National Cyber Awareness System

Vulnerability Summary for CVE-2009-3547

Overview

Multiple race conditions in fs/pipe.c in the Linux kernel before 2.6.32-rc6 allow local users to cause a denial of service (NULL pointer dereference and system crash) or gain privileges by attempting to open an anonymous pipe via a /proc/*/fd/ pathname.

Impact

CVSS Severity (version 2.0):

CVSS Version 2 Metrics:

References to Advisories, Solutions, and Tools

By selecting these links, you will be leaving NIST webspace. We have provided these links to other web sites because they may have information that would be of interest to you. No inferences should be drawn on account of other sites being referenced, or not, from this page. There may be other web sites that are more appropriate for your purpose. NIST does not necessarily endorse the views expressed, or concur with the facts presented on these sites. Further, NIST does not endorse any commercial products that may be mentioned on these sites. Please address comments about this page to nvd@nist.gov.

External Source: FEDORA

Name: FEDORA-2009-11038

Hyperlink:https://www.redhat.com/archives/fedora-package-announce/2009-November/msg00190.html

External Source: REDHAT

Name: RHSA-2009:1550

Type: Advisory

Hyperlink:https://rhn.redhat.com/errata/RHSA-2009-1550.html

External Source: REDHAT

Name: RHSA-2009:1548

Type: Advisory

Hyperlink:https://rhn.redhat.com/errata/RHSA-2009-1548.html

External Source: REDHAT

Name: RHSA-2009:1541

Type: Advisory

Hyperlink:https://rhn.redhat.com/errata/RHSA-2009-1541.html

External Source: REDHAT

Name: RHSA-2009:1540

Type: Advisory

Hyperlink:https://rhn.redhat.com/errata/RHSA-2009-1540.html

External Source: CONFIRM

Name: https://bugzilla.redhat.com/show_bug.cgi?id=530490

Hyperlink:https://bugzilla.redhat.com/show_bug.cgi?id=530490

External Source: VUPEN

Name: ADV-2010-0528

Hyperlink:http://www.vupen.com/english/advisories/2010/0528

External Source: UBUNTU

Name: USN-864-1

Hyperlink:http://www.ubuntu.com/usn/usn-864-1

External Source: BID

Name: 36901

Hyperlink:http://www.securityfocus.com/bid/36901

External Source: BUGTRAQ

Name: 20100625 VMSA-2010-0010 ESX 3.5 third party update for Service Console kernel

Hyperlink:http://www.securityfocus.com/archive/1/archive/1/512019/100/0/threaded

External Source: REDHAT

Name: RHSA-2009:1672

Hyperlink:http://www.redhat.com/support/errata/RHSA-2009-1672.html

External Source: MANDRIVA

Name: MDVSA-2009:329

Hyperlink:http://www.mandriva.com/security/advisories?name=MDVSA-2009:329

External Source: CONFIRM

Name: http://www.kernel.org/pub/linux/kernel/v2.6/testing/ChangeLog-2.6.32-rc6

Hyperlink:http://www.kernel.org/pub/linux/kernel/v2.6/testing/ChangeLog-2.6.32-rc6

External Source: SECUNIA

Name: 38834

Hyperlink:http://secunia.com/advisories/38834

External Source: SECUNIA

Name: 38794

Hyperlink:http://secunia.com/advisories/38794

External Source: SECUNIA

Name: 38017

Hyperlink:http://secunia.com/advisories/38017

External Source: SECUNIA

Name: 37351

Hyperlink:http://secunia.com/advisories/37351

External Source: OVAL

Name: oval:org.mitre.oval:def:9327

Hyperlink:http://oval.mitre.org/repository/data/getDef?id=oval:org.mitre.oval:def:9327

External Source: OVAL

Name: oval:org.mitre.oval:def:7608

Hyperlink:http://oval.mitre.org/repository/data/getDef?id=oval:org.mitre.oval:def:7608

External Source: OVAL

Name: oval:org.mitre.oval:def:11513

Hyperlink:http://oval.mitre.org/repository/data/getDef?id=oval:org.mitre.oval:def:11513

External Source: MLIST

Name: [oss-security] 20091103 CVE-2009-3547 kernel: fs: pipe.c null pointer dereference

Hyperlink:http://marc.info/?l=oss-security&m=125724568017045&w=2

External Source: MLIST

Name: [linux-kernel] 20091021 Re: [PATCH v4 1/1]: fs: pipe.c null pointer dereference + really sign off + unmangled diffs

Hyperlink:http://lkml.org/lkml/2009/10/21/42

External Source: MLIST

Name: [linux-kernel] 20091014 fs/pipe.c null pointer dereference

Hyperlink:http://lkml.org/lkml/2009/10/14/184

External Source: MLIST

Name: [security-announce] 20100303 VMSA-2010-0004 ESX Service Console and vMA third party updates

Hyperlink:http://lists.vmware.com/pipermail/security-announce/2010/000082.html

External Source: SUSE

Name: SUSE-SA:2010:012

Hyperlink:http://lists.opensuse.org/opensuse-security-announce/2010-02/msg00005.html

External Source: SUSE

Name: SUSE-SA:2010:001

Hyperlink:http://lists.opensuse.org/opensuse-security-announce/2010-01/msg00000.html

External Source: SUSE

Name: SUSE-SA:2009:056

Hyperlink:http://lists.opensuse.org/opensuse-security-announce/2009-11/msg00007.html

External Source: SUSE

Name: SUSE-SA:2009:054

Hyperlink:http://lists.opensuse.org/opensuse-security-announce/2009-11/msg00005.html

External Source: CONFIRM

Name: http://git.kernel.org/?p=linux/kernel/git/torvalds/linux-2.6.git;a=commit;h=ad3960243e55320d74195fb85c975e0a8cc4466c

Hyperlink:http://git.kernel.org/?p=linux/kernel/git/torvalds/linux-2.6.git;a=commit;h=ad3960243e55320d74195fb85c975e0a8cc4466c

References to Check Content

Identifier:oval:org.mitre.oval:def:11513

Check System:http://oval.mitre.org/XMLSchema/oval-definitions-5

Hyperlink:http://oval.mitre.org/repository/data/DownloadDefinition?id=oval:org.mitre.oval:def:11513

Identifier:oval:org.mitre.oval:def:7608

Check System:http://oval.mitre.org/XMLSchema/oval-definitions-5

Hyperlink:http://oval.mitre.org/repository/data/DownloadDefinition?id=oval:org.mitre.oval:def:7608

Identifier:oval:org.mitre.oval:def:9327

Check System:http://oval.mitre.org/XMLSchema/oval-definitions-5

Hyperlink:http://oval.mitre.org/repository/data/DownloadDefinition?id=oval:org.mitre.oval:def:9327