Vulmon Recent Vulnerabilities Research Posts Trends Blog About Contact
4.9
CVSSv2

CVE-2008-3535

Published: 08/08/2008 Updated: 31/07/2020
CVSS v2 Base Score: 4.9 | Impact Score: 6.9 | Exploitability Score: 3.9
VMScore: 436
Vector: AV:L/AC:L/Au:N/C:N/I:N/A:C
Subscribe to Linux

Vulnerability Summary

Off-by-one error in the iov_iter_advance function in mm/filemap.c in the Linux kernel prior to 2.6.27-rc2 allows local users to cause a denial of service (system crash) via a certain sequence of file I/O operations with readv and writev, as demonstrated by testcases/kernel/fs/ftest/ftest03 from the Linux Test Project.

Vulnerability Trend

Vulnerable Product Search on Vulmon Subscribe to Product

linux linux kernel

linux linux kernel 2.6.27

debian debian linux 4.0

canonical ubuntu linux 6.06

canonical ubuntu linux 7.10

canonical ubuntu linux 8.04

Vendor Advisories

Red Hat: Important: kernel security and bug fix update
Synopsis Important: kernel security and bug fix update Type/Severity Security Advisory: Important Topic Updated kernel packages that fix several security issues and several bugsare now available for Red Hat Enterprise MRG 10This update has been rated as having important security impact by the RedHat Secur ...
Ubuntu Security Notice: linux, linux-source-2.6.15⁄22 vulnerabilities
It was discovered that the direct-IO subsystem did not correctly validate certain structures A local attacker could exploit this to cause a system crash, leading to a denial of service (CVE-2007-6716) ...

References

CWE-193http://www.lkml.org/lkml/2008/7/30/446http://mirror.celinuxforum.org/gitstat/commit-detail.php?commit=94ad374a0751f40d25e22e036c37f7263569d24chttp://www.kernel.org/pub/linux/kernel/v2.6/testing/ChangeLog-2.6.27-rc2http://www.securityfocus.com/bid/31132http://www.debian.org/security/2008/dsa-1636http://secunia.com/advisories/31881http://www.redhat.com/support/errata/RHSA-2008-0857.htmlhttp://secunia.com/advisories/32190http://www.ubuntu.com/usn/usn-659-1http://secunia.com/advisories/32393https://exchange.xforce.ibmcloud.com/vulnerabilities/44492https://access.redhat.com/errata/RHSA-2008:0857https://usn.ubuntu.com/659-1/https://nvd.nist.gov
CVSSv3
CVSSv2
CVSSv3
VMScore
Recommendations:
deserializationCVE-2024-4040cross-site scriptingCVE-2023-25790CVE-2024-2961XML external entityCVE-2024-26926CVE-2024-32806CVE-2024-32711
Vulnerability Notification Service
You don’t have to wait for vulnerability scanning results
Get Started

Vulmon Search

Vulmon Search is a vulnerability search engine. It gives comprehensive vulnerability information through a very simple user interface.

About

Home Recent Vulnerabilities Research Posts Trends Blog About Contact

Products

Vulmon Search Vulmon Research Vulmon Alerts Vulmap

Connect

Twitter Reddit Linkedin Facebook