CVE-2009-4895

  1. OpenCVE
  2. Vulnerabilities (CVE)
  3. CVE-2009-4895
Race condition in the tty_fasync function in drivers/char/tty_io.c in the Linux kernel before 2.6.32.6 allows local users to cause a denial of service (NULL pointer dereference and system crash) or possibly have unspecified other impact via unknown vectors, related to the put_tty_queue and __f_setown functions. NOTE: the vulnerability was addressed in a different way in 2.6.32.9.

4.7 /10

CVSS v3 : MEDIUM

V3 Legend

Vector :

Exploitability : 1.0 / Impact : 3.6

Attack Vector LOCAL

Attack Complexity HIGH

Privileges Required LOW

User Interaction NONE

Confidentiality Impact NONE

Integrity Impact NONE

Availability Impact HIGH

Scope UNCHANGED

4.7 /10

CVSS v2.0 : MEDIUM

V2 Legend

Vector : AV:L/AC:M/Au:N/C:N/I:N/A:C

Exploitability : 3.4 / Impact : 6.9

Access Vector LOCAL

Access Complexity MEDIUM

Authentication NONE

Confidentiality Impact NONE

Integrity Impact NONE

Availability Impact COMPLETE

References
Link Resource
http://git.kernel.org/?p=linux/kernel/git/torvalds/linux-2.6.git%3Ba=commit%3Bh=703625118069f9f8960d356676662d3db5a9d116 Broken Link
http://www.debian.org/security/2010/dsa-2094 Third Party Advisory
http://www.kernel.org/pub/linux/kernel/v2.6/ChangeLog-2.6.32.6 Broken Link
http://www.openwall.com/lists/oss-security/2010/06/15/2 Mailing List Patch Third Party Advisory
http://www.openwall.com/lists/oss-security/2010/06/15/3 Mailing List Third Party Advisory
http://www.openwall.com/lists/oss-security/2010/06/15/4 Mailing List Third Party Advisory
http://www.openwall.com/lists/oss-security/2010/06/15/5 Mailing List Third Party Advisory
http://www.ubuntu.com/usn/USN-1000-1 Third Party Advisory
https://bugzilla.kernel.org/show_bug.cgi?id=14605 Issue Tracking Patch
https://bugzilla.redhat.com/show_bug.cgi?id=559100 Issue Tracking Third Party Advisory
http://git.kernel.org/?p=linux/kernel/git/torvalds/linux-2.6.git%3Ba=commit%3Bh=703625118069f9f8960d356676662d3db5a9d116 Broken Link
http://www.debian.org/security/2010/dsa-2094 Third Party Advisory
http://www.kernel.org/pub/linux/kernel/v2.6/ChangeLog-2.6.32.6 Broken Link
http://www.openwall.com/lists/oss-security/2010/06/15/2 Mailing List Patch Third Party Advisory
http://www.openwall.com/lists/oss-security/2010/06/15/3 Mailing List Third Party Advisory
http://www.openwall.com/lists/oss-security/2010/06/15/4 Mailing List Third Party Advisory
http://www.openwall.com/lists/oss-security/2010/06/15/5 Mailing List Third Party Advisory
http://www.ubuntu.com/usn/USN-1000-1 Third Party Advisory
https://bugzilla.kernel.org/show_bug.cgi?id=14605 Issue Tracking Patch
https://bugzilla.redhat.com/show_bug.cgi?id=559100 Issue Tracking Third Party Advisory
Configurations

Configuration 1 (hide)

cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*

Configuration 2 (hide)

cpe:2.3:o:debian:debian_linux:5.0:*:*:*:*:*:*:*

Configuration 3 (hide)

OR cpe:2.3:o:canonical:ubuntu_linux:6.06:*:*:*:*:*:*:*
cpe:2.3:o:canonical:ubuntu_linux:8.04:*:*:*:-:*:*:*
cpe:2.3:o:canonical:ubuntu_linux:9.04:*:*:*:*:*:*:*
cpe:2.3:o:canonical:ubuntu_linux:9.10:*:*:*:*:*:*:*
cpe:2.3:o:canonical:ubuntu_linux:10.04:*:*:*:-:*:*:*
cpe:2.3:o:canonical:ubuntu_linux:10.10:*:*:*:*:*:*:*
History

