CVE Vulnerabilities

CVE-2009-0343

Published: Jan 29, 2009 | Modified: Oct 11, 2018
CVSS 3.x
N/A
Source:
NVD
CVSS 2.x
7.2 HIGH
AV:L/AC:L/Au:N/C:C/I:C/A:C
RedHat/V2
RedHat/V3
Ubuntu

Niels Provos Systrace 1.6f and earlier on the x86_64 Linux platform allows local users to bypass intended access restrictions by making a 32-bit syscall with a syscall number that corresponds to a policy-compliant 64-bit syscall, related to race conditions that occur in monitoring 64-bit processes.

Affected Software

Name Vendor Start Version End Version
Systrace Niels_provos * 1.6e (including)
Systrace Niels_provos 1.1 (including) 1.1 (including)
Systrace Niels_provos 1.2 (including) 1.2 (including)
Systrace Niels_provos 1.3 (including) 1.3 (including)
Systrace Niels_provos 1.4 (including) 1.4 (including)
Systrace Niels_provos 1.5 (including) 1.5 (including)
Systrace Niels_provos 1.6 (including) 1.6 (including)
Systrace Niels_provos 1.6a (including) 1.6a (including)
Systrace Niels_provos 1.6b (including) 1.6b (including)
Systrace Niels_provos 1.6c (including) 1.6c (including)
Systrace Niels_provos 1.6d (including) 1.6d (including)

References