[Forgot Password]
Login  Register Subscribe

30389

 
 

423868

 
 

244411

 
 

909

 
 

193363

 
 

277

Paid content will be excluded from the download.


Download | Alert*
CVE
view JSON

CVE-2009-0031Date: (C)2009-01-20   (M)2024-02-22


Memory leak in the keyctl_join_session_keyring function (security/keys/keyctl.c) in Linux kernel 2.6.29-rc2 and earlier allows local users to cause a denial of service (kernel memory consumption) via unknown vectors related to a "missing kfree."

CVSS Score and Metrics +CVSS Score and Metrics -

CVSS V2 Severity:
CVSS Score : 4.9
Exploit Score: 3.9
Impact Score: 6.9
 
CVSS V2 Metrics:
Access Vector: LOCAL
Access Complexity: LOW
Authentication: NONE
Confidentiality: NONE
Integrity: NONE
Availability: COMPLETE
  
Reference:
SECUNIA-33858
SECUNIA-34252
SECUNIA-34394
SECUNIA-34502
SECUNIA-34762
SECUNIA-34981
SECUNIA-35011
OSVDB-51501
DSA-1749
DSA-1787
DSA-1794
RHSA-2009:0264
RHSA-2009:0331
RHSA-2009:0360
SUSE-SA:2009:010
USN-751-1
http://www.openwall.com/lists/oss-security/2009/01/19/4
http://git2.kernel.org/?p=linux/kernel/git/torvalds/linux-2.6.git%3Ba=commit%3Bh=0d54ee1c7850a954026deec4cd4885f331da35cc
http://support.avaya.com/elmodocs2/security/ASA-2009-114.htm
oval:org.mitre.oval:def:11386

CWE    1
CWE-399
OVAL    12
oval:org.secpod.oval:def:600287
oval:org.mitre.oval:def:8381
oval:org.secpod.oval:def:600329
oval:org.mitre.oval:def:8117
...

© SecPod Technologies