Heap-based buffer overflow in the parse_tag_3_packet function in fs/ecryptfs/keystore.c in the eCryptfs subsystem in the Linux kernel before 2.6.30.4 allows local users to cause a denial of service (system crash) or possibly gain privileges via vectors involving a crafted eCryptfs file, related to a large encrypted key size in a Tag 3 packet.
CVSS Details
- CVSS 3.1 Base Score: 7.8
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Centos_linux | — | Upgrade kernel-headersUpgrade kernel-develUpgrade kernel-PAE-develUpgrade kernelUpgrade kernel-docUpgrade kernel-PAEUpgrade kernel-debugUpgrade kernel-xenUpgrade kernel-debug-develUpgrade kernel-xen-devel | Dec 1, 2016 | Jul 31, 2009 |
| Oracle_linux | — | Upgrade kernel | Oct 16, 2024 | Jul 31, 2009 |
| Suse | — | Upgrade ext4dev-kmp-defaultUpgrade kernel-xen-baseUpgrade kernel-pae-baseUpgrade ext4dev-kmp-paeUpgrade kernel-ppc64Upgrade kernel-vmiUpgrade kernel-xenUpgrade kernel-paeUpgrade kernel-sourceUpgrade kernel-vmi-baseUpgrade kernel-symsUpgrade ext4dev-kmp-vmiUpgrade kernel-defaultUpgrade ext4dev-kmp-ppc64Upgrade kernel-default-baseUpgrade kernel-kdumpUpgrade oracleasm-kmp-defaultUpgrade iscsitarget-kmp-defaultUpgrade kernel-default-manUpgrade ext4dev-kmp-xenUpgrade kernel-ppc64-base | Feb 17, 2015 | Jul 9, 2013 |
| Ubuntu | — | Upgrade linux-image-2.6.24-24-powerpc-smpUpgrade linux-image-2.6.24-24-sparc64-smpUpgrade linux-image-2.6.24-24-powerpc64-smpUpgrade linux-image-2.6.28-14-genericUpgrade linux-image-2.6.27-14-virtualUpgrade linux-image-2.6.15-54-itaniumUpgrade linux-image-2.6.24-24-hppa32Upgrade linux-image-2.6.24-24-lpiacompatUpgrade linux-image-2.6.28-14-virtualUpgrade linux-image-2.6.15-54-686Upgrade linux-image-2.6.28-14-versatileUpgrade linux-image-2.6.15-54-powerpc-smpUpgrade linux-image-2.6.24-24-genericUpgrade linux-image-2.6.15-54-mckinley-smpUpgrade linux-image-2.6.15-54-amd64-k8Upgrade linux-image-2.6.24-24-sparc64Upgrade linux-image-2.6.24-24-hppa64Upgrade linux-image-2.6.28-14-ixp4xxUpgrade linux-image-2.6.15-54-hppa64Upgrade linux-image-2.6.15-54-itanium-smpUpgrade linux-image-2.6.15-54-amd64-genericUpgrade linux-image-2.6.28-14-imx51Upgrade linux-image-2.6.24-24-386Upgrade linux-image-2.6.15-54-386Upgrade linux-image-2.6.24-24-powerpcUpgrade linux-image-2.6.24-24-xenUpgrade linux-image-2.6.15-54-hppa32-smpUpgrade linux-image-2.6.24-24-mckinleyUpgrade linux-image-2.6.28-14-lpiaUpgrade linux-image-2.6.28-14-serverUpgrade linux-image-2.6.15-54-hppa32Upgrade linux-image-2.6.15-54-amd64-xeonUpgrade linux-image-2.6.15-54-sparc64Upgrade linux-image-2.6.27-14-genericUpgrade linux-image-2.6.15-54-mckinleyUpgrade linux-image-2.6.15-54-server-bigironUpgrade linux-image-2.6.28-14-iop32xUpgrade linux-image-2.6.24-24-rtUpgrade linux-image-2.6.27-14-serverUpgrade linux-image-2.6.24-24-serverUpgrade linux-image-2.6.15-54-serverUpgrade linux-image-2.6.15-54-sparc64-smpUpgrade linux-image-2.6.15-54-hppa64-smpUpgrade linux-image-2.6.15-54-amd64-serverUpgrade linux-image-2.6.24-24-lpiaUpgrade linux-image-2.6.24-24-virtualUpgrade linux-image-2.6.24-24-openvzUpgrade linux-image-2.6.15-54-powerpc64-smpUpgrade linux-image-2.6.24-24-itaniumUpgrade linux-image-2.6.15-54-k7Upgrade linux-image-2.6.15-54-powerpc | Nov 8, 2024 | Jul 31, 2009 |
| Vmsa 2009 0016 5 Updated Service Console Package Kernel | — | Upgrade VMware ESX 4.0 to build number 208167 | Sep 2, 2010 | Jul 31, 2009 |
Prioritize with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub