CVE-2008-3077

MediumCVSS 4.9/10Last modified Jun 16, 2026

Description

arch/x86/kernel/ptrace.c in the Linux kernel before 2.6.25.10 on the x86_64 platform leaks task_struct references into the sys32_ptrace function, which allows local users to cause a denial of service (system crash) or have unspecified other impact via unknown vectors, possibly a use-after-free vulnerability.

Metrics

CVSS 2.0 4.9/10AV:L/AC:L/Au:N/C:N/I:N/A:C

Weakness enumeration

CWE-416

Affected software

Vendor	Product	Versions
n/a	n/a	n/a

References

http://git.kernel.org/?p=linux/kernel/git/stable/linux-2.6.25.y.git%3Ba=commitdiff%3Bh=1e9a615bfce7996ea4d815d45d364b47ac6a74e8
http://kernel.org/pub/linux/kernel/v2.6/ChangeLog-2.6.25.10Broken Link
http://secunia.com/advisories/31048Third Party Advisory
http://www.openwall.com/lists/oss-security/2008/07/03/2Mailing List, Third Party Advisory
http://www.securityfocus.com/bid/30077Third Party Advisory, VDB Entry
http://www.vupen.com/english/advisories/2008/2063/referencesThird Party Advisory
http://git.kernel.org/?p=linux/kernel/git/stable/linux-2.6.25.y.git%3Ba=commitdiff%3Bh=1e9a615bfce7996ea4d815d45d364b47ac6a74e8
http://kernel.org/pub/linux/kernel/v2.6/ChangeLog-2.6.25.10Broken Link
http://secunia.com/advisories/31048Third Party Advisory
http://www.openwall.com/lists/oss-security/2008/07/03/2Mailing List, Third Party Advisory
http://www.securityfocus.com/bid/30077Third Party Advisory, VDB Entry
http://www.vupen.com/english/advisories/2008/2063/referencesThird Party Advisory

Timeline

Published: Jul 9, 2008
Last modified: Jun 16, 2026
NVD status: Modified

Related CVEs from 2008

CVE-2008-30787.8Opera before 9.51 does not properly manage memory within functions supporting the CANVAS element, which allows remote attackers to read unin CVE-2008-307910.0Unspecified vulnerability in Opera before 9.51 on Windows allows attackers to execute arbitrary code via unknown vectors.CVE-2008-30805.1Cross-site request forgery (CSRF) vulnerability in admin.php in myWebland myBloggie 2.1.6 allows remote attackers to perform edit actions as CVE-2008-30816.5Multiple unspecified "input validation" vulnerabilities in the Web management interface (aka Messaging Administration interface) in Avaya Me CVE-2008-30824.3Cross-site scripting (XSS) vulnerability in UPM/English/login/login.asp in Commtouch Enterprise Anti-Spam Gateway 4 and 5 allows remote atta CVE-2008-30837.5SQL injection vulnerability in Brightcode Weblinks (com_brightweblinks) component for Joomla! allows remote attackers to execute arbitrary S CVE-2008-30875.0Directory traversal vulnerability in Kasseler CMS 1.3.0 allows remote attackers to read arbitrary files via a .. (dot dot) in the file param CVE-2008-30884.3Cross-site scripting (XSS) vulnerability in the Files module in Kasseler CMS 1.3.0 and 1.3.1 Lite allows remote attackers to inject arbitrar CVE-2008-30897.5SQL injection vulnerability in user.html in Xpoze Pro 3.06 (aka Xpoze Pro CMS 2008) allows remote attackers to execute arbitrary SQL command CVE-2008-30907.5Multiple SQL injection vulnerabilities in index.php in BlognPlus (BURO GUN +) 2.5.5 MySQL and PostgreSQL editions allow remote attackers to CVE-2008-30913.5Cross-site scripting (XSS) vulnerability in the Taxonomy Autotagger module 5.x before 5.x-1.8 for Drupal allows remote authenticated users, CVE-2008-30926.5SQL injection vulnerability in the Taxonomy Autotagger module 5.x before 5.x-1.8 for Drupal allows remote authenticated users, with create o