Vulmon Recent Vulnerabilities Research Posts Trends Blog About Contact
7.2
CVSSv2

CVE-2009-2695

Published: 28/08/2009 Updated: 07/11/2023
CVSS v2 Base Score: 7.2 | Impact Score: 10 | Exploitability Score: 3.9
VMScore: 642
Vector: AV:L/AC:L/Au:N/C:C/I:C/A:C
Subscribe to Linux

Vulnerability Summary

The Linux kernel prior to 2.6.31-rc7 does not properly prevent mmap operations that target page zero and other low memory addresses, which allows local users to gain privileges by exploiting NULL pointer dereference vulnerabilities, related to (1) the default configuration of the allow_unconfined_mmap_low boolean in SELinux on Red Hat Enterprise Linux (RHEL) 5, (2) an error that causes allow_unconfined_mmap_low to be ignored in the unconfined_t domain, (3) lack of a requirement for the CAP_SYS_RAWIO capability for these mmap operations, and (4) interaction between the mmap_min_addr protection mechanism and certain application programs.

Vulnerability Trend

Vulnerable Product Search on Vulmon Subscribe to Product

linux linux kernel 2.6.27.29

linux linux kernel 2.6.27.12

linux linux kernel 2.6.20.6

linux linux kernel 2.6.20.9

linux linux kernel 2.6.11

linux linux kernel 2.6.23.4

linux linux kernel 2.6.22.15

linux linux kernel 2.6.16.16

linux linux kernel 2.6.18.7

linux linux kernel 2.6.17.12

linux linux kernel 2.6.16.39

linux linux kernel 2.6.27.3

linux linux kernel 2.6.29.3

linux linux kernel 2.6.21

linux linux kernel 2.6.16.9

linux linux kernel 2.6.17.9

linux linux kernel 2.6.11.2

linux linux kernel 2.6.27.1

linux linux kernel 2.6.5

linux linux kernel 2.6.15.3

linux linux kernel 2.6.27.30

linux linux kernel 2.6.11.10

linux linux kernel 2.6.24.7

linux linux kernel 2.6.1

linux linux kernel 2.6.16.43

linux linux kernel 2.6.16.6

linux linux kernel 2.6.16.8

linux linux kernel 2.6.20.13

linux linux kernel 2.6.22.4

linux linux kernel 2.6.14.7

linux linux kernel 2.6.27.18

linux linux kernel 2.6.13

linux linux kernel 2.6.17.2

linux linux kernel 2.6.13.3

linux linux kernel 2.6.23.13

linux linux kernel 2.6.11.8

linux linux kernel 2.6.24.2

linux linux kernel 2.6.26.5

linux linux kernel 2.6.16.34

linux linux kernel 2.6.25.20

linux linux kernel 2.6.27.21

linux linux kernel 2.6.23.7

linux linux kernel 2.6.17.8

linux linux kernel 2.6.14.4

linux linux kernel 2.6.14

linux linux kernel 2.6.25.5

linux linux kernel 2.6.17.4

linux linux kernel 2.6.16.18

linux linux kernel 2.6.27.27

linux linux kernel 2.6.17.14

linux linux kernel 2.6.10

linux linux kernel 2.6.23.8

linux linux kernel 2.6.16.45

linux linux kernel 2.6.22.12

linux linux kernel 2.6.25.18

linux linux kernel 2.6.14.3

linux linux kernel 2.6.29

linux linux kernel 2.6.18.3

linux linux kernel 2.6.16.37

linux linux kernel 2.6.11.6

linux linux kernel 2.6.16.48

linux linux kernel 2.6.11.11

linux linux kernel 2.6.16.13

linux linux kernel 2.6.27.10

linux linux kernel 2.6.3

linux linux kernel 2.6.21.6

linux linux kernel 2.6.26.6

linux linux kernel 2.6.22.1

linux linux kernel 2.6.27.17

linux linux kernel 2.6.16.4

linux linux kernel 2.6.23.16

linux linux kernel 2.6.17.3

linux linux kernel 2.6.24.1

linux linux kernel 2.6.20.5

linux linux kernel 2.6.22

linux linux kernel 2.6.28.4

linux linux kernel 2.6.4

linux linux kernel 2.6.27.16

linux linux kernel 2.6.26

linux linux kernel 2.6.16.15

linux linux kernel 2.6.27.20

linux linux kernel 2.6.15.6

linux linux kernel 2.6.26.3

linux linux kernel 2.6.20.16

linux linux kernel 2.6.15.1

linux linux kernel 2.6.11.5

linux linux kernel 2.6.28.2

linux linux kernel 2.6.25.9

linux linux kernel 2.6.19.3

linux linux kernel 2.6.27.4

linux linux kernel 2.6.27

linux linux kernel 2.6.19.4

linux linux kernel 2.6.25.13

linux linux kernel 2.6.28.5

linux linux kernel 2.6.19.1

linux linux kernel 2.6.18.4

linux linux kernel 2.6.16.1

linux linux kernel 2.6.18.1

linux linux kernel 2.6.20.21

linux linux kernel 2.6.31

linux linux kernel 2.6.27.13

linux linux kernel 2.6.23.1

linux linux kernel 2.6.2

linux linux kernel 2.6.14.5

linux linux kernel 2.6.13.2

linux linux kernel 2.6.17.5

linux linux kernel 2.6.18.5

linux linux kernel 2.6.21.1

linux linux kernel 2.6.16.32

linux linux kernel 2.6.13.5

linux linux kernel 2.6.16.57

linux linux kernel 2.6.16.49

linux linux kernel 2.6.25.3

linux linux kernel 2.6.17

linux linux kernel 2.6.24

linux linux kernel 2.6.19.2

linux linux kernel 2.6.26.2

linux linux kernel 2.6.21.4

linux linux kernel 2.6.16.11

linux linux kernel 2.6.20.17

linux linux kernel 2.6.16.14

linux linux kernel 2.6.20.12

linux linux kernel 2.6.16.25

linux linux kernel 2.6.27.15

linux linux kernel 2.6.16.21

linux linux kernel 2.6.16.33

linux linux kernel 2.6.8

linux linux kernel 2.6.16.28

linux linux kernel 2.6.17.10

linux linux kernel 2.6.21.5

linux linux kernel 2.6.25.15

linux linux kernel 2.6.14.1

linux linux kernel 2.6.23.15

linux linux kernel 2.6.16.23

linux linux kernel 2.6.29.4

linux linux kernel 2.6.12.5

linux linux kernel 2.6.15.7

linux linux kernel 2.6.20

linux linux kernel 2.6.23.10

linux linux kernel 2.6.22.7

linux linux kernel 2.6.27.26

linux linux kernel 2.6.16.3

linux linux kernel 2.6.27.8

linux linux kernel 2.6.26.1

linux linux kernel 2.6.25.19

linux linux kernel 2.6.20.20

linux linux kernel 2.6.16.36

linux linux kernel 2.6.14.6

linux linux kernel 2.6.12.1

linux linux kernel 2.6.27.9

linux linux kernel 2.6.11.9

linux linux kernel 2.6.16.46

linux linux kernel 2.6.17.1

linux linux kernel 2.6.20.8

linux linux kernel 2.6.27.25

linux linux kernel 2.6.20.15

linux linux kernel 2.6.22.18

linux linux kernel 2.6.0

linux linux kernel 2.6.25.8

linux linux kernel 2.6.16.54

linux linux kernel 2.6.13.4

linux linux kernel 2.6.20.18

linux linux kernel 2.6.23.9

linux linux kernel 2.6.22.6

linux linux kernel 2.6.23.3

linux linux kernel 2.6.18.8

linux linux kernel 2.6.22.3

linux linux kernel 2.6.12.2

linux linux kernel 2.6.16.31

linux linux kernel 2.6.16.26

linux linux kernel 2.6.16.62

linux linux kernel 2.6.18.2

linux linux kernel 2.6.28.8

linux linux kernel 2.6.16.29

linux linux kernel 2.6.29.1

linux linux kernel 2.6.24.4

linux linux kernel 2.6.27.19

linux linux kernel

linux linux kernel 2.6.25.16

linux linux kernel 2.6.22.9

linux linux kernel 2.6.25.17

linux linux kernel 2.6.20.11

linux linux kernel 2.6.19

linux linux kernel 2.6.20.3

linux linux kernel 2.6.16

linux linux kernel 2.6.30.4

linux linux kernel 2.6.28.3

linux linux kernel 2.6.22.13

linux linux kernel 2.6.19.7

linux linux kernel 2.6.21.3

linux linux kernel 2.6.27.28

linux linux kernel 2.6.24.5

linux linux kernel 2.6.16.51

linux linux kernel 2.6.15.2

linux linux kernel 2.6.20.19

linux linux kernel 2.6.16.22

linux linux kernel 2.6.22.17

linux linux kernel 2.6.16.58

linux linux kernel 2.6.16.40

linux linux kernel 2.6.16.47

linux linux kernel 2.6.16.42

linux linux kernel 2.6.27.22

linux linux kernel 2.6.23.14

linux linux kernel 2.6.17.11

linux linux kernel 2.6.16.10

linux linux kernel 2.6.12.4

linux linux kernel 2.6.16.41

linux linux kernel 2.6.16.52

linux linux kernel 2.6.11.3

linux linux kernel 2.6.20.10

linux linux kernel 2.6.16.24

linux linux kernel 2.6.25.10

linux linux kernel 2.6.22.11

linux linux kernel 2.6.16.55

linux linux kernel 2.6.23

