CVE-2008-1514 - NVD | ByteOS Network

NVD Vulnerability Details :

CVE-2008-1514

Modified

More Info Official Page

Source-cve@mitre.org

Published At-26 Mar, 2008 | 00:44

Updated At-07 Nov, 2023 | 02:02

arch/s390/kernel/ptrace.c in Linux kernel 2.6.9, and other versions before 2.6.27-rc6, on s390 platforms allows local users to cause a denial of service (kernel panic) via the user-area-padding test from the ptrace testsuite in 31-bit mode, which triggers an invalid dereference.

Metrics

Type	Version	Base score	Base severity	Vector
Primary	2.0	4.9	MEDIUM	AV:L/AC:L/Au:N/C:N/I:N/A:C

Type: Primary

Version: 2.0

Base score: 4.9

Base severity: MEDIUM

Vector:

AV:L/AC:L/Au:N/C:N/I:N/A:C

CPE Matches

Linux Kernel Organization, Inc

>>linux_kernel>>Versions up to 2.6.27(inclusive)

cpe:2.3:o:linux:linux_kernel:*:rc5:*:*:*:*:*:*

Linux Kernel Organization, Inc

>>linux_kernel>>2.6.2

cpe:2.3:o:linux:linux_kernel:2.6.2:*:*:*:*:*:*:*

Linux Kernel Organization, Inc

>>linux_kernel>>2.6.9

cpe:2.3:o:linux:linux_kernel:2.6.9:*:*:*:*:*:*:*

Linux Kernel Organization, Inc

>>linux_kernel>>2.6.10

cpe:2.3:o:linux:linux_kernel:2.6.10:*:*:*:*:*:*:*

Linux Kernel Organization, Inc

>>linux_kernel>>2.6.11

cpe:2.3:o:linux:linux_kernel:2.6.11:*:*:*:*:*:*:*

Linux Kernel Organization, Inc

>>linux_kernel>>2.6.11.1

cpe:2.3:o:linux:linux_kernel:2.6.11.1:*:*:*:*:*:*:*

Linux Kernel Organization, Inc

>>linux_kernel>>2.6.11.2

cpe:2.3:o:linux:linux_kernel:2.6.11.2:*:*:*:*:*:*:*

Linux Kernel Organization, Inc

>>linux_kernel>>2.6.11.3

cpe:2.3:o:linux:linux_kernel:2.6.11.3:*:*:*:*:*:*:*

Linux Kernel Organization, Inc

>>linux_kernel>>2.6.11.4

cpe:2.3:o:linux:linux_kernel:2.6.11.4:*:*:*:*:*:*:*

Linux Kernel Organization, Inc

>>linux_kernel>>2.6.11.5

cpe:2.3:o:linux:linux_kernel:2.6.11.5:*:*:*:*:*:*:*

Linux Kernel Organization, Inc

>>linux_kernel>>2.6.11.6

cpe:2.3:o:linux:linux_kernel:2.6.11.6:*:*:*:*:*:*:*

Linux Kernel Organization, Inc

>>linux_kernel>>2.6.11.7

cpe:2.3:o:linux:linux_kernel:2.6.11.7:*:*:*:*:*:*:*

Linux Kernel Organization, Inc

>>linux_kernel>>2.6.11.8

cpe:2.3:o:linux:linux_kernel:2.6.11.8:*:*:*:*:*:*:*

Linux Kernel Organization, Inc

>>linux_kernel>>2.6.11.9

cpe:2.3:o:linux:linux_kernel:2.6.11.9:*:*:*:*:*:*:*

Linux Kernel Organization, Inc

>>linux_kernel>>2.6.11.10

cpe:2.3:o:linux:linux_kernel:2.6.11.10:*:*:*:*:*:*:*

Linux Kernel Organization, Inc

>>linux_kernel>>2.6.11.11

cpe:2.3:o:linux:linux_kernel:2.6.11.11:*:*:*:*:*:*:*

Linux Kernel Organization, Inc

>>linux_kernel>>2.6.11.12

cpe:2.3:o:linux:linux_kernel:2.6.11.12:*:*:*:*:*:*:*

Linux Kernel Organization, Inc

>>linux_kernel>>2.6.12

cpe:2.3:o:linux:linux_kernel:2.6.12:*:*:*:*:*:*:*

Linux Kernel Organization, Inc

>>linux_kernel>>2.6.12.1

cpe:2.3:o:linux:linux_kernel:2.6.12.1:*:*:*:*:*:*:*

Linux Kernel Organization, Inc

>>linux_kernel>>2.6.12.2

cpe:2.3:o:linux:linux_kernel:2.6.12.2:*:*:*:*:*:*:*

Linux Kernel Organization, Inc

>>linux_kernel>>2.6.12.3

cpe:2.3:o:linux:linux_kernel:2.6.12.3:*:*:*:*:*:*:*

Linux Kernel Organization, Inc

>>linux_kernel>>2.6.12.4

cpe:2.3:o:linux:linux_kernel:2.6.12.4:*:*:*:*:*:*:*

Linux Kernel Organization, Inc

>>linux_kernel>>2.6.12.5

cpe:2.3:o:linux:linux_kernel:2.6.12.5:*:*:*:*:*:*:*

