Heap-based buffer overflow in the parse_tag_3_packet function in fs/ecryptfs/keystore.c in the eCryptfs subsystem in the Linux kernel before 2.6.30.4 allows local users to cause a denial of service (system crash) or possibly gain privileges via vectors involving a crafted eCryptfs file, related to a large encrypted key size in a Tag 3 packet.
CVSS Details
- CVSS 3.1 Base Score: 7.8
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Centos_linux | — | Upgrade kernel-develUpgrade kernel-docUpgrade kernelUpgrade kernel-headersUpgrade kernel-PAE-develUpgrade kernel-debugUpgrade kernel-xenUpgrade kernel-debug-develUpgrade kernel-PAEUpgrade kernel-xen-devel | Dec 1, 2016 | Jul 31, 2009 |
| Oracle_linux | — | Upgrade kernel | Oct 16, 2024 | Jul 31, 2009 |
| Suse | — | Upgrade kernel-xenUpgrade ext4dev-kmp-defaultUpgrade kernel-sourceUpgrade ext4dev-kmp-vmiUpgrade kernel-ppc64Upgrade ext4dev-kmp-paeUpgrade kernel-pae-baseUpgrade kernel-vmiUpgrade kernel-vmi-baseUpgrade kernel-xen-baseUpgrade kernel-paeUpgrade kernel-symsUpgrade kernel-kdumpUpgrade iscsitarget-kmp-defaultUpgrade oracleasm-kmp-defaultUpgrade kernel-default-baseUpgrade kernel-defaultUpgrade ext4dev-kmp-ppc64Upgrade kernel-default-manUpgrade ext4dev-kmp-xenUpgrade kernel-ppc64-base | Feb 17, 2015 | Jul 9, 2013 |
| Ubuntu | — | Upgrade linux-image-2.6.15-54-sparc64-smpUpgrade linux-image-2.6.24-24-serverUpgrade linux-image-2.6.15-54-mckinleyUpgrade linux-image-2.6.15-54-sparc64Upgrade linux-image-2.6.24-24-mckinleyUpgrade linux-image-2.6.24-24-openvzUpgrade linux-image-2.6.15-54-powerpc64-smpUpgrade linux-image-2.6.15-54-hppa64-smpUpgrade linux-image-2.6.15-54-amd64-serverUpgrade linux-image-2.6.27-14-serverUpgrade linux-image-2.6.15-54-k7Upgrade linux-image-2.6.28-14-serverUpgrade linux-image-2.6.28-14-lpiaUpgrade linux-image-2.6.24-24-lpiaUpgrade linux-image-2.6.24-24-rtUpgrade linux-image-2.6.15-54-amd64-xeonUpgrade linux-image-2.6.15-54-serverUpgrade linux-image-2.6.15-54-hppa32Upgrade linux-image-2.6.15-54-powerpcUpgrade linux-image-2.6.15-54-server-bigironUpgrade linux-image-2.6.15-54-hppa32-smpUpgrade linux-image-2.6.27-14-genericUpgrade linux-image-2.6.28-14-iop32xUpgrade linux-image-2.6.24-24-virtualUpgrade linux-image-2.6.24-24-itaniumUpgrade linux-image-2.6.28-14-genericUpgrade linux-image-2.6.28-14-imx51Upgrade linux-image-2.6.24-24-xenUpgrade linux-image-2.6.24-24-sparc64Upgrade linux-image-2.6.15-54-686Upgrade linux-image-2.6.24-24-sparc64-smpUpgrade linux-image-2.6.28-14-ixp4xxUpgrade linux-image-2.6.15-54-powerpc-smpUpgrade linux-image-2.6.15-54-mckinley-smpUpgrade linux-image-2.6.24-24-powerpc-smpUpgrade linux-image-2.6.24-24-386Upgrade linux-image-2.6.24-24-powerpc64-smpUpgrade linux-image-2.6.24-24-hppa32Upgrade linux-image-2.6.15-54-amd64-k8Upgrade linux-image-2.6.15-54-itanium-smpUpgrade linux-image-2.6.27-14-virtualUpgrade linux-image-2.6.24-24-hppa64Upgrade linux-image-2.6.24-24-lpiacompatUpgrade linux-image-2.6.28-14-versatileUpgrade linux-image-2.6.28-14-virtualUpgrade linux-image-2.6.15-54-386Upgrade linux-image-2.6.15-54-itaniumUpgrade linux-image-2.6.24-24-powerpcUpgrade linux-image-2.6.15-54-amd64-genericUpgrade linux-image-2.6.15-54-hppa64Upgrade linux-image-2.6.24-24-generic | Nov 8, 2024 | Jul 31, 2009 |
| Vmsa 2009 0016 5 Updated Service Console Package Kernel | — | Upgrade VMware ESX 4.0 to build number 208167 | Sep 2, 2010 | Jul 31, 2009 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub