Published: 08/06/2009 Updated: 15/02/2024

CVSS v2 Base Score: 1.9 | Impact Score: 2.9 | Exploitability Score: 3.4

CVSS v3 Base Score: 4.7 | Impact Score: 3.6 | Exploitability Score: 1

VMScore: 195

Vector: AV:L/AC:M/Au:N/C:N/I:N/A:P

The inode double locking code in fs/ocfs2/file.c in the Linux kernel 2.6.30 prior to 2.6.30-rc3, 2.6.27 prior to 2.6.27.24, 2.6.29 prior to 2.6.29.4, and possibly other versions down to 2.6.19 allows local users to cause a denial of service (prevention of file creation and removal) via a series of splice system calls that trigger a deadlock between the generic_file_splice_write, splice_from_pipe, and ocfs2_file_splice_write functions.

Vulnerable Product	Search on Vulmon	Subscribe to Product
linux linux kernel 2.6.30
linux linux kernel
debian debian linux 4.0
canonical ubuntu linux 9.04
canonical ubuntu linux 8.10
canonical ubuntu linux 8.04
canonical ubuntu linux 6.06
opensuse opensuse 11.1
opensuse opensuse 10.3
suse linux enterprise server 11
suse linux enterprise desktop 11
suse linux enterprise 11.0

Igor Zhbanov discovered that NFS clients were able to create device nodes even when root_squash was enabled An authenticated remote attacker could create device nodes with open permissions, leading to a loss of privacy or escalation of privileges Only Ubuntu 810 and 904 were affected (CVE-2009-1072) ...

Several vulnerabilities have been discovered in the Linux kernel that may lead to a denial of service or privilege escalation The Common Vulnerabilities and Exposures project identifies the following problems: CVE-2009-1385 Neil Horman discovered a missing fix from the e1000 network driver A remote user may cause a denial of service by w ...

/* source: wwwsecurityfocuscom/bid/35143/info The Linux kernel is prone to a local denial-of-service vulnerability Attackers can exploit this issue to cause an affected process to hang, denying service to legitimate users Other denial-of-service attacks are also possible This issue was introduced in Linux Kernel 2619 The following ...

CWE-667 http://www.securityfocus.com/bid/35143 http://www.openwall.com/lists/oss-security/2009/06/03/1 http://www.openwall.com/lists/oss-security/2009/06/02/2 http://securitytracker.com/id?1022307 http://www.openwall.com/lists/oss-security/2009/05/30/1 http://www.openwall.com/lists/oss-security/2009/05/29/2 http://lists.opensuse.org/opensuse-security-announce/2009-06/msg00001.html http://secunia.com/advisories/35390 http://lists.opensuse.org/opensuse-security-announce/2009-06/msg00000.html http://secunia.com/advisories/35394 http://www.mandriva.com/security/advisories?name=MDVSA-2009:135 http://www.mandriva.com/security/advisories?name=MDVSA-2009:148 http://www.redhat.com/support/errata/RHSA-2009-1157.html http://lists.opensuse.org/opensuse-security-announce/2009-07/msg00004.html http://www.debian.org/security/2009/dsa-1844 http://secunia.com/advisories/36051 http://secunia.com/advisories/35847 http://secunia.com/advisories/35656 http://www.ubuntu.com/usn/usn-793-1 http://git.kernel.org/?p=linux/kernel/git/torvalds/linux-2.6.git%3Ba=commitdiff%3Bh=7bfac9ecf0585962fe13584f5cf526d8c8e76f17 https://usn.ubuntu.com/793-1/https://nvd.nist.gov https://www.exploit-db.com/exploits/33015/

CVE-2009-1961

Vulnerability Summary

Vendor Advisories

Exploits

References

Vulmon Search

About

Products

Connect