linux linux kernel 2.6.12.3

linux linux kernel 2.6.22.10

linux linux kernel 2.6.29.6

linux linux kernel 2.6.23.17

linux linux kernel 2.6.27.5

linux linux kernel 2.6.23.2

linux linux kernel 2.6.25.1

linux linux kernel 2.6.25.4

linux linux kernel 2.6.28.9

linux linux kernel 2.6.30.2

linux linux kernel 2.6.7

linux linux kernel 2.6.21.7

linux linux kernel 2.6.16.30

linux linux kernel 2.6.21.2

linux linux kernel 2.6.15.4

linux linux kernel 2.6.27.7

linux linux kernel 2.6.16.59

linux linux kernel 2.6.30.1

linux linux kernel 2.6.16.38

linux linux kernel 2.6.16.17

linux linux kernel 2.6.26.8

linux linux kernel 2.6.20.2

linux linux kernel 2.6.28.6

linux linux kernel 2.6.16.12

linux linux kernel 2.6.16.27

linux linux kernel 2.6.16.53

linux linux kernel 2.6.28.7

linux linux kernel 2.6.12.6

linux linux kernel 2.6.17.7

linux linux kernel 2.6.20.1

linux linux kernel 2.6.11.7

linux linux kernel 2.6.16.2

linux linux kernel 2.6.24.6

linux linux kernel 2.6.18.6

linux linux kernel 2.6.15

linux linux kernel 2.6.16.44

linux linux kernel 2.6.23.12

linux linux kernel 2.6.16.35

linux linux kernel 2.6.19.6

linux linux kernel 2.6.16.50

linux linux kernel 2.6.25.11

linux linux kernel 2.6.27.31

linux linux kernel 2.6.29.2

linux linux kernel 2.6.23.5

linux linux kernel 2.6.22.8

linux linux kernel 2.6.14.2

linux linux kernel 2.6.16.61

linux linux kernel 2.6.19.5

linux linux kernel 2.6.18

linux linux kernel 2.6.27.24

linux linux kernel 2.6.20.4

linux linux kernel 2.6.17.6

linux linux kernel 2.6.23.6

linux linux kernel 2.6.27.2

linux linux kernel 2.6.16.7

linux linux kernel 2.6.17.13

linux linux kernel 2.6.16.60

linux linux kernel 2.6.22.2

linux linux kernel 2.6.8.1

linux linux kernel 2.6.27.11

linux linux kernel 2.6.16.56

linux linux kernel 2.6.22.19

linux linux kernel 2.6.24.3

linux linux kernel 2.6.25

linux linux kernel 2.6.20.14

linux linux kernel 2.6.25.2

linux linux kernel 2.6.22.5

linux linux kernel 2.6.25.7

linux linux kernel 2.6.30.5

linux linux kernel 2.6.25.14

linux linux kernel 2.6.20.7

linux linux kernel 2.6.28.1

linux linux kernel 2.6.16.5

linux linux kernel 2.6.30

linux linux kernel 2.6.11.4

linux linux kernel 2.6.26.4

linux linux kernel 2.6.25.12

linux linux kernel 2.6.16.19

linux linux kernel 2.6.27.6

linux linux kernel 2.6.26.7

linux linux kernel 2.6.25.6

linux linux kernel 2.6.11.12

linux linux kernel 2.6.16.20

linux linux kernel 2.6.15.5

linux linux kernel 2.6.28.10

linux linux kernel 2.6.22.16

linux linux kernel 2.6.11.1

linux linux kernel 2.6.30.3

linux linux kernel 2.6.9

linux linux kernel 2.6.27.23

linux linux kernel 2.6.13.1

linux linux kernel 2.6.23.11

linux linux kernel 2.6.27.14

linux linux kernel 2.6.28

linux linux kernel 2.6.29.5

linux linux kernel 2.6.22.14

linux linux kernel 2.6.6

linux linux kernel 2.6.12

Vendor Advisories

Ubuntu Security Notice: linux, linux-source-2.6.15 vulnerabilities
Solar Designer discovered that the z90crypt driver did not correctly check capabilities A local attacker could exploit this to shut down the device, leading to a denial of service Only affected Ubuntu 606 (CVE-2009-1883) ...
Debian Security Advisories: DSA-2005-1 linux-2.6.24 -- privilege escalation/denial of service/sensitive memory leak
NOTE: This kernel update marks the final planned kernel security update for the 2624 kernel in the Debian release 'etch' Although security support for 'etch' officially ended on Feburary 15th, 2010, this update was already in preparation before that date Several vulnerabilities have been discovered in the Linux kernel that may lead to a denial ...

