CVE-2009-2692
Publicada em · Atualizada em
Aviso por e-mail quando ela entrar no KEV, ganhar PoC pública ou subir de nota.
65Vexday Risk Score
Corrija agora. Ela exploração observada na prática e tem exploit funcional público.
ssvc Actepss 15%
da publicação à armano mesmo dia
Publicada no NVD14 de ago.
1ª PoC14 de ago.
metasploit13 de ago.
Exploração observada+6023d
The Linux kernel 2.6.0 through 2.6.30.4, and 2.4.4 through 2.4.37.4, does not initialize all function pointers for socket operations in proto_ops structures, which allows local users to trigger a NULL pointer dereference and gain privileges by using mmap to map page zero, placing arbitrary code on this page, and then invoking an unavailable operation, as demonstrated by the sendpage operation (sock_sendpage function) on a PF_PPPOX socket.
Produtos afetados
n/a · n/aPoCs públicas encontradas — 11✓ VexDay Proof
exploitdb✓ VexDay Proofwww.exploit-db.com/exploits/9435exploitdb✓ VexDay Proofwww.exploit-db.com/exploits/9436exploitdb✓ VexDay Proofwww.exploit-db.com/exploits/9545exploitdb✓ VexDay Proofwww.exploit-db.com/exploits/9598exploitdb✓ VexDay Proofwww.exploit-db.com/exploits/9479exploitdb✓ VexDay Proofwww.exploit-db.com/exploits/9641exploitdb✓ VexDay Proofwww.exploit-db.com/exploits/9477exploitdb✓ VexDay Proofwww.exploit-db.com/exploits/19933githubgithub.com/jdvalentini/CVE-2009-2692★ 0cve_referencewww.exploit-db.com/exploits/19933não verificadocve_referencewww.exploit-db.com/exploits/9477não verificado⚠ Recursos públicos, para você avaliar a exposição de sistemas que controla ou está autorizado a testar. Teste apenas com autorização.
Referências
http://archives.neohapsis.com/archives/fulldisclosure/2009-08/0174.htmlhttp://blog.cr0.org/2009/08/linux-null-pointer-dereference-due-to.htmlhttp://git.kernel.org/?p=linux/kernel/git/stable/linux-2.4.37.y.git%3Ba=commit%3Bh=c18d0fe535a73b219f960d1af3d0c264555a12e3http://git.kernel.org/?p=linux/kernel/git/torvalds/linux-2.6.git%3Ba=commit%3Bh=e694958388c50148389b0e9b9e9e8945cf0f1b98http://grsecurity.net/~spender/wunderbar_emporium.tgzhttp://lists.opensuse.org/opensuse-security-announce/2009-09/msg00001.htmlhttp://rhn.redhat.com/errata/RHSA-2009-1222.htmlhttp://rhn.redhat.com/errata/RHSA-2009-1223.htmlhttps://bugzilla.redhat.com/show_bug.cgi?id=516949http://secunia.com/advisories/36278http://secunia.com/advisories/36289http://secunia.com/advisories/36327