CVE - CVE-2009-3547

CVE-ID
CVE-2009-3547	Learn more at National Vulnerability Database (NVD) • CVSS Severity Rating • Fix Information • Vulnerable Software Versions • SCAP Mappings • CPE Information
Description
Multiple race conditions in fs/pipe.c in the Linux kernel before 2.6.32-rc6 allow local users to cause a denial of service (NULL pointer dereference and system crash) or gain privileges by attempting to open an anonymous pipe via a /proc/*/fd/ pathname.
References
Note: References are provided for the convenience of the reader to help distinguish between vulnerabilities. The list is not intended to be complete.
MISC:20100625 VMSA-2010-0010 ESX 3.5 third party update for Service Console kernel URL:http://www.securityfocus.com/archive/1/512019/100/0/threaded MISC:36901 URL:http://www.securityfocus.com/bid/36901 MISC:37351 URL:http://secunia.com/advisories/37351 MISC:38017 URL:http://secunia.com/advisories/38017 MISC:38794 URL:http://secunia.com/advisories/38794 MISC:38834 URL:http://secunia.com/advisories/38834 MISC:ADV-2010-0528 URL:~~http://www.vupen.com/english/advisories/2010/0528~~ (Obsolete source) MISC:FEDORA-2009-11038 URL:https://www.redhat.com/archives/fedora-package-announce/2009-November/msg00190.html MISC:MDVSA-2009:329 URL:~~http://www.mandriva.com/security/advisories?name=MDVSA-2009:329~~ (Obsolete source) MISC:RHSA-2009:1540 URL:https://rhn.redhat.com/errata/RHSA-2009-1540.html MISC:RHSA-2009:1541 URL:https://rhn.redhat.com/errata/RHSA-2009-1541.html MISC:RHSA-2009:1548 URL:https://rhn.redhat.com/errata/RHSA-2009-1548.html MISC:RHSA-2009:1550 URL:https://rhn.redhat.com/errata/RHSA-2009-1550.html MISC:RHSA-2009:1672 URL:http://www.redhat.com/support/errata/RHSA-2009-1672.html MISC:SUSE-SA:2009:054 URL:http://lists.opensuse.org/opensuse-security-announce/2009-11/msg00005.html MISC:SUSE-SA:2009:056 URL:http://lists.opensuse.org/opensuse-security-announce/2009-11/msg00007.html MISC:SUSE-SA:2010:001 URL:http://lists.opensuse.org/opensuse-security-announce/2010-01/msg00000.html MISC:SUSE-SA:2010:012 URL:http://lists.opensuse.org/opensuse-security-announce/2010-02/msg00005.html MISC:USN-864-1 URL:http://www.ubuntu.com/usn/usn-864-1 MISC:[linux-kernel] 20091014 fs/pipe.c null pointer dereference URL:http://lkml.org/lkml/2009/10/14/184 MISC:[linux-kernel] 20091021 Re: [PATCH v4 1/1]: fs: pipe.c null pointer dereference + really sign off + unmangled diffs URL:http://lkml.org/lkml/2009/10/21/42 MISC:[oss-security] 20091103 CVE-2009-3547 kernel: fs: pipe.c null pointer dereference URL:http://marc.info/?l=oss-security&m=125724568017045&w=2 MISC:[security-announce] 20100303 VMSA-2010-0004 ESX Service Console and vMA third party updates URL:http://lists.vmware.com/pipermail/security-announce/2010/000082.html MISC:http://git.kernel.org/?p=linux/kernel/git/torvalds/linux-2.6.git%3Ba=commit%3Bh=ad3960243e55320d74195fb85c975e0a8cc4466c URL:http://git.kernel.org/?p=linux/kernel/git/torvalds/linux-2.6.git%3Ba=commit%3Bh=ad3960243e55320d74195fb85c975e0a8cc4466c MISC:http://www.kernel.org/pub/linux/kernel/v2.6/testing/ChangeLog-2.6.32-rc6 URL:http://www.kernel.org/pub/linux/kernel/v2.6/testing/ChangeLog-2.6.32-rc6 MISC:https://bugzilla.redhat.com/show_bug.cgi?id=530490 URL:https://bugzilla.redhat.com/show_bug.cgi?id=530490 MISC:oval:org.mitre.oval:def:11513 URL:https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A11513 MISC:oval:org.mitre.oval:def:7608 URL:https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A7608 MISC:oval:org.mitre.oval:def:9327 URL:https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A9327
Assigning CNA
Red Hat, Inc.
Date Record Created
20091005	Disclaimer: The record creation date may reflect when the CVE ID was allocated or reserved, and does not necessarily indicate when this vulnerability was discovered, shared with the affected vendor, publicly disclosed, or updated in CVE.
Phase (Legacy)
Assigned (20091005)
Votes (Legacy)

Comments (Legacy)

Proposed (Legacy)
N/A
This is an record on the CVE List, which provides common identifiers for publicly known cybersecurity vulnerabilities.
Search CVE Using Keywords: You can also search by reference using the CVE Reference Maps.
For More Information: CVE Request Web Form (select "Other" from dropdown)