Vulnerabilities > CVE-2009-4410 - Unspecified vulnerability in Linux Kernel

047910
CVSS 0.0 - NONE
Attack vector
UNKNOWN
Attack complexity
UNKNOWN
Privileges required
UNKNOWN
Confidentiality impact
UNKNOWN
Integrity impact
UNKNOWN
Availability impact
UNKNOWN
linux
nessus
NVD
Published: 2009-12-24
Updated: 2024-11-21

Summary

The fuse_ioctl_copy_user function in the ioctl handler in fs/fuse/file.c in the Linux kernel 2.6.29-rc1 through 2.6.30.y uses the wrong variable in an argument to the kunmap function, which allows local users to cause a denial of service (panic) via unknown vectors.

Vulnerable Configurations

Part Description Count
OS
Linux
33

Nessus

NASL familyFedora Local Security Checks
NASL idFEDORA_2009-13694.NASL
descriptionFix a local DoS when using fuse. Note that Tenable Network Security has extracted the preceding description block directly from the Fedora security advisory. Tenable has attempted to automatically clean and format it as much as possible without introducing additional issues.
last seen2020-06-01
modified2020-06-02
plugin id43594
published2009-12-27
reporterThis script is Copyright (C) 2009-2019 and is owned by Tenable, Inc. or an Affiliate thereof.
sourcehttps://www.tenable.com/plugins/nessus/43594
titleFedora 11 : kernel-2.6.30.10-105.fc11 (2009-13694)

Seebug

bulletinFamilyexploit
descriptionBUGTRAQ ID: 37453 CVE(CAN) ID: CVE-2009-4410 Linux Kernel是开放源码操作系统Linux所使用的内核。 Linux Kernel的fuse内核代码的ioctl处理器中存在拒绝服务漏洞，本地用户在某些环境下调用fuse_ioctl_copy_user()可能会导致系统忙碌。 Linux kernel 2.6.x 厂商补丁： Linux ----- 目前厂商已经发布了升级补丁以修复这个安全问题，请到厂商的主页下载： http://git.kernel.org/?p=linux/kernel/git/torvalds/linux-2.6.git;a=commitdiff;h=0bd87182d3ab18a32a8e9175d3f68754c58e3432
idSSV:15145
last seen2017-11-19
modified2009-12-25
published2009-12-25
reporterRoot
titleLinux Kernel fuse_ioctl_copy_user()函数本地拒绝服务漏洞

Statements

contributorTomas Hoger
lastmodified2009-12-31
organizationRed Hat
statementNot vulnerable. This issue did not affect the versions of the Linux kernel as shipped with Red Hat Enterprise Linux 3, 4, 5 and Red Hat Enterprise MRG. Shipped kernels do not include upstream commit 59efec7b that introduced the problem.

References