CVE-2008-2944

Common vulnerabilities & exposures (CVE)

CVE database CVE database blogpost Release & EoL database

Published at: - 30-06-2008 11:41

Last modified: - 07-02-2022 08:50

Total changes: - 2

Description

Double free vulnerability in the utrace support in the Linux kernel, probably 2.6.18, in Red Hat Enterprise Linux (RHEL) 5 and Fedora Core 6 (FC6) allows local users to cause a denial of service (oops), as demonstrated by a crash when running the GNU GDB testsuite, a different vulnerability than CVE-2008-2365.

Common Vulnerability Scoring System (CVSS)

AV:L/AC:L/Au:N/C:N/I:N/A:C

Low

Attack complexity

Local

Attack vector

High

Availability

None

Confidentiality

None

Integrity

Privileges required

Scope

User interaction

4.9

Base score

3.9

6.9

Exploitability score

Impact score

Verification logic

vendor=fedoraproject AND product=fedora_core AND version=6

vendor=linux AND product=linux_kernel AND version=2.6.18 AND update=-

vendor=Red Hat Enterprise Linux AND product=enterprise_linux AND version=5.0

Reference

https://bugzilla.redhat.com/show_bug.cgi?id=207002
https://bugzilla.redhat.com/show_bug.cgi?id=449359
linux-kernel-utrace-dos(43556)-Third Party Advisory, VDB Entry

Keywords

CVE-2008-2944

Common vulnerabilities & exposures (CVE)

Description

Common Vulnerability Scoring System (CVSS)

Verification logic

Reference

NVD

CVE-2008-2944

CVE

Common vulnerabilities & exposures

CVSS

Common vulnerability scoring system

Security

Vulnerabilities

Exposures