1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
52
53
54
55
56
57
58
|
PublicDate: 2008-06-30
Candidate: CVE-2008-2365
References:
http://www.ubuntu.com/usn/usn-625-1
https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2008-2365
Description:
Race condition in the ptrace and utrace support in the Linux kernel 2.6.9
through 2.6.25, as used in Red Hat Enterprise Linux (RHEL) 4, allows local
users to cause a denial of service (oops) via a long series of
PTRACE_ATTACH ptrace calls to another user's process that trigger a
conflict between utrace_detach and report_quiescent, related to "late
ptrace_may_attach() check" and "race around &dead_engine_ops setting," a
different vulnerability than CVE-2007-0771 and CVE-2008-1514. NOTE: this
issue might only affect kernel versions before 2.6.16.x.
Ubuntu-Description:
A race condition was discovered between ptrace and utrace in the kernel.
A local attacker could exploit this to crash the system, leading to a
denial of service.
Notes:
Bugs:
Priority: medium
Discovered-by:
Assigned-to: kees
Patches_linux-source-2.6.15:
upstream: linux-2.6: 5ecfbae093f0c37311e89b29bfc0c9d586eace87 (N/A)
upstream: linux-2.6: f5b40e363ad6041a96e3da32281d8faa191597b9
upstream: linux-2.6: f358166a9405e4f1d8e50d8f415c26d95505b6de
upstream_linux-source-2.6.15: not-affected
dapper_linux-source-2.6.15: released (2.6.15-52.69)
feisty_linux-source-2.6.15: DNE
gutsy_linux-source-2.6.15: DNE
hardy_linux-source-2.6.15: DNE
devel_linux-source-2.6.15: DNE
Patches_linux-source-2.6.20:
upstream_linux-source-2.6.20: not-affected
dapper_linux-source-2.6.20: DNE
feisty_linux-source-2.6.20: not-affected
gutsy_linux-source-2.6.20: DNE
hardy_linux-source-2.6.20: DNE
devel_linux-source-2.6.20: DNE
Patches_linux-source-2.6.22:
upstream_linux-source-2.6.22: not-affected
dapper_linux-source-2.6.22: DNE
feisty_linux-source-2.6.22: DNE
gutsy_linux-source-2.6.22: not-affected
hardy_linux-source-2.6.22: DNE
devel_linux-source-2.6.22: DNE
Patches_linux:
upstream_linux: not-affected
dapper_linux: DNE
feisty_linux: DNE
gutsy_linux: DNE
hardy_linux: not-affected
devel_linux: not-affected
|