CVE-2008-2137 - CVE Reference - Advisories

CVE Reference: CVE-2008-2137

NOTE: The text on this page is written by CVE MITRE and reflects neither the opinions of Secunia or the results of our research. All data on this page is written and maintained by CVE MITRE.

Original Page at CVE MITRE: CVE-2008-2137

Description: The (1) sparc_mmap_check function in arch/sparc/kernel/sys_sparc.c and the (2) sparc64_mmap_check function in arch/sparc64/kernel/sys_sparc.c, in the Linux kernel before 2.6.25.3, omit some virtual-address range (aka span) checks when the mmap MAP_FIXED bit is not set, which allows local users to cause a denial of service (panic) via unspecified mmap calls.

CVE Status: Candidate

References: UBUNTU http://www.ubuntu.com/usn/usn-625-1 SAID Secunia Advisory: SA30368 Secunia Advisory: SA31107 MLIST http://kerneltrap.org/mailarchive/git-commits-head/2008/5/8/1760604 DEBIAN http://www.debian.org/security/2008/dsa-1588 CONFIRM http://www.kernel.org/pub/linux/kernel/v2.6/ChangeLog-2.6.25.3 BID 29397

Return to the previous page.

Secunia PSI
Scan | Patch | Track
Free Download

Secunia Poll

Most Popular Advisories

1.	OpenOffice "rtl_allocateMe mory()" Truncation Vulnerability

2.	Joomla Community Builder Component File Inclusion

3.	Novell eDirectory Multiple Vulnerabilities

4.	HP TCP/IP Services for OpenVMS Finger Format String Vulnerability

5.	dotProject SQL Injection and Cross-Site Scripting

6.	Slackware update for amarok

7.	Caudium "configvar" Insecure Temporary Files

8.	phpMyRealty "price_max" SQL Injection Vulnerability

9.	GpsDrive "geo-code" Insecure Temporary Files

10.	Adium MSN SLP Message Integer Overflow Vulnerabilities