CVE-2008-2944

Double free vulnerability in the utrace support in the Linux kernel, probably 2.6.18, in Red Hat Enterprise Linux (RHEL) 5 and Fedora Core 6 (FC6) allows local users to cause a denial of service (oops), as demonstrated by a crash when running the GNU GDB testsuite, a different vulnerability than CVE-2008-2365.

CVSS v2.0 4.9 MEDIUM

4.9^/10

CVSS v2.0 : MEDIUM

Vector : AV:L/AC:L/Au:N/C:N/I:N/A:C

Exploitability : 3.9 / Impact : 6.9

Access Vector LOCAL

Access Complexity LOW

Authentication NONE

Confidentiality Impact NONE

Integrity Impact NONE

Availability Impact COMPLETE

References

Link	Resource
https://bugzilla.redhat.com/show_bug.cgi?id=207002	Issue Tracking Vendor Advisory
https://bugzilla.redhat.com/show_bug.cgi?id=449359	Exploit Issue Tracking Vendor Advisory
https://exchange.xforce.ibmcloud.com/vulnerabilities/43556	Third Party Advisory VDB Entry
https://bugzilla.redhat.com/show_bug.cgi?id=207002	Issue Tracking Vendor Advisory
https://bugzilla.redhat.com/show_bug.cgi?id=449359	Exploit Issue Tracking Vendor Advisory
https://exchange.xforce.ibmcloud.com/vulnerabilities/43556	Third Party Advisory VDB Entry

Configurations

Configuration 1 (hide)

OR	cpe:2.3:o:fedoraproject:fedora_core:6:::::::*
	cpe:2.3:o:linux:linux_kernel:2.6.18:-::::::
	cpe:2.3:o:redhat:enterprise_linux:5.0:::::::*

History

21 Nov 2024, 00:48

Type	Values Removed	Values Added
References	~~() https://bugzilla.redhat.com/show_bug.cgi?id=207002 - Issue Tracking, Vendor Advisory~~	() https://bugzilla.redhat.com/show_bug.cgi?id=207002 - Issue Tracking, Vendor Advisory
References	~~() https://bugzilla.redhat.com/show_bug.cgi?id=449359 - Exploit, Issue Tracking, Vendor Advisory~~	() https://bugzilla.redhat.com/show_bug.cgi?id=449359 - Exploit, Issue Tracking, Vendor Advisory
References	~~() https://exchange.xforce.ibmcloud.com/vulnerabilities/43556 - Third Party Advisory, VDB Entry~~	() https://exchange.xforce.ibmcloud.com/vulnerabilities/43556 - Third Party Advisory, VDB Entry

Information

Published : 2008-06-30 21:41

Updated : 2024-11-21 00:48

NVD link : CVE-2008-2944

Mitre link : CVE-2008-2944

CVE.ORG link : CVE-2008-2944

JSON object : View

Products Affected

linux

linux_kernel

redhat

enterprise_linux

fedoraproject

fedora_core

CWE

CWE-415

Double Free

{"id": "CVE-2008-2944", "metrics": {"cvssMetricV2": [{"type": "Primary", "source": "nvd@nist.gov", "cvssData": {"version": "2.0", "baseScore": 4.9, "accessVector": "LOCAL", "vectorString": "AV:L/AC:L/Au:N/C:N/I:N/A:C", "authentication": "NONE", "integrityImpact": "NONE", "accessComplexity": "LOW", "availabilityImpact": "COMPLETE", "confidentialityImpact": "NONE"}, "acInsufInfo": false, "impactScore": 6.9, "baseSeverity": "MEDIUM", "obtainAllPrivilege": false, "exploitabilityScore": 3.9, "obtainUserPrivilege": false, "obtainOtherPrivilege": false, "userInteractionRequired": false}]}, "published": "2008-06-30T21:41:00.000", "references": [{"url": "https://bugzilla.redhat.com/show_bug.cgi?id=207002", "tags": ["Issue Tracking", "Vendor Advisory"], "source": "cve@mitre.org"}, {"url": "https://bugzilla.redhat.com/show_bug.cgi?id=449359", "tags": ["Exploit", "Issue Tracking", "Vendor Advisory"], "source": "cve@mitre.org"}, {"url": "https://exchange.xforce.ibmcloud.com/vulnerabilities/43556", "tags": ["Third Party Advisory", "VDB Entry"], "source": "cve@mitre.org"}, {"url": "https://bugzilla.redhat.com/show_bug.cgi?id=207002", "tags": ["Issue Tracking", "Vendor Advisory"], "source": "af854a3a-2127-422b-91ae-364da2661108"}, {"url": "https://bugzilla.redhat.com/show_bug.cgi?id=449359", "tags": ["Exploit", "Issue Tracking", "Vendor Advisory"], "source": "af854a3a-2127-422b-91ae-364da2661108"}, {"url": "https://exchange.xforce.ibmcloud.com/vulnerabilities/43556", "tags": ["Third Party Advisory", "VDB Entry"], "source": "af854a3a-2127-422b-91ae-364da2661108"}], "vulnStatus": "Modified", "weaknesses": [{"type": "Primary", "source": "nvd@nist.gov", "description": [{"lang": "en", "value": "CWE-415"}]}], "descriptions": [{"lang": "en", "value": "Double free vulnerability in the utrace support in the Linux kernel, probably 2.6.18, in Red Hat Enterprise Linux (RHEL) 5 and Fedora Core 6 (FC6) allows local users to cause a denial of service (oops), as demonstrated by a crash when running the GNU GDB testsuite, a different vulnerability than CVE-2008-2365."}, {"lang": "es", "value": "Vulnerabilidad de doble liberaci\u00f3n en el soporte utrace del n\u00facleo de Linux, probablemente de 2.6.18, en Red Hat Enterprise Linux (RHEL) 5 y Fedora Core 6 (FC6) permite a usuarios locales provocar una denegaci\u00f3n de servicio (OOPS), como lo demostrado por una ca\u00edda cuando se est\u00e1 ejecutando la testsuite GNU GDB, una vulnerabilidad diferente a CVE-2008-2365."}], "lastModified": "2024-11-21T00:48:04.440", "configurations": [{"nodes": [{"negate": false, "cpeMatch": [{"criteria": "cpe:2.3:o:fedoraproject:fedora_core:6:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "B77298D3-CFD9-4DF0-954E-090A830256B8"}, {"criteria": "cpe:2.3:o:linux:linux_kernel:2.6.18:-:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "27C7E25A-EC60-460D-8662-016437F7C0FB"}, {"criteria": "cpe:2.3:o:redhat:enterprise_linux:5.0:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "1D8B549B-E57B-4DFE-8A13-CAB06B5356B3"}], "operator": "OR"}]}], "sourceIdentifier": "cve@mitre.org"}