admin/nvd-json-data-feeds
1
0
Fork 0
mirror of https://github.com/fkie-cad/nvd-json-data-feeds.git synced 2025-05-29 01:31:20 +00:00
Code Issues Packages Projects Releases Wiki Activity
nvd-json-data-feeds/CVE-2009/CVE-2009-27xx/CVE-2009-2768.json

289 lines
8.6 KiB
JSON
Raw Normal View History

bootstrap
2023-04-24 12:24:31 +02:00
{
"id": "CVE-2009-2768",
"sourceIdentifier": "cve@mitre.org",
"published": "2009-08-14T15:16:27.657",
Auto-Update: 2024-11-22T11:10:47.014226+00:00
2024-11-22 11:14:00 +00:00
"lastModified": "2024-11-21T01:05:41.307",
"vulnStatus": "Modified",
Auto-Update: 2024-12-08T03:00:18.988682+00:00
2024-12-08 03:06:42 +00:00
"cveTags": [],
bootstrap
2023-04-24 12:24:31 +02:00
"descriptions": [
{
"lang": "en",
"value": "The load_flat_shared_library function in fs/binfmt_flat.c in the flat subsystem in the Linux kernel before 2.6.31-rc6 allows local users to cause a denial of service (NULL pointer dereference and system crash) or possibly have unspecified other impact by executing a shared flat binary, which triggers an access of an \"uninitialized cred pointer.\""
},
{
"lang": "es",
"value": "La funci\u00f3n load_flat_shared_library en el archivo fs/binfmt_flat.c en el subsistema flat en el kernel de Linux anterior a versi\u00f3n 2.6.31-rc6, permite a los usuarios locales causar una denegaci\u00f3n de servicio (desreferencia de un puntero NULL y bloqueo del sistema) o posiblemente tener otro impacto no especificado mediante la ejecuci\u00f3n de un binario flat compartido, que activa el acceso de un \"uninitialized cred pointer.\""
}
],
"metrics": {
"cvssMetricV31": [
{
"source": "nvd@nist.gov",
"type": "Primary",
"cvssData": {
"version": "3.1",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
Auto-Update: 2024-11-22T11:10:47.014226+00:00
2024-11-22 11:14:00 +00:00
"baseScore": 7.8,
"baseSeverity": "HIGH",
bootstrap
2023-04-24 12:24:31 +02:00
"attackVector": "LOCAL",
"attackComplexity": "LOW",
"privilegesRequired": "LOW",
"userInteraction": "NONE",
"scope": "UNCHANGED",
"confidentialityImpact": "HIGH",
"integrityImpact": "HIGH",
Auto-Update: 2024-11-22T11:10:47.014226+00:00
2024-11-22 11:14:00 +00:00
"availabilityImpact": "HIGH"
bootstrap
2023-04-24 12:24:31 +02:00
},
"exploitabilityScore": 1.8,
"impactScore": 5.9
}
],
"cvssMetricV2": [
{
"source": "nvd@nist.gov",
"type": "Primary",
"cvssData": {
"version": "2.0",
"vectorString": "AV:L/AC:L/Au:N/C:C/I:C/A:C",
Auto-Update: 2024-11-22T11:10:47.014226+00:00
2024-11-22 11:14:00 +00:00
"baseScore": 7.2,
bootstrap
2023-04-24 12:24:31 +02:00
"accessVector": "LOCAL",
"accessComplexity": "LOW",
"authentication": "NONE",
"confidentialityImpact": "COMPLETE",
"integrityImpact": "COMPLETE",
Auto-Update: 2024-11-22T11:10:47.014226+00:00
2024-11-22 11:14:00 +00:00
"availabilityImpact": "COMPLETE"
bootstrap
2023-04-24 12:24:31 +02:00
},
"baseSeverity": "HIGH",
"exploitabilityScore": 3.9,
"impactScore": 10.0,
"acInsufInfo": false,
