CVE-2009-3547

EPSS 4.9%

Multiple race conditions in fs/pipe.c in the Linux kernel before 2.6.32-rc6 allow local users to cause a denial of service (NULL pointer dereference and system crash) or gain privileges by attempting to open an anonymous pipe via a /proc/*/fd/ pathname.

Affected products

n/a · n/a

public PoCs found — 5

exploitdbwww.exploit-db.com/exploits/9844unverified exploitdbwww.exploit-db.com/exploits/33321unverified exploitdbwww.exploit-db.com/exploits/40812unverified exploitdbwww.exploit-db.com/exploits/10018unverified exploitdbwww.exploit-db.com/exploits/33322unverified

⚠ Public resources, to assess the exposure of systems you control or are authorized to test. Test only with authorization.

Want to know if your infrastructure is exposed to this?

Talk to TrueHacking →

References

http://git.kernel.org/?p=linux/kernel/git/torvalds/linux-2.6.git%3Ba=commit%3Bh=ad3960243e55320d74195fb85c975e0a8cc4466c http://lists.opensuse.org/opensuse-security-announce/2009-11/msg00005.html http://lists.opensuse.org/opensuse-security-announce/2009-11/msg00007.html http://lists.opensuse.org/opensuse-security-announce/2010-01/msg00000.html http://lists.opensuse.org/opensuse-security-announce/2010-02/msg00005.html http://lists.vmware.com/pipermail/security-announce/2010/000082.html http://lkml.org/lkml/2009/10/14/184 http://lkml.org/lkml/2009/10/21/42 http://marc.info/?l=oss-security&m=125724568017045&w=2 https://bugzilla.redhat.com/show_bug.cgi?id=530490 http://secunia.com/advisories/37351 http://secunia.com/advisories/38017