CVE-2009-0859

Published: Mar 9, 2009Modified: Apr 23, 2026

4.7

Vector

AV:L/AC:M/Au:N/C:N/I:N/A:C

Exploitability: 3.4 / Impact: 6.9

Source: NVD

Description

The shm_get_stat function in ipc/shm.c in the shm subsystem in the Linux kernel before 2.6.28.5, when CONFIG_SHMEM is disabled, misinterprets the data type of an inode, which allows local users to cause a denial of service (system hang) via an SHM_INFO shmctl call, as demonstrated by running the ipcs program.

Affected (1)

Products: Linux: Linux Kernel

1 product

Configuration A

1 vulnerable

Vulnerable Software	Affected Versions
Linux Linux Kernel	Up to 2.6.28.4

Related CWEs

Improper Input Validation

The product receives input or data, but it does not validate or incorrectly validates that the input has the properties that are required to process the data safely and correctly.

References (44)

http://git.kernel.org/?p=linux/kernel/git/torvalds/linux-2.6.git%3Ba=commit%3Bh=a68e61e8ff2d46327a37b69056998b47745db6fa

Source: cve@mitre.org

http://kernel.org/pub/linux/kernel/v2.6/ChangeLog-2.6.28.5

Source: cve@mitre.org

http://lists.opensuse.org/opensuse-security-announce/2009-05/msg00002.html

Source: cve@mitre.org

http://lists.opensuse.org/opensuse-security-announce/2009-06/msg00000.html

Source: cve@mitre.org

http://lists.opensuse.org/opensuse-security-announce/2009-06/msg00001.html

Source: cve@mitre.org

http://marc.info/?l=git-commits-head&m=123387479500599&w=2

Source: cve@mitre.org

http://marc.info/?l=linux-kernel&m=120428209704324&w=2

Source: cve@mitre.org

http://marc.info/?l=linux-kernel&m=123309645625549&w=2

Source: cve@mitre.org

http://openwall.com/lists/oss-security/2009/03/06/1

Source: cve@mitre.org

http://patchwork.kernel.org/patch/6554/

Source: cve@mitre.org

http://secunia.com/advisories/34981

Source: cve@mitre.org

http://secunia.com/advisories/35011

Source: cve@mitre.org

http://secunia.com/advisories/35121

Source: cve@mitre.org

http://secunia.com/advisories/35185

Source: cve@mitre.org

http://secunia.com/advisories/35390

Source: cve@mitre.org

http://secunia.com/advisories/35394

Source: cve@mitre.org

http://www.debian.org/security/2009/dsa-1787

Source: cve@mitre.org

http://www.debian.org/security/2009/dsa-1794

Source: cve@mitre.org

http://www.debian.org/security/2009/dsa-1800

Source: cve@mitre.org

http://www.securityfocus.com/bid/34020

Source: cve@mitre.org

http://www.ubuntu.com/usn/usn-751-1

Source: cve@mitre.org

https://exchange.xforce.ibmcloud.com/vulnerabilities/49229

Source: cve@mitre.org

http://git.kernel.org/?p=linux/kernel/git/torvalds/linux-2.6.git%3Ba=commit%3Bh=a68e61e8ff2d46327a37b69056998b47745db6fa

Source: af854a3a-2127-422b-91ae-364da2661108

http://kernel.org/pub/linux/kernel/v2.6/ChangeLog-2.6.28.5

Source: af854a3a-2127-422b-91ae-364da2661108

http://lists.opensuse.org/opensuse-security-announce/2009-05/msg00002.html

Source: af854a3a-2127-422b-91ae-364da2661108

http://lists.opensuse.org/opensuse-security-announce/2009-06/msg00000.html

Source: af854a3a-2127-422b-91ae-364da2661108

http://lists.opensuse.org/opensuse-security-announce/2009-06/msg00001.html

Source: af854a3a-2127-422b-91ae-364da2661108

http://marc.info/?l=git-commits-head&m=123387479500599&w=2

Source: af854a3a-2127-422b-91ae-364da2661108

http://marc.info/?l=linux-kernel&m=120428209704324&w=2

Source: af854a3a-2127-422b-91ae-364da2661108

http://marc.info/?l=linux-kernel&m=123309645625549&w=2

Source: af854a3a-2127-422b-91ae-364da2661108

http://openwall.com/lists/oss-security/2009/03/06/1

Source: af854a3a-2127-422b-91ae-364da2661108

http://patchwork.kernel.org/patch/6554/

Source: af854a3a-2127-422b-91ae-364da2661108

http://secunia.com/advisories/34981

Source: af854a3a-2127-422b-91ae-364da2661108

http://secunia.com/advisories/35011

Source: af854a3a-2127-422b-91ae-364da2661108

http://secunia.com/advisories/35121

Source: af854a3a-2127-422b-91ae-364da2661108

http://secunia.com/advisories/35185

Source: af854a3a-2127-422b-91ae-364da2661108

http://secunia.com/advisories/35390

Source: af854a3a-2127-422b-91ae-364da2661108

http://secunia.com/advisories/35394

Source: af854a3a-2127-422b-91ae-364da2661108

http://www.debian.org/security/2009/dsa-1787

Source: af854a3a-2127-422b-91ae-364da2661108

http://www.debian.org/security/2009/dsa-1794

Source: af854a3a-2127-422b-91ae-364da2661108

http://www.debian.org/security/2009/dsa-1800

Source: af854a3a-2127-422b-91ae-364da2661108

http://www.securityfocus.com/bid/34020

Source: af854a3a-2127-422b-91ae-364da2661108

http://www.ubuntu.com/usn/usn-751-1

Source: af854a3a-2127-422b-91ae-364da2661108

https://exchange.xforce.ibmcloud.com/vulnerabilities/49229

Source: af854a3a-2127-422b-91ae-364da2661108

Timeline

No history available yet.