Published: 09/03/2009 Updated: 07/11/2023

CVSS v2 Base Score: 4.7 | Impact Score: 6.9 | Exploitability Score: 3.4

VMScore: 419

Vector: AV:L/AC:M/Au:N/C:N/I:N/A:C

The shm_get_stat function in ipc/shm.c in the shm subsystem in the Linux kernel prior to 2.6.28.5, when CONFIG_SHMEM is disabled, misinterprets the data type of an inode, which allows local users to cause a denial of service (system hang) via an SHM_INFO shmctl call, as demonstrated by running the ipcs program.

Vulnerable Product	Search on Vulmon	Subscribe to Product
linux linux kernel

NFS did not correctly handle races between fcntl and interrupts A local attacker on an NFS mount could consume unlimited kernel memory, leading to a denial of service (CVE-2008-4307) ...

NFS did not correctly handle races between fcntl and interrupts A local attacker on an NFS mount could consume unlimited kernel memory, leading to a denial of service Ubuntu 810 was not affected (CVE-2008-4307) ...

Several vulnerabilities have been discovered in the Linux kernel that may lead to a denial of service or privilege escalation The Common Vulnerabilities and Exposures project identifies the following problems: CVE-2008-4307 Bryn M Reeves reported a denial of service in the NFS filesystem Local users can trigger a kernel BUG() due to a r ...

CWE-20 http://openwall.com/lists/oss-security/2009/03/06/1 http://kernel.org/pub/linux/kernel/v2.6/ChangeLog-2.6.28.5 http://patchwork.kernel.org/patch/6554/http://www.securityfocus.com/bid/34020 http://marc.info/?l=git-commits-head&m=123387479500599&w=2 http://marc.info/?l=linux-kernel&m=123309645625549&w=2 http://marc.info/?l=linux-kernel&m=120428209704324&w=2 http://www.ubuntu.com/usn/usn-751-1 http://secunia.com/advisories/34981 http://www.debian.org/security/2009/dsa-1787 http://secunia.com/advisories/35011 http://www.debian.org/security/2009/dsa-1794 http://www.debian.org/security/2009/dsa-1800 http://lists.opensuse.org/opensuse-security-announce/2009-05/msg00002.html http://secunia.com/advisories/35121 http://secunia.com/advisories/35185 http://secunia.com/advisories/35390 http://lists.opensuse.org/opensuse-security-announce/2009-06/msg00001.html http://lists.opensuse.org/opensuse-security-announce/2009-06/msg00000.html http://secunia.com/advisories/35394 https://exchange.xforce.ibmcloud.com/vulnerabilities/49229 http://git.kernel.org/?p=linux/kernel/git/torvalds/linux-2.6.git%3Ba=commit%3Bh=a68e61e8ff2d46327a37b69056998b47745db6fa https://nvd.nist.gov https://usn.ubuntu.com/752-1/

Get Started

Vulmon Search is a vulnerability search engine. It gives comprehensive vulnerability information through a very simple user interface.

Home Recent Vulnerabilities Research Posts Trends Blog About Contact

Vulmon Search Vulmon Research Vulmon Alerts Vulmap

Twitter Reddit Linkedin Facebook

CVE-2009-0859

Vulnerability Summary

Vulnerability Trend

Vendor Advisories

References

Vulmon Search

About

Products

Connect