"obtainAllPrivilege": false,
"obtainUserPrivilege": false,
"obtainOtherPrivilege": false,
"userInteractionRequired": false
}
]
},
"weaknesses": [
{
"source": "nvd@nist.gov",
"type": "Primary",
"description": [
{
"lang": "en",
"value": "CWE-476"
Auto-Update: 2024-02-09T05:00:25.262408+00:00
2024-02-09 05:00:29 +00:00
},
{
"lang": "en",
"value": "CWE-824"
bootstrap
2023-04-24 12:24:31 +02:00
}
]
}
],
"configurations": [
{
"nodes": [
{
"operator": "OR",
"negate": false,
"cpeMatch": [
{
"vulnerable": true,
"criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
Auto-Update: 2024-02-09T05:00:25.262408+00:00
2024-02-09 05:00:29 +00:00
"versionEndExcluding": "2.6.31",
"matchCriteriaId": "AE1BA972-91FE-417F-B0AD-D3067DA8C96F"
bootstrap
2023-04-24 12:24:31 +02:00
},
{
"vulnerable": true,
"criteria": "cpe:2.3:o:linux:linux_kernel:2.6.31:rc1:*:*:*:*:*:*",
"matchCriteriaId": "29C4A364-ED36-4AC8-AD1E-8BD18DD9324D"
},
{
"vulnerable": true,
"criteria": "cpe:2.3:o:linux:linux_kernel:2.6.31:rc2:*:*:*:*:*:*",
"matchCriteriaId": "4049867A-E3B2-4DC1-8966-0477E6A5D582"
},
{
"vulnerable": true,
"criteria": "cpe:2.3:o:linux:linux_kernel:2.6.31:rc3:*:*:*:*:*:*",
"matchCriteriaId": "A2507858-675B-4DA2-A49E-00DB54700CF3"
},
{
"vulnerable": true,
"criteria": "cpe:2.3:o:linux:linux_kernel:2.6.31:rc4:*:*:*:*:*:*",
"matchCriteriaId": "0A25EA55-3F1C-440C-A383-0BB9556C9508"
},
{
"vulnerable": true,
"criteria": "cpe:2.3:o:linux:linux_kernel:2.6.31:rc5:*:*:*:*:*:*",
"matchCriteriaId": "B2665356-4EF5-4543-AD15-67FDB851DCCD"
}
]
}
]
}
],
"references": [
{
Auto-Update: 2023-11-07T21:02:52.274489+00:00
2023-11-07 21:03:21 +00:00
"url": "http://git.kernel.org/?p=linux/kernel/git/torvalds/linux-2.6.git%3Ba=commit%3Bh=3440625d78711bee41a84cf29c3d8c579b522666",
Auto-Update: 2024-02-09T05:00:25.262408+00:00
2024-02-09 05:00:29 +00:00
"source": "cve@mitre.org",
"tags": [
"Broken Link"
]
Auto-Update: 2023-11-07T21:02:52.274489+00:00
2023-11-07 21:03:21 +00:00
},
{
"url": "http://lkml.org/lkml/2009/6/22/91",
bootstrap
2023-04-24 12:24:31 +02:00
"source": "cve@mitre.org",
"tags": [
"Mailing List",
"Patch",
Auto-Update: 2023-11-07T21:02:52.274489+00:00
2023-11-07 21:03:21 +00:00
"Third Party Advisory"
bootstrap
2023-04-24 12:24:31 +02:00
]
},
{
Auto-Update: 2023-11-07T21:02:52.274489+00:00
2023-11-07 21:03:21 +00:00
"url": "http://secunia.com/advisories/36278",
bootstrap
2023-04-24 12:24:31 +02:00
"source": "cve@mitre.org",
"tags": [
Auto-Update: 2023-11-07T21:02:52.274489+00:00
2023-11-07 21:03:21 +00:00
"Broken Link"
]
},
{
"url": "http://thread.gmane.org/gmane.linux.hardware.blackfin.kernel.devel/1905",
"source": "cve@mitre.org",
"tags": [
"Broken Link"
]
},
{
"url": "http://www.kernel.org/pub/linux/kernel/v2.6/ChangeLog-2.6.30.5",
"source": "cve@mitre.org",
"tags": [
"Broken Link"
]
},
{
"url": "http://www.kernel.org/pub/linux/kernel/v2.6/testing/ChangeLog-2.6.31-rc6",
"source": "cve@mitre.org",
"tags": [
"Broken Link"
