Published: 12/02/2008 Updated: 15/10/2018

CVSS v2 Base Score: 2.1 | Impact Score: 2.9 | Exploitability Score: 3.9

VMScore: 220

Vector: AV:L/AC:L/Au:N/C:P/I:N/A:N

The vmsplice_to_user function in fs/splice.c in the Linux kernel 2.6.22 up to and including 2.6.24 does not validate a certain userspace pointer before dereference, which might allow local users to access arbitrary kernel memory locations.

Vulnerable Product	Search on Vulmon	Subscribe to Product
linux linux kernel 2.6.22
linux linux kernel 2.6.22.7
linux linux kernel 2.6.23.5
linux linux kernel 2.6.23.6
linux linux kernel 2.6.23.7
linux linux kernel 2.6.22.1
linux linux kernel 2.6.22.16
linux linux kernel 2.6.23
linux linux kernel 2.6.23.1
linux linux kernel 2.6.23.9
linux linux kernel 2.6.22.5
linux linux kernel 2.6.22.6
linux linux kernel 2.6.23.3
linux linux kernel 2.6.23.4
linux linux kernel 2.6.24
linux linux kernel 2.6.22.3
linux linux kernel 2.6.22.4
linux linux kernel 2.6.23.14
linux linux kernel 2.6.23.2

/* * diane_lane_fucked_hardc * * Linux vmsplice Local Root Exploit * By qaaz * * Linux 2623 - 2624 */ #define _GNU_SOURCE #include <stdioh> #include <errnoh> #include <stdlibh> #include <stringh> #include <unistdh> #include <sys/uioh> #define TARGET_PATTERN " sys_vm86old" #define TARGET_SYSCAL ...

/* * jessica_biel_naked_in_my_bedc * * Dovalim z knajpy a cumim ze Wojta zas nema co robit, kura * Gizdi, tutaj mate cosyk na hrani, kym aj totok vykeca * Stejnak je to stare jak cyp a aj jakesyk rozbite * * Linux vmsplice Local Root Exploit * By qaaz * * Linux 2617 - 26241 * * This is quite old code and I had to rewrite it to ...

CWE-20 http://isec.pl/vulnerabilities/isec-0026-vmsplice_to_kernel.txt http://www.kernel.org/pub/linux/kernel/v2.6/ChangeLog-2.6.24.1 https://bugzilla.redhat.com/show_bug.cgi?id=431206 https://www.redhat.com/archives/fedora-package-announce/2008-February/msg00254.html https://www.redhat.com/archives/fedora-package-announce/2008-February/msg00255.html http://www.securityfocus.com/bid/27704 http://secunia.com/advisories/28835 http://secunia.com/advisories/28896 http://www.securityfocus.com/bid/27799 http://www.vupen.com/english/advisories/2008/0487/references http://www.securityfocus.com/archive/1/487982/100/0/threaded https://nvd.nist.gov https://www.exploit-db.com/exploits/5093/

CVE-2008-0009

Vulnerability Summary

Exploits

References

Vulmon Search

About

Products

Connect