Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

redhat логотип

CVE-2009-3620

Опубликовано: 30 авг. 2009
Источник: redhat
CVSS2: 4.9

Описание

The ATI Rage 128 (aka r128) driver in the Linux kernel before 2.6.31-git11 does not properly verify Concurrent Command Engine (CCE) state initialization, which allows local users to cause a denial of service (NULL pointer dereference and system crash) or possibly gain privileges via unspecified ioctl calls.

Дополнительная информация

Статус:

Moderate
Дефект:
CWE-476
https://bugzilla.redhat.com/show_bug.cgi?id=529597kernel: r128 IOCTL NULL pointer dereferences when CCE state is uninitialised

4.9 Medium

CVSS2

Связанные уязвимости

CVSS3: 7.8
ubuntu
около 16 лет назад

The ATI Rage 128 (aka r128) driver in the Linux kernel before 2.6.31-git11 does not properly verify Concurrent Command Engine (CCE) state initialization, which allows local users to cause a denial of service (NULL pointer dereference and system crash) or possibly gain privileges via unspecified ioctl calls.

CVSS3: 7.8
nvd
около 16 лет назад

The ATI Rage 128 (aka r128) driver in the Linux kernel before 2.6.31-git11 does not properly verify Concurrent Command Engine (CCE) state initialization, which allows local users to cause a denial of service (NULL pointer dereference and system crash) or possibly gain privileges via unspecified ioctl calls.

CVSS3: 7.8
debian
около 16 лет назад

The ATI Rage 128 (aka r128) driver in the Linux kernel before 2.6.31-g ...

CVSS3: 7.8
github
больше 3 лет назад

The ATI Rage 128 (aka r128) driver in the Linux kernel before 2.6.31-git11 does not properly verify Concurrent Command Engine (CCE) state initialization, which allows local users to cause a denial of service (NULL pointer dereference and system crash) or possibly gain privileges via unspecified ioctl calls.

oracle-oval
почти 16 лет назад

ELSA-2009-1670: kernel security and bug fix update (IMPORTANT)

4.9 Medium

CVSS2