Published: 09/07/2008 Updated: 13/02/2023

CVSS v2 Base Score: 7.2 | Impact Score: 10 | Exploitability Score: 3.9

CVSS v3 Base Score: 7.8 | Impact Score: 5.9 | Exploitability Score: 1.8

VMScore: 642

Vector: AV:L/AC:L/Au:N/C:C/I:C/A:C

The do_change_type function in fs/namespace.c in the Linux kernel prior to 2.6.22 does not verify that the caller has the CAP_SYS_ADMIN capability, which allows local users to gain privileges or cause a denial of service by modifying the properties of a mountpoint.

Vulnerable Product	Search on Vulmon	Subscribe to Product
linux linux kernel
debian debian linux 4.0
novell suse linux enterprise server 10.0
novell suse linux enterprise desktop 10.0
opensuse opensuse
canonical ubuntu linux 6.06
canonical ubuntu linux 7.04
canonical ubuntu linux 7.10
canonical ubuntu linux 8.04

Synopsis Important: kernel security and bug fix update Type/Severity Security Advisory: Important Topic Updated kernel packages that fix various security issues and several bugsare now available for Red Hat Enterprise Linux 5This update has been rated as having important security impact by the RedHat Secur ...

It was discovered that there were multiple NULL-pointer function dereferences in the Linux kernel terminal handling code A local attacker could exploit this to execute arbitrary code as root, or crash the system, leading to a denial of service (CVE-2008-2812) ...

Several vulnerabilities have been discovered in the Linux kernel that may lead to a denial of service or arbitrary code execution The Common Vulnerabilities and Exposures project identifies the following problems: CVE-2007-6282 Dirk Nehring discovered a vulnerability in the IPsec code that allows remote users to cause a denial of service ...

CWE-269 http://www.openwall.com/lists/oss-security/2008/07/08/3 http://www.openwall.com/lists/oss-security/2008/07/08/4 http://kernel.org/pub/linux/kernel/v2.6/ChangeLog-2.6.22 https://bugzilla.redhat.com/show_bug.cgi?id=454388 http://www.securityfocus.com/bid/30126 http://lists.opensuse.org/opensuse-security-announce/2008-07/msg00007.html http://lists.opensuse.org/opensuse-security-announce/2008-07/msg00012.html http://secunia.com/advisories/31614 http://www.redhat.com/support/errata/RHSA-2008-0885.html http://secunia.com/advisories/32023 http://secunia.com/advisories/31551 http://www.debian.org/security/2008/dsa-1630 http://lists.opensuse.org/opensuse-security-announce/2008-11/msg00001.html http://secunia.com/advisories/32759 http://lists.opensuse.org/opensuse-security-announce/2008-10/msg00003.html http://secunia.com/advisories/30982 https://exchange.xforce.ibmcloud.com/vulnerabilities/43696 https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A10437 https://usn.ubuntu.com/637-1/http://git.kernel.org/?p=linux/kernel/git/torvalds/linux-2.6.git%3Ba=commitdiff%3Bh=ee6f958291e2a768fd727e7a67badfff0b67711a https://access.redhat.com/errata/RHSA-2008:0885 https://usn.ubuntu.com/637-1/https://nvd.nist.gov

CVE-2008-2931

Vulnerability Summary

Vulnerability Trend

Vendor Advisories

References

Vulmon Search

About

Products

Connect