National Cyber Awareness System

Vulnerability Summary for CVE-2007-5093

Overview

The disconnect method in the Philips USB Webcam (pwc) driver in Linux kernel 2.6.x before 2.6.22.6 "relies on user space to close the device," which allows user-assisted local attackers to cause a denial of service (USB subsystem hang and CPU consumption in khubd) by not closing the device after the disconnect is invoked. NOTE: this rarely crosses privilege boundaries, unless the attacker can convince the victim to unplug the affected device.

Impact

CVSS Severity (version 2.0):

CVSS Version 2 Metrics:

References to Advisories, Solutions, and Tools

By selecting these links, you will be leaving NIST webspace. We have provided these links to other web sites because they may have information that would be of interest to you. No inferences should be drawn on account of other sites being referenced, or not, from this page. There may be other web sites that are more appropriate for your purpose. NIST does not necessarily endorse the views expressed, or concur with the facts presented on these sites. Further, NIST does not endorse any commercial products that may be mentioned on these sites. Please address comments about this page to nvd@nist.gov.

External Source: BID

Name: 25504

Hyperlink:http://www.securityfocus.com/bid/25504

External Source: CONFIRM

Name: http://www.kernel.org/pub/linux/kernel/v2.6/ChangeLog-2.6.22.6

Hyperlink:http://www.kernel.org/pub/linux/kernel/v2.6/ChangeLog-2.6.22.6

External Source: SECUNIA

Name: 32799

Hyperlink:http://secunia.com/advisories/32799

External Source: REDHAT

Name: RHSA-2008:0972

Hyperlink:http://rhn.redhat.com/errata/RHSA-2008-0972.html

External Source: OVAL

Name: oval:org.mitre.oval:def:10494

Hyperlink:http://oval.mitre.org/repository/data/getDef?id=oval:org.mitre.oval:def:10494

External Source: MLIST

Name: 20070903 Re: Oops in pwc v4l driver

Hyperlink:http://marc.info/?l=linux-kernel&m=118880154122548&w=2

External Source: MLIST

Name: 20070902 Oops in pwc v4l driver

Hyperlink:http://marc.info/?l=linux-kernel&m=118873457814808&w=2

External Source: UBUNTU

Name: USN-578-1

Hyperlink:http://www.ubuntu.com/usn/usn-578-1

External Source: UBUNTU

Name: USN-574-1

Hyperlink:http://www.ubuntu.com/usn/usn-574-1

External Source: UBUNTU

Name: USN-558-1

Hyperlink:http://www.ubuntu.com/usn/usn-558-1

External Source: REDHAT

Name: RHSA-2008:0275

Hyperlink:http://www.redhat.com/support/errata/RHSA-2008-0275.html

External Source: MANDRIVA

Name: MDVSA-2008:105

Hyperlink:http://www.mandriva.com/security/advisories?name=MDVSA-2008:105

External Source: MANDRIVA

Name: MDVSA-2008:008

Hyperlink:http://www.mandriva.com/security/advisories?name=MDVSA-2008:008

External Source: DEBIAN

Name: DSA-1504

Hyperlink:http://www.debian.org/security/2008/dsa-1504

External Source: DEBIAN

Name: DSA-1503

Hyperlink:http://www.debian.org/security/2008/dsa-1503

External Source: DEBIAN

Name: DSA-1381

Hyperlink:http://www.debian.org/security/2007/dsa-1381

External Source: SECUNIA

Name: 30294

Hyperlink:http://secunia.com/advisories/30294

External Source: SECUNIA

Name: 29058

Hyperlink:http://secunia.com/advisories/29058

External Source: SECUNIA

Name: 28971

Hyperlink:http://secunia.com/advisories/28971

External Source: SECUNIA

Name: 28706

Hyperlink:http://secunia.com/advisories/28706

External Source: SECUNIA

Name: 28170

Hyperlink:http://secunia.com/advisories/28170

External Source: SECUNIA

Name: 26994

Hyperlink:http://secunia.com/advisories/26994

References to Check Content

Identifier:oval:org.mitre.oval:def:10494

Check System:http://oval.mitre.org/XMLSchema/oval-definitions-5

Hyperlink:http://oval.mitre.org/repository/data/DownloadDefinition?id=oval:org.mitre.oval:def:10494