]
},
{
"url": "http://www.mandriva.com/security/advisories?name=MDVSA-2011:051",
"source": "cve@mitre.org",
"tags": [
"Broken Link"
bootstrap
2023-04-24 12:24:31 +02:00
]
},
{
"url": "http://www.openwall.com/lists/oss-security/2009/08/13/1",
"source": "cve@mitre.org",
"tags": [
"Mailing List",
"Patch",
"Third Party Advisory"
]
},
{
"url": "http://www.securityfocus.com/bid/36037",
"source": "cve@mitre.org",
"tags": [
Auto-Update: 2024-02-09T05:00:25.262408+00:00
2024-02-09 05:00:29 +00:00
"Broken Link",
bootstrap
2023-04-24 12:24:31 +02:00
"Third Party Advisory",
"VDB Entry"
]
},
{
"url": "https://exchange.xforce.ibmcloud.com/vulnerabilities/52909",
"source": "cve@mitre.org",
"tags": [
"Third Party Advisory",
"VDB Entry"
]
Auto-Update: 2024-11-22T11:10:47.014226+00:00
2024-11-22 11:14:00 +00:00
},
{
"url": "http://git.kernel.org/?p=linux/kernel/git/torvalds/linux-2.6.git%3Ba=commit%3Bh=3440625d78711bee41a84cf29c3d8c579b522666",
"source": "af854a3a-2127-422b-91ae-364da2661108",
"tags": [
"Broken Link"
]
},
{
"url": "http://lkml.org/lkml/2009/6/22/91",
"source": "af854a3a-2127-422b-91ae-364da2661108",
"tags": [
"Mailing List",
"Patch",
"Third Party Advisory"
]
},
{
"url": "http://secunia.com/advisories/36278",
"source": "af854a3a-2127-422b-91ae-364da2661108",
"tags": [
"Broken Link"
]
},
{
"url": "http://thread.gmane.org/gmane.linux.hardware.blackfin.kernel.devel/1905",
"source": "af854a3a-2127-422b-91ae-364da2661108",
"tags": [
"Broken Link"
]
},
{
"url": "http://www.kernel.org/pub/linux/kernel/v2.6/ChangeLog-2.6.30.5",
"source": "af854a3a-2127-422b-91ae-364da2661108",
"tags": [
"Broken Link"
]
},
{
"url": "http://www.kernel.org/pub/linux/kernel/v2.6/testing/ChangeLog-2.6.31-rc6",
"source": "af854a3a-2127-422b-91ae-364da2661108",
"tags": [
"Broken Link"
]
},
{
"url": "http://www.mandriva.com/security/advisories?name=MDVSA-2011:051",
"source": "af854a3a-2127-422b-91ae-364da2661108",
"tags": [
"Broken Link"
]
},
{
"url": "http://www.openwall.com/lists/oss-security/2009/08/13/1",
"source": "af854a3a-2127-422b-91ae-364da2661108",
"tags": [
"Mailing List",
"Patch",
"Third Party Advisory"
]
},
{
"url": "http://www.securityfocus.com/bid/36037",
"source": "af854a3a-2127-422b-91ae-364da2661108",
"tags": [
"Broken Link",
"Third Party Advisory",
"VDB Entry"
]
},
{
"url": "https://exchange.xforce.ibmcloud.com/vulnerabilities/52909",
"source": "af854a3a-2127-422b-91ae-364da2661108",
"tags": [
"Third Party Advisory",
"VDB Entry"
]
}
],
"vendorComments": [
{
"organization": "Red Hat",
"comment": "Not vulnerable. This issue did not affect the versions of Linux kernel as shipped with Red Hat Enterprise Linux 3, 4, 5 or Red Hat Enterprise MRG. Red Hat does not provide support for flat binary support, and additionally this issue only affected kernels version 2.6.29-rc1 and later.",
"lastModified": "2009-08-18T00:00:00"
bootstrap
2023-04-24 12:24:31 +02:00
}
]
}
Reference in New Issue Copy Permalink