CVE-2008-3527

Published: Nov 5, 2008Modified: Apr 23, 2026

4.6

Vector

AV:L/AC:L/Au:N/C:P/I:P/A:P

Exploitability: 3.9 / Impact: 6.4

Source: NVD

Description

arch/i386/kernel/sysenter.c in the Virtual Dynamic Shared Objects (vDSO) implementation in the Linux kernel before 2.6.21 does not properly check boundaries, which allows local users to gain privileges or cause a denial of service via unspecified vectors, related to the install_special_mapping, syscall, and syscall32_nopage functions.

Affected (27)

Products: Linux: Linux Kernel

1 product

Configuration A

27 vulnerable

Vulnerable Software	Affected Versions
Linux Linux Kernel	Up to 2.6.20.21
Linux Linux Kernel	Version 2.2.27
Linux Linux Kernel	Version 2.4.36.1
Linux Linux Kernel	Version 2.4.36.2
Linux Linux Kernel	Version 2.4.36.3
Linux Linux Kernel	Version 2.4.36.4
Linux Linux Kernel	Version 2.4.36.5
Linux Linux Kernel	Version 2.4.36.6
Linux Linux Kernel	Version 2.4.36
Linux Linux Kernel	Version 2.6.18
Linux Linux Kernel	Version 2.6.18 rc1
Linux Linux Kernel	Version 2.6.18 rc2
Linux Linux Kernel	Version 2.6.18 rc3
Linux Linux Kernel	Version 2.6.18 rc4
Linux Linux Kernel	Version 2.6.18 rc5
Linux Linux Kernel	Version 2.6.18 rc6
Linux Linux Kernel	Version 2.6.18 rc7
Linux Linux Kernel	Version 2.6.19.4
Linux Linux Kernel	Version 2.6.19.5
Linux Linux Kernel	Version 2.6.19.6
Linux Linux Kernel	Version 2.6.19.7
Linux Linux Kernel	Version 2.6.20.16
Linux Linux Kernel	Version 2.6.20.17
Linux Linux Kernel	Version 2.6.20.18
Linux Linux Kernel	Version 2.6.20.19
Linux Linux Kernel	Version 2.6.20.20
Linux Linux Kernel	Version 2.6

Related CWEs

References (22)

http://git.kernel.org/?p=linux/kernel/git/torvalds/linux-2.6.git%3Ba=commit%3Bh=7d91d531900bfa1165d445390b3b13a8013f98f7

Source: secalert@redhat.com

http://lists.opensuse.org/opensuse-security-announce/2008-11/msg00001.html

Source: secalert@redhat.com

http://secunia.com/advisories/32485

Source: secalert@redhat.com

Vendor Advisory

http://secunia.com/advisories/32759

Source: secalert@redhat.com

Vendor Advisory

http://secunia.com/advisories/33180

Source: secalert@redhat.com

Vendor Advisory

http://www.debian.org/security/2008/dsa-1687

Source: secalert@redhat.com

http://www.kernel.org/pub/linux/kernel/v2.6/ChangeLog-2.6.21

Source: secalert@redhat.com

http://www.redhat.com/support/errata/RHSA-2008-0957.html

Source: secalert@redhat.com

http://www.securitytracker.com/id?1021137

Source: secalert@redhat.com

https://bugzilla.redhat.com/show_bug.cgi?id=460251

Source: secalert@redhat.com

https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A10602

Source: secalert@redhat.com

http://git.kernel.org/?p=linux/kernel/git/torvalds/linux-2.6.git%3Ba=commit%3Bh=7d91d531900bfa1165d445390b3b13a8013f98f7

Source: af854a3a-2127-422b-91ae-364da2661108

http://lists.opensuse.org/opensuse-security-announce/2008-11/msg00001.html

Source: af854a3a-2127-422b-91ae-364da2661108

http://secunia.com/advisories/32485

Source: af854a3a-2127-422b-91ae-364da2661108

Vendor Advisory

http://secunia.com/advisories/32759

Source: af854a3a-2127-422b-91ae-364da2661108

Vendor Advisory

http://secunia.com/advisories/33180

Source: af854a3a-2127-422b-91ae-364da2661108

Vendor Advisory

http://www.debian.org/security/2008/dsa-1687

Source: af854a3a-2127-422b-91ae-364da2661108

http://www.kernel.org/pub/linux/kernel/v2.6/ChangeLog-2.6.21

Source: af854a3a-2127-422b-91ae-364da2661108

http://www.redhat.com/support/errata/RHSA-2008-0957.html

Source: af854a3a-2127-422b-91ae-364da2661108

http://www.securitytracker.com/id?1021137

Source: af854a3a-2127-422b-91ae-364da2661108

https://bugzilla.redhat.com/show_bug.cgi?id=460251

Source: af854a3a-2127-422b-91ae-364da2661108

https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A10602

Source: af854a3a-2127-422b-91ae-364da2661108

Timeline

No history available yet.