National Cyber Awareness System

Vulnerability Summary for CVE-2008-5029

Overview

The __scm_destroy function in net/core/scm.c in the Linux kernel 2.6.27.4, 2.6.26, and earlier makes indirect recursive calls to itself through calls to the fput function, which allows local users to cause a denial of service (panic) via vectors related to sending an SCM_RIGHTS message through a UNIX domain socket and closing file descriptors.

Impact

CVSS Severity (version 2.0):

CVSS Version 2 Metrics:

References to Advisories, Solutions, and Tools

By selecting these links, you will be leaving NIST webspace. We have provided these links to other web sites because they may have information that would be of interest to you. No inferences should be drawn on account of other sites being referenced, or not, from this page. There may be other web sites that are more appropriate for your purpose. NIST does not necessarily endorse the views expressed, or concur with the facts presented on these sites. Further, NIST does not endorse any commercial products that may be mentioned on these sites. Please address comments about this page to nvd@nist.gov.

External Source: BID

Name: 32154

Type: Patch Information

Hyperlink:http://www.securityfocus.com/bid/32154

External Source: REDHAT

Name: RHSA-2009:1550

Hyperlink:https://rhn.redhat.com/errata/RHSA-2009-1550.html

External Source: CONFIRM

Name: https://bugzilla.redhat.com/show_bug.cgi?id=470201

Hyperlink:https://bugzilla.redhat.com/show_bug.cgi?id=470201

External Source: XF

Name: linux-kernel-scmdestroy-dos(46538)

Hyperlink:http://xforce.iss.net/xforce/xfdb/46538

External Source: UBUNTU

Name: USN-679-1

Hyperlink:http://www.ubuntu.com/usn/usn-679-1

External Source: SECTRACK

Name: 1021511

Hyperlink:http://www.securitytracker.com/id?1021511

External Source: SECTRACK

Name: 1021292

Hyperlink:http://www.securitytracker.com/id?1021292

External Source: BID

Name: 33079

Hyperlink:http://www.securityfocus.com/bid/33079

External Source: BUGTRAQ

Name: 20100625 VMSA-2010-0010 ESX 3.5 third party update for Service Console kernel

Hyperlink:http://www.securityfocus.com/archive/1/archive/1/512019/100/0/threaded

External Source: BUGTRAQ

Name: 20090104 Re: Linux Kernel 2.6.18/2.6.24/2.6.20/2.6.22/2.6.21 denial of service exploit

Hyperlink:http://www.securityfocus.com/archive/1/archive/1/499744/100/0/threaded

External Source: BUGTRAQ

Name: 20090101 Linux Kernel 2.6.18/2.6.24/2.6.20/2.6.22/2.6.21 denial of service exploit

Hyperlink:http://www.securityfocus.com/archive/1/archive/1/499700/100/0/threaded

External Source: REDHAT

Name: RHSA-2009:0225

Hyperlink:http://www.redhat.com/support/errata/RHSA-2009-0225.html

External Source: REDHAT

Name: RHSA-2009:0014

Hyperlink:http://www.redhat.com/support/errata/RHSA-2009-0014.html

External Source: REDHAT

Name: RHSA-2009:0009

Hyperlink:http://www.redhat.com/support/errata/RHSA-2009-0009.html

External Source: MLIST

Name: [oss-security] 20081106 CVE request: kernel: Unix sockets kernel panic

Hyperlink:http://www.openwall.com/lists/oss-security/2008/11/06/1

External Source: MANDRIVA

Name: MDVSA-2008:234

Hyperlink:http://www.mandriva.com/security/advisories?name=MDVSA-2008:234

External Source: DEBIAN

Name: DSA-1687

Hyperlink:http://www.debian.org/security/2008/dsa-1687

External Source: DEBIAN

Name: DSA-1681

Hyperlink:http://www.debian.org/security/2008/dsa-1681

External Source: SREASON

Name: 4573

Hyperlink:http://securityreason.com/securityalert/4573

External Source: SECUNIA

Name: 33704

Hyperlink:http://secunia.com/advisories/33704

External Source: SECUNIA

Name: 33641

Hyperlink:http://secunia.com/advisories/33641

External Source: SECUNIA

Name: 33623

Hyperlink:http://secunia.com/advisories/33623

External Source: SECUNIA

Name: 33586

Hyperlink:http://secunia.com/advisories/33586

External Source: SECUNIA

Name: 33556

Hyperlink:http://secunia.com/advisories/33556

External Source: SECUNIA

Name: 33180

Hyperlink:http://secunia.com/advisories/33180

External Source: SECUNIA

Name: 32998

Hyperlink:http://secunia.com/advisories/32998

External Source: SECUNIA

Name: 32918

Hyperlink:http://secunia.com/advisories/32918

External Source: OVAL

Name: oval:org.mitre.oval:def:9558

Hyperlink:http://oval.mitre.org/repository/data/getDef?id=oval:org.mitre.oval:def:9558

External Source: OVAL

Name: oval:org.mitre.oval:def:11694

Hyperlink:http://oval.mitre.org/repository/data/getDef?id=oval:org.mitre.oval:def:11694

External Source: MLIST

Name: [linux-netdev] 20081106 UNIX sockets kernel panic

Hyperlink:http://marc.info/?l=linux-netdev&m=122593044330973&w=2

External Source: SUSE

Name: SUSE-SA:2009:008

Hyperlink:http://lists.opensuse.org/opensuse-security-announce/2009-01/msg00010.html

External Source: SUSE

Name: SUSE-SA:2009:004

Hyperlink:http://lists.opensuse.org/opensuse-security-announce/2009-01/msg00006.html

External Source: SUSE

Name: SUSE-SA:2008:057

Hyperlink:http://lists.opensuse.org/opensuse-security-announce/2008-12/msg00001.html

External Source: CONFIRM

Name: http://kernel.org/pub/linux/kernel/v2.4/ChangeLog-2.4.36.9

Hyperlink:http://kernel.org/pub/linux/kernel/v2.4/ChangeLog-2.4.36.9

External Source: MISC

Name: http://darkircop.org/unix.c

Hyperlink:http://darkircop.org/unix.c

External Source: BUGTRAQ

Name: 20090103 Re: Linux Kernel 2.6.18/2.6.24/2.6.20/2.6.22/2.6.21 denial of service exploit

Hyperlink:http://archives.neohapsis.com/archives/bugtraq/2009-01/0006.html

References to Check Content

Identifier:oval:org.mitre.oval:def:9558

Check System:http://oval.mitre.org/XMLSchema/oval-definitions-5

Hyperlink:http://oval.mitre.org/repository/data/DownloadDefinition?id=oval:org.mitre.oval:def:9558

Identifier:oval:org.mitre.oval:def:11694

Check System:http://oval.mitre.org/XMLSchema/oval-definitions-5

Hyperlink:http://oval.mitre.org/repository/data/DownloadDefinition?id=oval:org.mitre.oval:def:11694