NetSight
IP …
high7.8

CVE-2008-2812

The Linux kernel before 2.6.25.10 does not properly perform tty operations, which allows local users to cause a denial of service (system crash) or possibly ga…

Impact

The Linux kernel before 2.6.25.10 does not properly perform tty operations, which allows local users to cause a denial of service (system crash) or possibly gain privileges via vectors involving NULL pointer dereference of function pointers in (1) hamradio/6pack.c, (2) hamradio/mkiss.c, (3) irda/irtty-sir.c, (4) ppp_async.c, (5) ppp_synctty.c, (6) slip.c, (7) wan/x25_asy.c, and (8) wireless/strip.c in drivers/net/.

Affected products

VendorProductAffected versions
LinuxLinux Kernel
before 2.6.25.10
CanonicalUbuntu Linux
Versions 6.06, 7.04, 7.10, 8.04
NovellLinux Desktop
Version 9
OpensuseOpensuse
Versions 10.3, 11.0
SuseSuse Linux Enterprise Desktop
Version 10
SuseSuse Linux Enterprise Server
Version 10
DebianDebian Linux
Version 4.0
AvayaCommunication Manager
from 3.1
AvayaExpanded Meet-Me Conferencing
All versions
AvayaIntuity Audix Lx
Version 2.0
AvayaMeeting Exchange
Version 5.0
AvayaMessage Networking
Version 3.1

Weakness classification

CWE-476

References