Linux Kernel Organization, Inc

>>linux_kernel>>2.6.12.6

cpe:2.3:o:linux:linux_kernel:2.6.12.6:*:*:*:*:*:*:*

Linux Kernel Organization, Inc

>>linux_kernel>>2.6.13

cpe:2.3:o:linux:linux_kernel:2.6.13:*:*:*:*:*:*:*

Linux Kernel Organization, Inc

>>linux_kernel>>2.6.13.1

cpe:2.3:o:linux:linux_kernel:2.6.13.1:*:*:*:*:*:*:*

Linux Kernel Organization, Inc

>>linux_kernel>>2.6.13.2

cpe:2.3:o:linux:linux_kernel:2.6.13.2:*:*:*:*:*:*:*

Linux Kernel Organization, Inc

>>linux_kernel>>2.6.13.3

cpe:2.3:o:linux:linux_kernel:2.6.13.3:*:*:*:*:*:*:*

Linux Kernel Organization, Inc

>>linux_kernel>>2.6.13.4

cpe:2.3:o:linux:linux_kernel:2.6.13.4:*:*:*:*:*:*:*

Linux Kernel Organization, Inc

>>linux_kernel>>2.6.13.5

cpe:2.3:o:linux:linux_kernel:2.6.13.5:*:*:*:*:*:*:*

Linux Kernel Organization, Inc

>>linux_kernel>>2.6.14

cpe:2.3:o:linux:linux_kernel:2.6.14:*:*:*:*:*:*:*

Linux Kernel Organization, Inc

>>linux_kernel>>2.6.14.1

cpe:2.3:o:linux:linux_kernel:2.6.14.1:*:*:*:*:*:*:*

Linux Kernel Organization, Inc

>>linux_kernel>>2.6.14.2

cpe:2.3:o:linux:linux_kernel:2.6.14.2:*:*:*:*:*:*:*

Linux Kernel Organization, Inc

>>linux_kernel>>2.6.14.3

cpe:2.3:o:linux:linux_kernel:2.6.14.3:*:*:*:*:*:*:*

Linux Kernel Organization, Inc

>>linux_kernel>>2.6.14.4

cpe:2.3:o:linux:linux_kernel:2.6.14.4:*:*:*:*:*:*:*

Linux Kernel Organization, Inc

>>linux_kernel>>2.6.14.5

cpe:2.3:o:linux:linux_kernel:2.6.14.5:*:*:*:*:*:*:*

Linux Kernel Organization, Inc

>>linux_kernel>>2.6.14.6

cpe:2.3:o:linux:linux_kernel:2.6.14.6:*:*:*:*:*:*:*

Linux Kernel Organization, Inc

>>linux_kernel>>2.6.14.7

cpe:2.3:o:linux:linux_kernel:2.6.14.7:*:*:*:*:*:*:*

Linux Kernel Organization, Inc

>>linux_kernel>>2.6.15

cpe:2.3:o:linux:linux_kernel:2.6.15:*:*:*:*:*:*:*

Linux Kernel Organization, Inc

>>linux_kernel>>2.6.15.1

cpe:2.3:o:linux:linux_kernel:2.6.15.1:*:*:*:*:*:*:*

Linux Kernel Organization, Inc

>>linux_kernel>>2.6.15.2

cpe:2.3:o:linux:linux_kernel:2.6.15.2:*:*:*:*:*:*:*

Linux Kernel Organization, Inc

>>linux_kernel>>2.6.15.3

cpe:2.3:o:linux:linux_kernel:2.6.15.3:*:*:*:*:*:*:*

Linux Kernel Organization, Inc

>>linux_kernel>>2.6.15.4

cpe:2.3:o:linux:linux_kernel:2.6.15.4:*:*:*:*:*:*:*

Linux Kernel Organization, Inc

>>linux_kernel>>2.6.15.5

cpe:2.3:o:linux:linux_kernel:2.6.15.5:*:*:*:*:*:*:*

Linux Kernel Organization, Inc

>>linux_kernel>>2.6.15.6

cpe:2.3:o:linux:linux_kernel:2.6.15.6:*:*:*:*:*:*:*

Linux Kernel Organization, Inc

>>linux_kernel>>2.6.15.7

cpe:2.3:o:linux:linux_kernel:2.6.15.7:*:*:*:*:*:*:*

Linux Kernel Organization, Inc

>>linux_kernel>>2.6.16

cpe:2.3:o:linux:linux_kernel:2.6.16:*:*:*:*:*:*:*

Linux Kernel Organization, Inc

>>linux_kernel>>2.6.16.1

cpe:2.3:o:linux:linux_kernel:2.6.16.1:*:*:*:*:*:*:*

Linux Kernel Organization, Inc

>>linux_kernel>>2.6.16.2

cpe:2.3:o:linux:linux_kernel:2.6.16.2:*:*:*:*:*:*:*

Linux Kernel Organization, Inc

>>linux_kernel>>2.6.16.3

cpe:2.3:o:linux:linux_kernel:2.6.16.3:*:*:*:*:*:*:*

Weaknesses

CWE ID	Type	Source
CWE-399	Primary	nvd@nist.gov

CWE ID: CWE-399

Type: Primary

Source: nvd@nist.gov

Vendor Statements

Organization : Red Hat

Last Modified : 2009-05-19T00:00:00

This issue did not affect the versions of Linux kernel as shipped with Red Hat Enterprise Linux 2.1, 3, 5, and Red Hat Enterprise MRG. It was addressed in Red Hat Enterprise Linux 4 via: https://rhn.redhat.com/errata/RHSA-2008-0972.html

References

Hyperlink	Source	Resource
http://git.kernel.org/?p=linux/kernel/git/torvalds/linux-2.6.git%3Ba=commit%3Bh=3d6e48f43340343d97839eadb1ab7b6a3ea98797	cve@mitre.org	N/A
http://kernel.org/pub/linux/kernel/v2.6/ChangeLog-2.6.26.6	cve@mitre.org	Vendor Advisory
http://kernel.org/pub/linux/kernel/v2.6/testing/ChangeLog-2.6.27-rc6	cve@mitre.org	N/A
http://lists.opensuse.org/opensuse-security-announce/2008-10/msg00007.html	cve@mitre.org	N/A
http://rhn.redhat.com/errata/RHSA-2008-0972.html	cve@mitre.org	N/A
http://secunia.com/advisories/31826	cve@mitre.org	Vendor Advisory
http://secunia.com/advisories/32237	cve@mitre.org	Vendor Advisory
http://secunia.com/advisories/32315	cve@mitre.org	N/A
http://secunia.com/advisories/32356	cve@mitre.org	N/A
http://secunia.com/advisories/32799	cve@mitre.org	Vendor Advisory
http://sourceware.org/systemtap/wiki/utrace/tests	cve@mitre.org	Exploit
http://www.debian.org/security/2008/dsa-1653	cve@mitre.org	Patch
http://www.debian.org/security/2008/dsa-1655	cve@mitre.org	Patch
http://www.securityfocus.com/bid/31177	cve@mitre.org	Exploit Patch
https://bugzilla.redhat.com/show_bug.cgi?id=438147	cve@mitre.org	Exploit
https://exchange.xforce.ibmcloud.com/vulnerabilities/41501	cve@mitre.org	N/A
https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A9555	cve@mitre.org	N/A

Hyperlink: http://git.kernel.org/?p=linux/kernel/git/torvalds/linux-2.6.git%3Ba=commit%3Bh=3d6e48f43340343d97839eadb1ab7b6a3ea98797

Source: cve@mitre.org

Resource: N/A

Hyperlink: http://kernel.org/pub/linux/kernel/v2.6/ChangeLog-2.6.26.6

Source: cve@mitre.org

Resource:

Vendor Advisory

Hyperlink: http://kernel.org/pub/linux/kernel/v2.6/testing/ChangeLog-2.6.27-rc6

Source: cve@mitre.org

Resource: N/A

Hyperlink: http://lists.opensuse.org/opensuse-security-announce/2008-10/msg00007.html

Source: cve@mitre.org

Resource: N/A

Hyperlink: http://rhn.redhat.com/errata/RHSA-2008-0972.html

Source: cve@mitre.org

Resource: N/A

Hyperlink: http://secunia.com/advisories/31826

Source: cve@mitre.org

Resource:

Vendor Advisory

Hyperlink: http://secunia.com/advisories/32237

Source: cve@mitre.org

Resource:

Vendor Advisory

Hyperlink: http://secunia.com/advisories/32315

Source: cve@mitre.org

Resource: N/A

Hyperlink: http://secunia.com/advisories/32356

Source: cve@mitre.org

Resource: N/A

Hyperlink: http://secunia.com/advisories/32799

Source: cve@mitre.org

Resource:

Vendor Advisory

Hyperlink: http://sourceware.org/systemtap/wiki/utrace/tests

Source: cve@mitre.org

Resource:

Exploit

Hyperlink: http://www.debian.org/security/2008/dsa-1653

Source: cve@mitre.org

Resource:

Patch

Hyperlink: http://www.debian.org/security/2008/dsa-1655

Source: cve@mitre.org

Resource:

Patch

Hyperlink: http://www.securityfocus.com/bid/31177

Source: cve@mitre.org

Resource:

Exploit

Patch

Hyperlink: https://bugzilla.redhat.com/show_bug.cgi?id=438147

Source: cve@mitre.org

Resource:

Exploit

Hyperlink: https://exchange.xforce.ibmcloud.com/vulnerabilities/41501

Source: cve@mitre.org

Resource: N/A

Hyperlink: https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A9555

Source: cve@mitre.org

Resource: N/A