CVE-2008-3535
published 2008-08-08CVE-2008-3535: Off-by-one error in the iov_iter_advance function in mm/filemap.c in the Linux kernel before 2.6.27-rc2 allows local users to cause a denial of service (system…
PriorityP412medium4.9CVSS 2.0
AVLACLAuNCNINAC
EPSS
0.53%
42.0th percentile
Off-by-one error in the iov_iter_advance function in mm/filemap.c in the Linux kernel before 2.6.27-rc2 allows local users to cause a denial of service (system crash) via a certain sequence of file I/O operations with readv and writev, as demonstrated by testcases/kernel/fs/ftest/ftest03 from the Linux Test Project.
Affected
6 ranges
| Vendor | Product | Version range | Fixed in |
|---|---|---|---|
| canonical | ubuntu_linux | — | — |
| canonical | ubuntu_linux | — | — |
| canonical | ubuntu_linux | — | — |
| debian | debian_linux | — | — |
| linux | linux_kernel | < 2.6.27 | 2.6.27 |
| linux | linux_kernel | — | — |
CVSS provenance
nvdv2.04.9MEDIUMAV:L/AC:L/Au:N/C:N/I:N/A:C
vendor_ubuntu5.5MEDIUM
vendor_redhat4.9MEDIUM
Stop checking back — get the weekly exploitation signal.
Every Monday: what got weaponized or added to CISA KEV in the last seven days — each CVE cross-linked to its PoC, Nuclei template, and detection rule. Free, one email a week, unsubscribe in one click.
Ubuntu
Linux kernel vulnerabilities
vendor_ubuntu·2008-10-27·CVSS 5.5
CVE-2007-6716 [MEDIUM] Linux kernel vulnerabilities
Title: Linux kernel vulnerabilities
Summary: Linux kernel vulnerabilities
It was discovered that the direct-IO subsystem did not correctly validate
certain structures. A local attacker could exploit this to cause a system
crash, leading to a denial of service. (CVE-2007-6716)
It was discovered that the disabling of the ZERO_PAGE optimization could
lead to large memory consumption. A local attacker could exploit this to
allocate all available memory, leading to a denial of service.
(CVE-2008-2372)
It was discovered that the Datagram Congestion Control Protocol (DCCP) did
not correctly validate its arguments. If DCCP was in use, a remote attacker
could send specially crafted network traffic and cause a system crash,
leading to a denial of service. (CVE-2008-3276)
It was discovered that
Red Hat
kernel: fix off-by-one error in iov_iter_advance()
vendor_redhat·2008-07-31·CVSS 4.9
CVE-2008-3535 [MEDIUM] CWE-193 kernel: fix off-by-one error in iov_iter_advance()
kernel: fix off-by-one error in iov_iter_advance()
Off-by-one error in the iov_iter_advance function in mm/filemap.c in the Linux kernel before 2.6.27-rc2 allows local users to cause a denial of service (system crash) via a certain sequence of file I/O operations with readv and writev, as demonstrated by testcases/kernel/fs/ftest/ftest03 from the Linux Test Project.
Statement: This issue did not affect the versions of Linux kernel as shipped with Red Hat Enterprise Linux 2.1, 3, 4, and 5.
GHSA
GHSA-jcg4-g8qf-7xgh: Off-by-one error in the iov_iter_advance function in mm/filemap
ghsa_unreviewed·2022-05-02
CVE-2008-3535 [MEDIUM] CWE-193 GHSA-jcg4-g8qf-7xgh: Off-by-one error in the iov_iter_advance function in mm/filemap
Off-by-one error in the iov_iter_advance function in mm/filemap.c in the Linux kernel before 2.6.27-rc2 allows local users to cause a denial of service (system crash) via a certain sequence of file I/O operations with readv and writev, as demonstrated by testcases/kernel/fs/ftest/ftest03 from the Linux Test Project.
No detection rules found.
Bugzilla
CVE-2008-3535 kernel: fix off-by-one error in iov_iter_advance()
bugzilla·2008-08-04·CVSS 4.9
CVE-2008-3535 [MEDIUM] CVE-2008-3535 kernel: fix off-by-one error in iov_iter_advance()
CVE-2008-3535 kernel: fix off-by-one error in iov_iter_advance()
Description of problem:
Alexey Dobriyan reported that it is possible to crash a machine by running ftest03 from the LTP test suite (20080630).
The iov_iter_advance() function would look at the iov->iov_len entry even though it might have iterated over the whole array, and iov was pointing past the end. This would cause DEBUG_PAGEALLOC to trigger a kernel page fault if the allocation was at the end of a page, and the next page was unallocated.
http://lkml.org/lkml/2008/7/30/446
Discussion:
Proposed upstream patch:
http://git.kernel.org/?p=linux/kernel/git/torvalds/linux-2.6.git;a=commitdiff;h=94ad374a0751f40d25e22e036c37f7263569d24c
---
Created attachment 313297
LTP testsuite package 20080630
---
Created attachment 31
arXiv
Timeloops: Automatic System Call Policy Learning for Containerized Microservices
arxiv_fulltext·2022-09-26
Timeloops: Automatic System Call Policy Learning for Containerized Microservices
Meghna Pancholi
[email protected]
Columbia University
Andreas D. Kellas
[email protected]
Columbia University
Vasileios P. Kemerlis
[email protected]
Brown University
Simha Sethumadhavan
[email protected]
Columbia University
## Abstract
We introduce , a novel technique for automatically learning system
call filtering policies for containerized microservices applications. At
run-time, automatically learns which system calls a program should
be allowed to invoke, while rejecting attempts to call spurious system calls.
Further, addresses many of the shortcomings of state-of-the-art
static analysis-based techniques, such as the ability to generate tight filters
for programs written in interpreted languages such as PHP, Python, and
JavaScript. has a simple and rob
http://mirror.celinuxforum.org/gitstat/commit-detail.php?commit=94ad374a0751f40d25e22e036c37f7263569d24chttp://secunia.com/advisories/31881http://secunia.com/advisories/32190http://secunia.com/advisories/32393http://www.debian.org/security/2008/dsa-1636http://www.kernel.org/pub/linux/kernel/v2.6/testing/ChangeLog-2.6.27-rc2http://www.lkml.org/lkml/2008/7/30/446http://www.redhat.com/support/errata/RHSA-2008-0857.htmlhttp://www.securityfocus.com/bid/31132http://www.ubuntu.com/usn/usn-659-1https://exchange.xforce.ibmcloud.com/vulnerabilities/44492http://mirror.celinuxforum.org/gitstat/commit-detail.php?commit=94ad374a0751f40d25e22e036c37f7263569d24chttp://secunia.com/advisories/31881http://secunia.com/advisories/32190http://secunia.com/advisories/32393http://www.debian.org/security/2008/dsa-1636http://www.kernel.org/pub/linux/kernel/v2.6/testing/ChangeLog-2.6.27-rc2http://www.lkml.org/lkml/2008/7/30/446http://www.redhat.com/support/errata/RHSA-2008-0857.htmlhttp://www.securityfocus.com/bid/31132http://www.ubuntu.com/usn/usn-659-1https://exchange.xforce.ibmcloud.com/vulnerabilities/44492
2008-08-08
Published