CVE-2008-2812
High
Description
The Linux kernel before 2.6.25.10 does not properly perform tty operations, which allows local users to cause a denial of service (system crash) or possibly gain privileges via vectors involving NULL pointer dereference of function pointers in (1) hamradio/6pack.c, (2) hamradio/mkiss.c, (3) irda/irtty-sir.c, (4) ppp_async.c, (5) ppp_synctty.c, (6) slip.c, (7) wan/x25_asy.c, and (8) wireless/strip.c in drivers/net/.
SeverityHigh
CVSS7.8
Exploit probability—
Product
Linux Kernel
PublishedJul 9, 2008
First seenJul 9, 2008
How to fix
Update
- linux linux_kernel2.6.25.10 or later
Vendor advisories
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| linux linux_kernel | v < 2.6.25.10 | 2.6.25.10 |
| canonical ubuntu_linux | 6.06, 7.04, 7.10, 8.04 | — |
| novell linux_desktop | 9 | — |
| opensuse opensuse | 10.3, 11.0 | — |
| suse suse_linux_enterprise_desktop | 10 | — |
| suse suse_linux_enterprise_server | 10 | — |
| debian debian_linux | 4.0 | — |
| avaya communication_manager | 3.1 ≤ v | — |
| avaya expanded_meet-me_conferencing | No range specified | — |
| avaya intuity_audix_lx | 2.0 | — |
| avaya meeting_exchange | 5.0 | — |
| avaya message_networking | 3.1 | — |
| avaya messaging_storage_server | 4.0 | — |
| avaya proactive_contact | 4.0 | — |
| avaya sip_enablement_services | No range specified, 4.0 | — |
Check your version
Choose the product and enter the version you run to see whether it falls in the affected range.
In the Intelligence 360 plan
Attack Surface Management
See the assets tied to your domains, the technologies they run and known vulnerabilities in one list.