Published: 06/03/2009 Updated: 19/03/2012

CVSS v2 Base Score: 3.6 | Impact Score: 4.9 | Exploitability Score: 3.9

VMScore: 365

Vector: AV:L/AC:L/Au:N/C:P/I:P/A:N

The __secure_computing function in kernel/seccomp.c in the seccomp subsystem in the Linux kernel 2.6.28.7 and previous versions on the x86_64 platform, when CONFIG_SECCOMP is enabled, does not properly handle (1) a 32-bit process making a 64-bit syscall or (2) a 64-bit process making a 32-bit syscall, which allows local users to bypass intended access restrictions via crafted syscalls that are misinterpreted as (a) stat or (b) chmod, a related issue to CVE-2009-0342 and CVE-2009-0343.

Vulnerable Product	Search on Vulmon	Subscribe to Product
linux linux kernel 2.6.25
linux linux kernel 2.6.25.10
linux linux kernel 2.6.25.3
linux linux kernel 2.6.25.4
linux linux kernel 2.6.25.5
linux linux kernel 2.6.25.6
linux linux kernel 2.6.25.12
linux linux kernel 2.6.25.11
linux linux kernel 2.6.25.9
linux linux kernel 2.6.25.1
linux linux kernel 2.6.25.2
linux linux kernel 2.6.25.7
linux linux kernel 2.6.25.8

NFS did not correctly handle races between fcntl and interrupts A local attacker on an NFS mount could consume unlimited kernel memory, leading to a denial of service (CVE-2008-4307) ...

NFS did not correctly handle races between fcntl and interrupts A local attacker on an NFS mount could consume unlimited kernel memory, leading to a denial of service Ubuntu 810 was not affected (CVE-2008-4307) ...

/* source: wwwsecurityfocuscom/bid/33948/info The Linux kernel is prone to a local security-bypass vulnerability A local attacker may be able to exploit this issue to bypass access control and make restricted system calls, which may result in an elevation of privileges */ /* test case for seccomp circumvention on x86-64 There ar ...

CWE-264 http://secunia.com/advisories/34084 http://scary.beasts.org/security/CESA-2009-001.html http://marc.info/?l=linux-kernel&m=123579069630311&w=2 http://marc.info/?l=linux-kernel&m=123579056530191&w=2 http://scary.beasts.org/security/CESA-2009-004.html http://scarybeastsecurity.blogspot.com/2009/02/linux-kernel-minor-seccomp.html https://bugzilla.redhat.com/show_bug.cgi?id=487255 http://marc.info/?l=oss-security&m=123597627132485&w=2 http://www.securityfocus.com/bid/33948 http://lkml.org/lkml/2009/2/28/23 http://www.ubuntu.com/usn/usn-751-1 http://secunia.com/advisories/34786 http://lists.opensuse.org/opensuse-security-announce/2009-04/msg00007.html http://secunia.com/advisories/34917 http://www.redhat.com/support/errata/RHSA-2009-0451.html http://www.debian.org/security/2009/dsa-1800 http://lists.opensuse.org/opensuse-security-announce/2009-05/msg00002.html http://secunia.com/advisories/35121 http://www.mandriva.com/security/advisories?name=MDVSA-2009:118 http://secunia.com/advisories/35185 http://secunia.com/advisories/35390 http://lists.opensuse.org/opensuse-security-announce/2009-06/msg00001.html http://lists.opensuse.org/opensuse-security-announce/2009-06/msg00000.html http://secunia.com/advisories/35394 https://nvd.nist.gov https://usn.ubuntu.com/752-1/https://www.exploit-db.com/exploits/32829/

CVE-2009-0835

Vulnerability Summary

Vendor Advisories

Exploits

References

Vulmon Search

About

Products

Connect