Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

nvd логотип

CVE-2009-0935

Опубликовано: 18 мар. 2009
Источник: nvd
CVSS3: 5.5
CVSS2: 4.7
EPSS Низкий

Описание

The inotify_read function in the Linux kernel 2.6.27 to 2.6.27.13, 2.6.28 to 2.6.28.2, and 2.6.29-rc3 allows local users to cause a denial of service (OOPS) via a read with an invalid address to an inotify instance, which causes the device's event list mutex to be unlocked twice and prevents proper synchronization of a data structure for the inotify instance.

Уязвимые конфигурации

Конфигурация 1

Одно из

cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*
Версия от 2.6.27 (включая) до 2.6.27.13 (включая)
cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*
Версия от 2.6.28 (включая) до 2.6.28.2 (включая)
cpe:2.3:o:linux:linux_kernel:2.6.29:rc3:*:*:*:*:*:*

EPSS

Процентиль: 21%
0.00067
Низкий

5.5 Medium

CVSS3

4.7 Medium

CVSS2

Дефекты

CWE-667

Связанные уязвимости

CVSS3: 5.5
ubuntu
больше 16 лет назад

The inotify_read function in the Linux kernel 2.6.27 to 2.6.27.13, 2.6.28 to 2.6.28.2, and 2.6.29-rc3 allows local users to cause a denial of service (OOPS) via a read with an invalid address to an inotify instance, which causes the device's event list mutex to be unlocked twice and prevents proper synchronization of a data structure for the inotify instance.

redhat
почти 17 лет назад

The inotify_read function in the Linux kernel 2.6.27 to 2.6.27.13, 2.6.28 to 2.6.28.2, and 2.6.29-rc3 allows local users to cause a denial of service (OOPS) via a read with an invalid address to an inotify instance, which causes the device's event list mutex to be unlocked twice and prevents proper synchronization of a data structure for the inotify instance.

CVSS3: 5.5
debian
больше 16 лет назад

The inotify_read function in the Linux kernel 2.6.27 to 2.6.27.13, 2.6 ...

CVSS3: 5.5
github
больше 3 лет назад

The inotify_read function in the Linux kernel 2.6.27 to 2.6.27.13, 2.6.28 to 2.6.28.2, and 2.6.29-rc3 allows local users to cause a denial of service (OOPS) via a read with an invalid address to an inotify instance, which causes the device's event list mutex to be unlocked twice and prevents proper synchronization of a data structure for the inotify instance.

EPSS

Процентиль: 21%
0.00067
Низкий

5.5 Medium

CVSS3

4.7 Medium

CVSS2

Дефекты

CWE-667