PT-2009-4347

CVE-2009-1883

Publicado

2009-09-15

Atualizado

2017-09-29

Descrição por

CVSS 2.0

4.4

Média

MétricasAV:L/AC:M/Au:N/C:P/I:P/A:P

Name of the Vulnerable Software and Affected Versions: Linux kernel version 2.6.9

Description: The issue concerns the z90crypt unlocked ioctl function in the z90crypt driver, which fails to perform a capability check for the Z90QUIESCE operation. This allows local users with euid 0 privileges to cause a driver outage.

Recommendations: For Linux kernel version 2.6.9, consider disabling the z90crypt driver or restricting its use to prevent exploitation until a fix is available.

Explorabilidade

Correção

Pesquisadores

Solar Designer

Fornecedores

Produtos afetados

Enumeração de fraquezas

CWE-264

Identificadores relacionados

CVE-2009-1883

DSA-1929-1

RHSA-2009:1438