из

cpe:2.3:o:opensuse:opensuse:10.3:*:*:*:*:*:*:*

cpe:2.3:o:opensuse:opensuse:11.0:*:*:*:*:*:*:*

cpe:2.3:o:suse:linux_enterprise_desktop:10:sp2:*:*:*:*:*:*

cpe:2.3:o:suse:linux_enterprise_server:10:sp2:*:*:*:*:*:*

cpe:2.3:o:suse:linux_enterprise_software_development_kit:10:sp2:*:*:*:*:*:*

EPSS

Процентиль: 20%

0.00064

Низкий

3.6 Low

CVSS2

Дефекты

NVD-CWE-noinfo

Связанные уязвимости

CVE-2009-0834

ubuntu

больше 16 лет назад

CVE-2009-0834

redhat

больше 16 лет назад

CVE-2009-0834

debian

больше 16 лет назад

The audit_syscall_entry function in the Linux kernel 2.6.28.7 and earl ...

GHSA-3cv7-5j4c-h696

github

около 3 лет назад

ELSA-2009-0473

oracle-oval

около 16 лет назад

ELSA-2009-0473: kernel security and bug fix update (IMPORTANT)

EPSS

Процентиль: 20%

0.00064

Низкий

3.6 Low

CVSS2

Дефекты

NVD-CWE-noinfo