vulnwire
4.9med

CVE-2008-2729

arch/x86_64/lib/copy_user.S in the Linux kernel before 2.6.19 on some AMD64 systems does not erase destination memory locations after an ex…

Published 18 y ago · modified 4 mo ago · JSON

CVSS
4.9
v2.0 · NVD
CISA KEV
No
not known exploited
EPSS
0.6%
percentile 47%
Public exploits
0
none known

arch/x86_64/lib/copy_user.S in the Linux kernel before 2.6.19 on some AMD64 systems does not erase destination memory locations after an exception during kernel memory copy, which allows local users to obtain sensitive information.

Exploit prediction (EPSS)

0.57% probability of exploitation in the next 30 days, higher than 47% of all scored CVEs.

CVSS scores

Assigned byVersionScoreVector
NVD2.04.9AV:L/AC:L/Au:N/C:C/I:N/A:N

Classification

Weakness
  • CWE-200 Exposure of Sensitive Information to an Unauthorized Actor
Technology feeds
Linux kernel (RSS, critical only)

References

  • git.kernel.org /?p=linux/kernel/git/torvalds/linux-2.6.git%3Ba=commitdiff%3Bh=3022d734a54cbd2b65eea9a0245 · x_refsource_CONFIRM, x_transferred
  • debian.org /security/2008/dsa-1630 · vendor-advisory, x_refsource_DEBIAN, x_transferred
  • redhat.com /support/errata/RHSA-2008-0519.html · vendor-advisory, x_refsource_REDHAT, x_transferred
  • exchange.xforce.ibmcloud.com /vulnerabilities/43558 · vdb-entry, x_refsource_XF, x_transferred
  • oval.cisecurity.org /repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A11571 · vdb-entry, signature, x_refsource_OVAL, x_transferred
  • secunia.com /advisories/30849 · third-party-advisory, x_refsource_SECUNIA, x_transferred
  • securitytracker.com /id?1020364 · vdb-entry, x_refsource_SECTRACK, x_transferred
  • secunia.com /advisories/31551 · third-party-advisory, x_refsource_SECUNIA, x_transferred
  • secunia.com /advisories/30850 · third-party-advisory, x_refsource_SECUNIA, x_transferred
  • redhat.com /support/errata/RHSA-2008-0585.html · vendor-advisory, x_refsource_REDHAT, x_transferred
  • mandriva.com /security/advisories?name=MDVSA-2008:174 · vendor-advisory, x_refsource_MANDRIVA, x_transferred
  • secunia.com /advisories/31107 · third-party-advisory, x_refsource_SECUNIA, x_transferred
  • bugzilla.redhat.com /show_bug.cgi?id=451271 · x_refsource_CONFIRM, x_transferred
  • securityfocus.com /bid/29943 · vdb-entry, x_refsource_BID, x_transferred
  • secunia.com /advisories/31628 · third-party-advisory, x_refsource_SECUNIA, x_transferred
  • ubuntu.com /usn/usn-625-1 · vendor-advisory, x_refsource_UBUNTU, x_transferred
  • rhn.redhat.com /errata/RHSA-2008-0508.html · vendor-advisory, x_refsource_REDHAT, x_transferred

Sources

vulnwire keeps one entry per vulnerability: the CVE id wins, then GHSA; records that alias each other are merged. Machine-readable: JSON.