4.9
CVSSv2

CVE-2008-5300

Published: 01/12/2008 Updated: 11/10/2018
CVSS v2 Base Score: 4.9 | Impact Score: 6.9 | Exploitability Score: 3.9
VMScore: 436
Vector: AV:L/AC:L/Au:N/C:N/I:N/A:C

Vulnerability Summary

Linux kernel 2.6.28 allows local users to cause a denial of service ("soft lockup" and process loss) via a large number of sendmsg function calls, which does not block during AF_UNIX garbage collection and triggers an OOM condition, a different vulnerability than CVE-2008-5029.

Vulnerable Product Search on Vulmon Subscribe to Product

linux linux kernel 2.6.28

Vendor Advisories

Hugo Dias discovered that the ATM subsystem did not correctly manage socket counts A local attacker could exploit this to cause a system hang, leading to a denial of service (CVE-2008-5079) ...
Hugo Dias discovered that the ATM subsystem did not correctly manage socket counts A local attacker could exploit this to cause a system hang, leading to a denial of service (CVE-2008-5079) ...
Synopsis Important: kernel security and bug fix update Type/Severity Security Advisory: Important Topic Updated kernel packages that resolve several security issues and fixvarious bugs are now available for Red Hat Enterprise Linux 4This update has been rated as having important security impact by the RedH ...
Synopsis Important: Red Hat Enterprise Linux 53 kernel security and bug fix update Type/Severity Security Advisory: Important Topic Updated kernel packages that fix three security issues, address severalhundred bugs and add numerous enhancements are now available as part of theongoing support and maintenan ...
Synopsis Important: kernel-rt security and bug fix update Type/Severity Security Advisory: Important Topic Updated kernel packages that fix several security issues and several bugsare now available for Red Hat Enterprise MRG 11This update has been rated as having important security impact by the RedHat Se ...
Synopsis Important: kernel security update Type/Severity Security Advisory: Important Topic Updated kernel packages that resolve several security issues are nowavailable for Red Hat Enterprise Linux 52 Extended Update SupportThis update has been rated as having important security impact by the RedHat Secu ...
Several vulnerabilities have been discovered in the Linux kernel that may lead to a denial of service or privilege escalation The Common Vulnerabilities and Exposures project identifies the following problems: CVE-2008-3527 Tavis Ormandy reported a local DoS and potential privilege escalation in the Virtual Dynamic Shared Objects (vDSO) ...

References

CWE-399http://marc.info/?l=linux-netdev&m=122721862313564&w=2http://marc.info/?l=linux-netdev&m=122765505415944&w=2https://bugzilla.redhat.com/show_bug.cgi?id=470201http://secunia.com/advisories/32913https://issues.rpath.com/browse/RPL-2915http://wiki.rpath.com/wiki/Advisories:rPSA-2008-0332http://www.debian.org/security/2008/dsa-1681http://secunia.com/advisories/32998http://securityreason.com/securityalert/4673http://secunia.com/advisories/33706http://secunia.com/advisories/33756http://www.ubuntu.com/usn/usn-715-1http://secunia.com/advisories/33556http://www.redhat.com/support/errata/RHSA-2009-0014.htmlhttp://www.mandriva.com/security/advisories?name=MDVSA-2009:032http://www.redhat.com/support/errata/RHSA-2009-0053.htmlhttp://secunia.com/advisories/33854http://secunia.com/advisories/33348https://www.redhat.com/archives/fedora-package-announce/2008-December/msg01358.htmlhttp://secunia.com/advisories/33083http://osvdb.org/50272http://www.securityfocus.com/bid/32516http://bugzilla.redhat.com/bugzilla/show_bug.cgi?id=473259https://rhn.redhat.com/errata/RHSA-2009-1550.htmlhttps://exchange.xforce.ibmcloud.com/vulnerabilities/46943https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A11427https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A10283https://usn.ubuntu.com/714-1/http://www.securityfocus.com/archive/1/512019/100/0/threadedhttp://www.securityfocus.com/archive/1/499044/100/0/threadedhttps://nvd.nist.govhttps://usn.ubuntu.com/715-1/