SB2009082802 - Memory corruption in Linux kernel

CSH
CYBERSECURITY HELP
Sign In REGISTER

Main Vulnerability Database SB2009082802

SB2009082802 - Memory corruption in Linux kernel

Published: August 28, 2009

Security Bulletin ID SB2009082802
Severity
Low
Patch available
YES
Number of vulnerabilities 1
Exploitation vector Local access
Highest impact Code execution

Breakdown by Severity

Low 100%
  • Low
  • Medium
  • High
  • Critical

Description

This security bulletin contains information about 1 security vulnerability.


1) Memory corruption (CVE-ID: CVE-2009-2695)

The vulnerability allows a local user to execute arbitrary code.

The Linux kernel before 2.6.31-rc7 does not properly prevent mmap operations that target page 0 and other low memory addresses, which allows local users to gain privileges by exploiting NULL pointer dereference vulnerabilities, related to (1) the default configuration of the allow_unconfined_mmap_low boolean in SELinux on Red Hat Enterprise Linux (RHEL) 5, (2) an error that causes allow_unconfined_mmap_low to be ignored in the unconfined_t domain, (3) lack of a requirement for the CAP_SYS_RAWIO capability for these mmap operations, and (4) interaction between the mmap_min_addr protection mechanism and certain application programs.


Remediation

Install update from vendor's website.

References