// For flags

CVE-2008-5300

kernel: fix soft lockups/OOM issues with unix socket garbage collector

Severity Score

4.9
*CVSS v2

Exploit Likelihood

*EPSS

Affected Versions

*CPE

Public Exploits

0
*Multiple Sources

Exploited in Wild

-
*KEV

Decision

-
*SSVC
Descriptions

Linux kernel 2.6.28 allows local users to cause a denial of service ("soft lockup" and process loss) via a large number of sendmsg function calls, which does not block during AF_UNIX garbage collection and triggers an OOM condition, a different vulnerability than CVE-2008-5029.

El kernel de Linux 2.6.28 permite a usuarios locales causar una denegación de servicio ( "bloqueo blando" y pérdida del proceso) a través de un gran número de llamadas a la función sendmsg, que no se bloquea durante la recolección de basura AF_UNIX y provoca una situación de memoria insuficiente. Se trata de una vulnerabilidad diferente a CVE-2008-5029.

*Credits: N/A
CVSS Scores
Attack Vector
Local
Attack Complexity
Low
Authentication
None
Confidentiality
None
Integrity
None
Availability
Complete
* Common Vulnerability Scoring System
SSVC
  • Decision:-
Exploitation
-
Automatable
-
Tech. Impact
-
* Organization's Worst-case Scenario
Timeline
  • 2008-12-01 CVE Reserved
  • 2008-12-01 CVE Published
  • 2023-03-08 EPSS Updated
  • 2024-08-07 CVE Updated
  • ---------- Exploited in Wild
  • ---------- KEV Due Date
  • ---------- First Exploit
CWE
  • CWE-399: Resource Management Errors
CAPEC
References (32)
URL Tag Source
http://bugzilla.redhat.com/bugzilla/show_bug.cgi?id=473259 X_refsource_confirm
http://marc.info/?l=linux-netdev&m=122721862313564&w=2 Mailing List
http://marc.info/?l=linux-netdev&m=122765505415944&w=2 Mailing List
http://osvdb.org/50272 Vdb Entry
http://secunia.com/advisories/32913 Third Party Advisory
http://secunia.com/advisories/32998 Third Party Advisory
http://secunia.com/advisories/33083 Third Party Advisory
http://secunia.com/advisories/33348 Third Party Advisory
http://secunia.com/advisories/33556 Third Party Advisory
http://secunia.com/advisories/33706 Third Party Advisory
http://secunia.com/advisories/33756 Third Party Advisory
http://secunia.com/advisories/33854 Third Party Advisory
http://securityreason.com/securityalert/4673 Third Party Advisory
http://wiki.rpath.com/wiki/Advisories:rPSA-2008-0332 X_refsource_confirm
http://www.securityfocus.com/archive/1/499044/100/0/threaded Mailing List
http://www.securityfocus.com/archive/1/512019/100/0/threaded Mailing List
http://www.securityfocus.com/bid/32516 Vdb Entry
https://exchange.xforce.ibmcloud.com/vulnerabilities/46943 Vdb Entry
https://issues.rpath.com/browse/RPL-2915 X_refsource_confirm
https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A10283 Signature
https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A11427 Signature
URL Date SRC
URL Date SRC
URL Date SRC
http://www.debian.org/security/2008/dsa-1681 2018-10-11
http://www.mandriva.com/security/advisories?name=MDVSA-2009:032 2018-10-11
http://www.redhat.com/support/errata/RHSA-2009-0014.html 2018-10-11
http://www.redhat.com/support/errata/RHSA-2009-0053.html 2018-10-11
http://www.ubuntu.com/usn/usn-715-1 2018-10-11
https://bugzilla.redhat.com/show_bug.cgi?id=470201 2018-10-11
https://rhn.redhat.com/errata/RHSA-2009-1550.html 2018-10-11
https://usn.ubuntu.com/714-1 2018-10-11
https://www.redhat.com/archives/fedora-package-announce/2008-December/msg01358.html 2018-10-11
https://access.redhat.com/security/cve/CVE-2008-5300 2009-11-03
https://bugzilla.redhat.com/show_bug.cgi?id=473259 2009-11-03
Affected Vendors, Products, and Versions
Vendor Product Version Other Status
Vendor Product Version Other Status <-- --> Vendor Product Version Other Status
Linux
Search vendor "Linux"
 Linux Kernel
Search vendor "Linux" for product "Linux Kernel"
 2.6.28
Search vendor "Linux" for product "Linux Kernel" and version "2.6.28"
-
Affected
Linux
Search vendor "Linux"
 Linux Kernel
Search vendor "Linux" for product "Linux Kernel"
 2.6.28
Search vendor "Linux" for product "Linux Kernel" and version "2.6.28"
rc1
Affected
Linux
Search vendor "Linux"
 Linux Kernel
Search vendor "Linux" for product "Linux Kernel"
 2.6.28
Search vendor "Linux" for product "Linux Kernel" and version "2.6.28"
rc2
Affected
Linux
Search vendor "Linux"
 Linux Kernel
Search vendor "Linux" for product "Linux Kernel"
 2.6.28
Search vendor "Linux" for product "Linux Kernel" and version "2.6.28"
rc3
Affected
Linux
Search vendor "Linux"
 Linux Kernel
Search vendor "Linux" for product "Linux Kernel"
 2.6.28
Search vendor "Linux" for product "Linux Kernel" and version "2.6.28"
rc4
Affected
Linux
Search vendor "Linux"
 Linux Kernel
Search vendor "Linux" for product "Linux Kernel"
 2.6.28
Search vendor "Linux" for product "Linux Kernel" and version "2.6.28"
rc5
Affected