vulnwire
3.6low

CVE-2009-08351 exploit

The __secure_computing function in kernel/seccomp.c in the seccomp subsystem in the Linux kernel 2.6.28.7 and earlier on the x86_64 platfor…

Published 17 y ago · modified 4 mo ago · JSON

CVSS
3.6
v2.0 · NVD
CISA KEV
No
not known exploited
EPSS
0.9%
percentile 61%
Public exploits
1
Exploit-DB

The __secure_computing function in kernel/seccomp.c in the seccomp subsystem in the Linux kernel 2.6.28.7 and earlier on the x86_64 platform, when CONFIG_SECCOMP is enabled, does not properly handle (1) a 32-bit process making a 64-bit syscall or (2) a 64-bit process making a 32-bit syscall, which allows local users to bypass intended access restrictions via crafted syscalls that are misinterpreted as (a) stat or (b) chmod, a related issue to CVE-2009-0342 and CVE-2009-0343.

Exploit prediction (EPSS)

0.93% probability of exploitation in the next 30 days, higher than 61% of all scored CVEs.

Exploits and detections

  • EDB-32829 Linux Kernel 2.6.x - 'seccomp' System Call Security Bypass · local · 2009-03-02

CVSS scores

Assigned byVersionScoreVector
NVD2.03.6AV:L/AC:L/Au:N/C:P/I:P/A:N

Classification

Weakness
  • CWE-264 Permissions, Privileges, and Access Controls
Technology feeds
Linux kernel (RSS, critical only)

References

  • secunia.com /advisories/35390 · third-party-advisory, x_refsource_SECUNIA, x_transferred
  • scarybeastsecurity.blogspot.com /2009/02/linux-kernel-minor-seccomp.html · x_refsource_MISC, x_transferred
  • secunia.com /advisories/34786 · third-party-advisory, x_refsource_SECUNIA, x_transferred
  • mandriva.com /security/advisories?name=MDVSA-2009:118 · vendor-advisory, x_refsource_MANDRIVA, x_transferred
  • marc.info /?l=oss-security&m=123597627132485&w=2 · mailing-list, x_refsource_MLIST, x_transferred
  • lists.opensuse.org /opensuse-security-announce/2009-05/msg00002.html · vendor-advisory, x_refsource_SUSE, x_transferred
  • scary.beasts.org /security/CESA-2009-001.html · x_refsource_MISC, x_transferred
  • lists.opensuse.org /opensuse-security-announce/2009-06/msg00000.html · vendor-advisory, x_refsource_SUSE, x_transferred
  • ubuntu.com /usn/usn-751-1 · vendor-advisory, x_refsource_UBUNTU, x_transferred
  • securityfocus.com /bid/33948 · vdb-entry, x_refsource_BID, x_transferred
  • secunia.com /advisories/35185 · third-party-advisory, x_refsource_SECUNIA, x_transferred
  • lkml.org /lkml/2009/2/28/23 · mailing-list, x_refsource_MLIST, x_transferred
  • lists.opensuse.org /opensuse-security-announce/2009-06/msg00001.html · vendor-advisory, x_refsource_SUSE, x_transferred
  • lists.opensuse.org /opensuse-security-announce/2009-04/msg00007.html · vendor-advisory, x_refsource_SUSE, x_transferred
  • secunia.com /advisories/34084 · third-party-advisory, x_refsource_SECUNIA, x_transferred
  • debian.org /security/2009/dsa-1800 · vendor-advisory, x_refsource_DEBIAN, x_transferred
  • secunia.com /advisories/34917 · third-party-advisory, x_refsource_SECUNIA, x_transferred
  • marc.info /?l=linux-kernel&m=123579056530191&w=2 · mailing-list, x_refsource_MLIST, x_transferred
  • marc.info /?l=linux-kernel&m=123579069630311&w=2 · mailing-list, x_refsource_MLIST, x_transferred
  • scary.beasts.org /security/CESA-2009-004.html · x_refsource_MISC, x_transferred
  • bugzilla.redhat.com /show_bug.cgi?id=487255 · x_refsource_MISC, x_transferred
  • redhat.com /support/errata/RHSA-2009-0451.html · vendor-advisory, x_refsource_REDHAT, x_transferred
  • secunia.com /advisories/35121 · third-party-advisory, x_refsource_SECUNIA, x_transferred
  • secunia.com /advisories/35394 · third-party-advisory, x_refsource_SECUNIA, x_transferred

Sources

vulnwire keeps one entry per vulnerability: the CVE id wins, then GHSA; records that alias each other are merged. Machine-readable: JSON.