CVE - CVE-2009-0028

CVE-ID
CVE-2009-0028	Learn more at National Vulnerability Database (NVD) • CVSS Severity Rating • Fix Information • Vulnerable Software Versions • SCAP Mappings • CPE Information
Description
The clone system call in the Linux kernel 2.6.28 and earlier allows local users to send arbitrary signals to a parent process from an unprivileged child process by launching an additional child process with the CLONE_PARENT flag, and then letting this new process exit.
References
Note: References are provided for the convenience of the reader to help distinguish between vulnerabilities. The list is not intended to be complete.
BUGTRAQ:20090516 rPSA-2009-0084-1 kernel URL:http://www.securityfocus.com/archive/1/503610/100/0/threaded BUGTRAQ:20091120 VMSA-2009-0016 VMware vCenter and ESX update release and vMA patch release address multiple security issue in third party components URL:http://www.securityfocus.com/archive/1/507985/100/0/threaded MISC:http://scary.beasts.org/security/CESA-2009-002.html MISC:http://scarybeastsecurity.blogspot.com/2009/02/linux-kernel-minor-signal-vulnerability.html CONFIRM:https://bugzilla.redhat.com/show_bug.cgi?id=479932 CONFIRM:http://wiki.rpath.com/Advisories:rPSA-2009-0084 CONFIRM:http://www.vmware.com/security/advisories/VMSA-2009-0016.html DEBIAN:DSA-1787 URL:http://www.debian.org/security/2009/dsa-1787 DEBIAN:DSA-1794 URL:http://www.debian.org/security/2009/dsa-1794 DEBIAN:DSA-1800 URL:http://www.debian.org/security/2009/dsa-1800 MANDRIVA:MDVSA-2009:118 URL:http://www.mandriva.com/security/advisories?name=MDVSA-2009:118 REDHAT:RHSA-2009:0326 URL:http://www.redhat.com/support/errata/RHSA-2009-0326.html REDHAT:RHSA-2009:0451 URL:http://www.redhat.com/support/errata/RHSA-2009-0451.html REDHAT:RHSA-2009:0459 URL:http://rhn.redhat.com/errata/RHSA-2009-0459.html SUSE:SUSE-SA:2009:010 URL:http://lists.opensuse.org/opensuse-security-announce/2009-02/msg00003.html SUSE:SUSE-SA:2009:030 URL:http://lists.opensuse.org/opensuse-security-announce/2009-06/msg00000.html SUSE:SUSE-SA:2009:031 URL:http://lists.opensuse.org/opensuse-security-announce/2009-06/msg00001.html UBUNTU:USN-751-1 URL:http://www.ubuntu.com/usn/usn-751-1 BID:33906 URL:http://www.securityfocus.com/bid/33906 OSVDB:52204 URL:http://osvdb.org/52204 OVAL:oval:org.mitre.oval:def:11187 URL:https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A11187 OVAL:oval:org.mitre.oval:def:7947 URL:https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A7947 SECUNIA:33758 URL:http://secunia.com/advisories/33758 SECUNIA:34680 URL:http://secunia.com/advisories/34680 SECUNIA:34917 URL:http://secunia.com/advisories/34917 SECUNIA:34962 URL:http://secunia.com/advisories/34962 SECUNIA:34981 URL:http://secunia.com/advisories/34981 SECUNIA:35011 URL:http://secunia.com/advisories/35011 SECUNIA:35121 URL:http://secunia.com/advisories/35121 SECUNIA:35120 URL:http://secunia.com/advisories/35120 SECUNIA:35390 URL:http://secunia.com/advisories/35390 SECUNIA:35394 URL:http://secunia.com/advisories/35394 SECUNIA:37471 URL:http://secunia.com/advisories/37471 SECUNIA:34033 URL:http://secunia.com/advisories/34033 VUPEN:ADV-2009-3316 URL:http://www.vupen.com/english/advisories/2009/3316
Assigning CNA
N/A
Date Entry Created
20081215	Disclaimer: The entry creation date may reflect when the CVE ID was allocated or reserved, and does not necessarily indicate when this vulnerability was discovered, shared with the affected vendor, publicly disclosed, or updated in CVE.
Phase (Legacy)
Assigned (20081215)
Votes (Legacy)

Comments (Legacy)

Proposed (Legacy)
N/A
This is an entry on the CVE List, which provides common identifiers for publicly known cybersecurity vulnerabilities.
Search CVE Using Keywords: You can also search by reference using the CVE Reference Maps.
For More Information: cve@mitre.org

Use of the Common Vulnerabilities and Exposures (CVE®) List and the associated references from this website are subject to the terms of use. CVE is sponsored by US-CERT in the office of Cybersecurity and Communications at the U.S. Department of Homeland Security. Copyright © 1999–2018, The MITRE Corporation. CVE and the CVE logo are registered trademarks of The MITRE Corporation. For more information, please contact us.