Home > Vulnerability Database > CVE-2009-2692

Mend.io Vulnerability Database

CVE-2009-2692

Good to know:

Date: August 14, 2009

The Linux kernel 2.6.0 through 2.6.30.4, and 2.4.4 through 2.4.37.4, does not initialize all function pointers for socket operations in proto_ops structures, which allows local users to trigger a NULL pointer dereference and gain privileges by using mmap to map page zero, placing arbitrary code on this page, and then invoking an unavailable operation, as demonstrated by the sendpage operation (sock_sendpage function) on a PF_PPPOX socket.

Language: C

Severity Score

7.8

Related Resources (43)

Url: http://www.vupen.com/english/advisories/2009/3316

Url: https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A11591

Url: http://www.kernel.org/pub/linux/kernel/v2.4/ChangeLog-2.4.37.5

Url: http://www.securityfocus.com/archive/1/512019/100/0/threaded

Url: https://bugzilla.redhat.com/show_bug.cgi?id=516949

Url: http://blog.cr0.org/2009/08/linux-null-pointer-dereference-due-to.html

Url: http://rhn.redhat.com/errata/RHSA-2009-1222.html

Url: http://lists.opensuse.org/opensuse-security-announce/2009-09/msg00001.html

Url: http://secunia.com/advisories/36430

Url: http://secunia.com/advisories/36278

Url: https://issues.rpath.com/browse/RPL-3103

Url: http://git.kernel.org/?p=linux/kernel/git/stable/linux-2.4.37.y.git%3Ba=commit%3Bh=c18d0fe535a73b219f960d1af3d0c264555a12e3

Url: http://secunia.com/advisories/37471

Url: https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A11526

Url: http://secunia.com/advisories/36327

Url: http://archives.neohapsis.com/archives/fulldisclosure/2009-08/0174.html

Url: http://support.avaya.com/css/P8/documents/100067254

Url: https://nvd.nist.gov/vuln/detail/CVE-2009-2692

Url: http://www.redhat.com/support/errata/RHSA-2009-1233.html

Url: http://www.securityfocus.com/archive/1/505912/100/0/threaded

Url: http://www.debian.org/security/2009/dsa-1865

Url: http://www.exploit-db.com/exploits/9477

Url: http://secunia.com/advisories/37298

Url: http://www.kernel.org/pub/linux/kernel/v2.6/testing/ChangeLog-2.6.31-rc6

Url: http://www.vupen.com/english/advisories/2009/2272

Url: http://www.vmware.com/security/advisories/VMSA-2009-0016.html

Url: http://www.exploit-db.com/exploits/19933

Url: http://secunia.com/advisories/36289

Url: http://www.securityfocus.com/archive/1/507985/100/0/threaded

Url: https://people.canonical.com/~ubuntu-security/cve/CVE-2009-2692

Url: http://wiki.rpath.com/wiki/Advisories:rPSA-2009-0121

Url: http://zenthought.org/content/file/android-root-2009-08-16-source

Url: http://git.kernel.org/?p=linux/kernel/git/torvalds/linux-2.6.git%3Ba=commit%3Bh=e694958388c50148389b0e9b9e9e8945cf0f1b98

Url: http://www.securityfocus.com/archive/1/505751/100/0/threaded

Url: http://grsecurity.net/~spender/wunderbar_emporium.tgz

Url: https://access.redhat.com/security/cve/CVE-2009-2692

Url: http://rhn.redhat.com/errata/RHSA-2009-1223.html

Url: http://www.kernel.org/pub/linux/kernel/v2.6/ChangeLog-2.6.30.5

Url: https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A8657

Url: http://www.openwall.com/lists/oss-security/2009/08/14/1

Url: http://www.securityfocus.com/bid/36038

Url: http://www.mandriva.com/security/advisories?name=MDVSA-2009:233

Url: https://www.mend.io/vulnerability-database/CVE-2009-2692

Severity Score

7.8

Weakness Type (CWE)

Improper Restriction of Operations within the Bounds of a Memory Buffer

CWE-119

Use of Uninitialized Resource

CWE-908

CVSS v3.1

Base Score:	7.8
Attack Vector (AV):	LOCAL
Attack Complexity (AC):	LOW
Privileges Required (PR):	LOW
User Interaction (UI):	NONE
Scope (S):	UNCHANGED
Confidentiality (C):	HIGH
Integrity (I):	HIGH
Availability (A):	HIGH

CVSS v2

Base Score:	7.2
Access Vector (AV):	LOCAL
Access Complexity (AC):	LOW
Authentication (AU):	NONE
Confidentiality (C):	COMPLETE
Integrity (I):	COMPLETE
Availability (A):	COMPLETE
Additional information:

Mend.io Vulnerability Database

We found results for “”

CVE-2009-2692

Good to know:

Date: August 14, 2009

Language: C

Severity Score

Related Resources (43)

Severity Score

Weakness Type (CWE)

CVSS v3.1

CVSS v2

Do you need more information?