21 Nov 2024, 01:10

Type Values Removed Values Added
References () http://git.kernel.org/?p=linux/kernel/git/torvalds/linux-2.6.git%3Ba=commit%3Bh=703625118069f9f8960d356676662d3db5a9d116 - Broken Link () http://git.kernel.org/?p=linux/kernel/git/torvalds/linux-2.6.git%3Ba=commit%3Bh=703625118069f9f8960d356676662d3db5a9d116 - Broken Link
References () http://www.debian.org/security/2010/dsa-2094 - Third Party Advisory () http://www.debian.org/security/2010/dsa-2094 - Third Party Advisory
References () http://www.kernel.org/pub/linux/kernel/v2.6/ChangeLog-2.6.32.6 - Broken Link () http://www.kernel.org/pub/linux/kernel/v2.6/ChangeLog-2.6.32.6 - Broken Link
References () http://www.openwall.com/lists/oss-security/2010/06/15/2 - Mailing List, Patch, Third Party Advisory () http://www.openwall.com/lists/oss-security/2010/06/15/2 - Mailing List, Patch, Third Party Advisory
References () http://www.openwall.com/lists/oss-security/2010/06/15/3 - Mailing List, Third Party Advisory () http://www.openwall.com/lists/oss-security/2010/06/15/3 - Mailing List, Third Party Advisory
References () http://www.openwall.com/lists/oss-security/2010/06/15/4 - Mailing List, Third Party Advisory () http://www.openwall.com/lists/oss-security/2010/06/15/4 - Mailing List, Third Party Advisory
References () http://www.openwall.com/lists/oss-security/2010/06/15/5 - Mailing List, Third Party Advisory () http://www.openwall.com/lists/oss-security/2010/06/15/5 - Mailing List, Third Party Advisory
References () http://www.ubuntu.com/usn/USN-1000-1 - Third Party Advisory () http://www.ubuntu.com/usn/USN-1000-1 - Third Party Advisory
References () https://bugzilla.kernel.org/show_bug.cgi?id=14605 - Issue Tracking, Patch () https://bugzilla.kernel.org/show_bug.cgi?id=14605 - Issue Tracking, Patch
References () https://bugzilla.redhat.com/show_bug.cgi?id=559100 - Issue Tracking, Third Party Advisory () https://bugzilla.redhat.com/show_bug.cgi?id=559100 - Issue Tracking, Third Party Advisory

28 Dec 2023, 15:22

Type Values Removed Values Added
CVSS v2 : 4.7
v3 : unknown 		v2 : 4.7
v3 : 4.7
References () http://git.kernel.org/?p=linux/kernel/git/torvalds/linux-2.6.git%3Ba=commit%3Bh=703625118069f9f8960d356676662d3db5a9d116 - () http://git.kernel.org/?p=linux/kernel/git/torvalds/linux-2.6.git%3Ba=commit%3Bh=703625118069f9f8960d356676662d3db5a9d116 - Broken Link
CWE CWE-476

07 Nov 2023, 02:04

Type Values Removed Values Added
References
  • {'url': 'http://git.kernel.org/?p=linux/kernel/git/torvalds/linux-2.6.git;a=commit;h=703625118069f9f8960d356676662d3db5a9d116', 'name': 'http://git.kernel.org/?p=linux/kernel/git/torvalds/linux-2.6.git;a=commit;h=703625118069f9f8960d356676662d3db5a9d116', 'tags': ['Patch', 'Vendor Advisory'], 'refsource': 'CONFIRM'}
  • () http://git.kernel.org/?p=linux/kernel/git/torvalds/linux-2.6.git%3Ba=commit%3Bh=703625118069f9f8960d356676662d3db5a9d116 -
Information

Published : 2010-09-08 20:00

Updated : 2024-11-21 01:10

NVD link : CVE-2009-4895

Mitre link : CVE-2009-4895

CVE.ORG link : CVE-2009-4895

JSON object : View

Products Affected

debian

  • debian_linux

linux

  • linux_kernel

canonical

  • ubuntu_linux
CWE
CWE-362

Concurrent Execution using Shared Resource with Improper Synchronization ('Race Condition')

CWE-476

NULL Pointer Dereference


NetmanageIT Website NetmanageIT OSINT Web NetmanageIT OpenCTI NetmanageIT PDF Tools NetmanageIT CTO Corner Blog NetmanageIT Email Header Analyzer NetmanageIT Password Pusher NetmanageIT Internet Health and Latency Dashboard NetmanageIT Dedicated Speed Test Site NetmanageIT Ubuntu Mirror 10Gbps Copyright OpenCVE 2024