CVE-2009-0834

CVE Details

Release Date:

2009-03-06

Description

The audit_syscall_entry function in the Linux kernel 2.6.28.7 and earlier on the x86_64 platform does not properly handle (1) a 32-bit process making a 64-bit syscall or (2) a 64-bit process making a 32-bit syscall, which allows local users to bypass certain syscall audit configurations via crafted syscalls, a related issue to CVE-2009-0342 and CVE-2009-0343.

See more information about CVE-2009-0834 from MITRE CVE dictionary and NIST NVD

CVSS v2.0 metrics

NOTE: The following CVSS v2.0 metrics and score provided are preliminary and subject to review.

Base Score:	3.6	Base Metrics:	AV:L/AC:L/Au:N/C:P/I:P/A:N
Access Vector:	Local network	Attack Complexity:	Low
Authentication:	None required	Confidentiality Impact:	Partial
Integrity Impact:	Partial	Availability Impact:	None

Errata information

Platform	Errata	Release Date
Oracle Enterprise Linux version 4 (kernel)	ELSA-2009-0459	2009-05-01
Oracle Enterprise Linux version 4 (ocfs2-2.6.9-78.0.22.0.1.EL)	ELSA-2009-0459	2009-05-01
Oracle Enterprise Linux version 4 (oracleasm-2.6.9-78.0.22.0.1.EL)	ELSA-2009-0459	2009-05-01
Oracle Linux version 5 (kernel)	ELSA-2009-0473	2009-05-07
Oracle Linux version 5 (ocfs2-2.6.18-128.1.10.0.1.el5)	ELSA-2009-0473	2009-05-07
Oracle Linux version 5 (oracleasm-2.6.18-128.1.10.0.1.el5)	ELSA-2009-0473	2009-05-07

This page is generated automatically and has not been checked for errors or omissions. For clarification or corrections please contact the Oracle Linux ULN team