References

CWE-119http://danwalsh.livejournal.com/30084.htmlhttp://thread.gmane.org/gmane.linux.kernel.lsm/9075http://eparis.livejournal.com/606.htmlhttp://patchwork.kernel.org/patch/36540/http://www.openwall.com/lists/oss-security/2009/08/17/4http://patchwork.kernel.org/patch/36539/http://secunia.com/advisories/36501http://www.kernel.org/pub/linux/kernel/v2.6/testing/ChangeLog-2.6.31-rc7http://patchwork.kernel.org/patch/36650/https://www.redhat.com/archives/fedora-package-announce/2009-August/msg01256.htmlhttp://kbase.redhat.com/faq/docs/DOC-18042http://twitter.com/spendergrsec/statuses/3303390960http://patchwork.kernel.org/patch/36649/https://bugzilla.redhat.com/show_bug.cgi?id=511143http://www.securityfocus.com/bid/36051https://bugzilla.redhat.com/show_bug.cgi?id=517830https://rhn.redhat.com/errata/RHSA-2009-1540.htmlhttps://rhn.redhat.com/errata/RHSA-2009-1548.htmlhttp://www.redhat.com/support/errata/RHSA-2009-1672.htmlhttp://www.debian.org/security/2010/dsa-2005http://secunia.com/advisories/38834http://www.vupen.com/english/advisories/2010/0528http://lists.vmware.com/pipermail/security-announce/2010/000082.htmlhttp://secunia.com/advisories/38794http://secunia.com/advisories/37105http://www.ubuntu.com/usn/USN-852-1https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A9882https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A7144http://git.kernel.org/?p=linux/kernel/git/jmorris/security-testing-2.6.git%3Ba=commit%3Bh=84336d1a77ccd2c06a730ddd38e695c2324a7386http://git.kernel.org/?p=linux/kernel/git/torvalds/linux-2.6.git%3Ba=commit%3Bh=1d9959734a1949ea4f2427bd2d8b21ede6b2441chttp://git.kernel.org/?p=linux/kernel/git/torvalds/linux-2.6.git%3Ba=commit%3Bh=ab5a91a8364c3d6fc617abc47cc81d162c01d90ahttp://git.kernel.org/?p=linux/kernel/git/jmorris/security-testing-2.6.git%3Ba=commit%3Bh=47d439e9fb8a81a90022cfa785bf1c36c4e2aff6http://git.kernel.org/?p=linux/kernel/git/torvalds/linux-2.6.git%3Ba=commit%3Bh=788084aba2ab7348257597496befcbccabdc98a3http://git.kernel.org/?p=linux/kernel/git/jmorris/security-testing-2.6.git%3Ba=commit%3Bh=a2551df7ec568d87793d2eea4ca744e86318f205http://git.kernel.org/?p=linux/kernel/git/jmorris/security-testing-2.6.git%3Ba=commit%3Bh=7c73875e7dda627040b12c19b01db634fa7f0fd1http://git.kernel.org/?p=linux/kernel/git/torvalds/linux-2.6.git%3Ba=commit%3Bh=9c0d90103c7e0eb6e638e5b649e9f6d8d9c1b4b3http://git.kernel.org/?p=linux/kernel/git/torvalds/linux-2.6.git%3Ba=commit%3Bh=8cf948e744e0218af604c32edecde10006dc8e9ehttps://nvd.nist.govhttps://usn.ubuntu.com/852-1/
CVSSv3
CVSSv2
CVSSv3
VMScore
Recommendations:
blind SQL injectionCVE-2006-4304CVE-2023-26603CVE-2024-28327CVE-2023-50363CVE-2024-21905template injectionCVE-2024-3400cross-site request forgery
Vulnerability Notification Service
You don’t have to wait for vulnerability scanning results
Get Started

Vulmon Search

Vulmon Search is a vulnerability search engine. It gives comprehensive vulnerability information through a very simple user interface.

About

Home Recent Vulnerabilities Research Posts Trends Blog About Contact

Products

Vulmon Search Vulmon Research Vulmon Alerts Vulmap

Connect

Twitter Reddit Linkedin Facebook