Stack-based buffer overflow in the parse_tag_11_packet function in fs/ecryptfs/keystore.c in the eCryptfs subsystem in the Linux kernel before 2.6.30.4 allows local users to cause a denial of service (system crash) or possibly gain privileges via vectors involving a crafted eCryptfs file, related to not ensuring that the key signature length in a Tag 11 packet is compatible with the key signature buffer size.
CVSS Details
- CVSS 3.1 Base Score: 7.8
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Centos_linux | — | Upgrade kernel-debug-develUpgrade kernel-xen-develUpgrade kernel-PAE-develUpgrade kernelUpgrade kernel-headersUpgrade kernel-develUpgrade kernel-PAEUpgrade kernel-debugUpgrade kernel-docUpgrade kernel-xen | Dec 1, 2016 | Jul 31, 2009 |
| Oracle_linux | — | Upgrade kernel | Oct 16, 2024 | Jul 31, 2009 |
| Suse | — | Upgrade oracleasm-kmp-defaultUpgrade ext4dev-kmp-xenUpgrade kernel-vmiUpgrade kernel-vmi-baseUpgrade kernel-sourceUpgrade kernel-defaultUpgrade kernel-ppc64Upgrade kernel-kdumpUpgrade iscsitarget-kmp-defaultUpgrade kernel-symsUpgrade kernel-default-baseUpgrade kernel-xen-baseUpgrade kernel-pae-baseUpgrade ext4dev-kmp-paeUpgrade ext4dev-kmp-vmiUpgrade kernel-ppc64-baseUpgrade ext4dev-kmp-defaultUpgrade kernel-default-manUpgrade ext4dev-kmp-ppc64Upgrade kernel-xenUpgrade kernel-pae | Feb 17, 2015 | Jul 9, 2013 |
| Ubuntu | — | Upgrade linux-image-2.6.28-14-imx51Upgrade linux-image-2.6.24-24-sparc64Upgrade linux-image-2.6.15-54-hppa64Upgrade linux-image-2.6.24-24-hppa32Upgrade linux-image-2.6.24-24-mckinleyUpgrade linux-image-2.6.15-54-powerpc64-smpUpgrade linux-image-2.6.24-24-itaniumUpgrade linux-image-2.6.15-54-powerpcUpgrade linux-image-2.6.27-14-serverUpgrade linux-image-2.6.15-54-server-bigironUpgrade linux-image-2.6.28-14-iop32xUpgrade linux-image-2.6.15-54-hppa64-smpUpgrade linux-image-2.6.28-14-lpiaUpgrade linux-image-2.6.15-54-powerpc-smpUpgrade linux-image-2.6.15-54-amd64-k8Upgrade linux-image-2.6.15-54-itanium-smpUpgrade linux-image-2.6.24-24-virtualUpgrade linux-image-2.6.24-24-powerpcUpgrade linux-image-2.6.24-24-lpiaUpgrade linux-image-2.6.24-24-386Upgrade linux-image-2.6.15-54-hppa32Upgrade linux-image-2.6.15-54-amd64-serverUpgrade linux-image-2.6.24-24-rtUpgrade linux-image-2.6.15-54-sparc64Upgrade linux-image-2.6.24-24-genericUpgrade linux-image-2.6.24-24-sparc64-smpUpgrade linux-image-2.6.15-54-mckinley-smpUpgrade linux-image-2.6.27-14-virtualUpgrade linux-image-2.6.28-14-virtualUpgrade linux-image-2.6.28-14-versatileUpgrade linux-image-2.6.15-54-serverUpgrade linux-image-2.6.15-54-sparc64-smpUpgrade linux-image-2.6.15-54-hppa32-smpUpgrade linux-image-2.6.15-54-itaniumUpgrade linux-image-2.6.24-24-powerpc-smpUpgrade linux-image-2.6.15-54-k7Upgrade linux-image-2.6.24-24-openvzUpgrade linux-image-2.6.15-54-386Upgrade linux-image-2.6.15-54-686Upgrade linux-image-2.6.28-14-genericUpgrade linux-image-2.6.28-14-serverUpgrade linux-image-2.6.24-24-serverUpgrade linux-image-2.6.24-24-powerpc64-smpUpgrade linux-image-2.6.24-24-lpiacompatUpgrade linux-image-2.6.28-14-ixp4xxUpgrade linux-image-2.6.24-24-xenUpgrade linux-image-2.6.27-14-genericUpgrade linux-image-2.6.15-54-amd64-genericUpgrade linux-image-2.6.24-24-hppa64Upgrade linux-image-2.6.15-54-amd64-xeonUpgrade linux-image-2.6.15-54-mckinley | Nov 8, 2024 | Jul 31, 2009 |
| Vmsa 2009 0016 5 Updated Service Console Package Kernel | — | Upgrade VMware ESX 4.0 to build number 208167 | Sep 2, 2010 | Jul 31, 2009 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub