NetSight
IP …
medium4.6

CVE-2008-4554

The do_splice_from function in fs/splice.c in the Linux kernel before 2.6.27 does not reject file descriptors that have the O_APPEND flag set, which allows loc…

Impact

The do_splice_from function in fs/splice.c in the Linux kernel before 2.6.27 does not reject file descriptors that have the O_APPEND flag set, which allows local users to bypass append mode and make arbitrary changes to other locations in the file.

Affected products

VendorProductAffected versions
LinuxLinux Kernel
through 2.6.26.5
Versions 2.2.27, 2.4.36, 2.4.36.1, 2.4.36.2, 2.4.36.3

Weakness classification

CWE-264

References