CVE-2007-3739 : Detail

CVE-2007-3739

0.1%V4
2007-09-14
01h00 +00:00
Overflow
Local
2024-08-07
14h28 +00:00
Notifikasi untuk CVE tertentu
Tetap terinformasi tentang perubahan untuk CVE tertentu.
Kelola notifikasi

Deskripsi CVE

mm/mmap.c in the hugetlb kernel, when run on PowerPC systems, does not prevent stack expansion from entering into reserved kernel page memory, which allows local users to cause a denial of service (OOPS) via unspecified vectors.

Informasi CVE

Kelemahan Terkait

CWE-ID Nama Kelemahan Sumber
CWE-119 Improper Restriction of Operations within the Bounds of a Memory Buffer
The product performs operations on a memory buffer, but it reads from or writes to a memory location outside the buffer's intended boundary.
CWE-399 Category : Resource Management Errors
Weaknesses in this category are related to improper management of system resources.

Metrik

Metrik Skor Tingkat keparahan CVSS Vektor Sumber
V2 4.7 AV:L/AC:M/Au:N/C:N/I:N/A:C nvd@nist.gov

EPSS

EPSS adalah model penilaian yang memprediksi kemungkinan suatu kerentanan dieksploitasi.

Skor EPSS

Model EPSS menghasilkan skor probabilitas antara 0 dan 1 (0 hingga 100%). Semakin tinggi skor, semakin besar probabilitas bahwa suatu kerentanan akan dieksploitasi.

Persentil EPSS

Persentil digunakan untuk meranking CVE berdasarkan skor EPSS mereka. Misalnya, CVE di persentil ke-95 berdasarkan skor EPSS-nya lebih mungkin dieksploitasi daripada 95% CVE lainnya. Dengan demikian, persentil digunakan untuk membandingkan skor EPSS suatu CVE dengan CVE lainnya.

Produk yang Disebutkan

Konfigurasi 0

Redhat>>Enterprise_linux >> Version 5.0

Redhat>>Enterprise_linux >> Version 5.0

Apple>>Powerpc >> Version *

Referensi

http://lkml.org/lkml/2007/1/29/180
Tags : mailing-list, x_refsource_MLIST
http://secunia.com/advisories/27747
Tags : third-party-advisory, x_refsource_SECUNIA
http://www.redhat.com/support/errata/RHSA-2007-1049.html
Tags : vendor-advisory, x_refsource_REDHAT
http://secunia.com/advisories/27913
Tags : third-party-advisory, x_refsource_SECUNIA
http://www.redhat.com/support/errata/RHSA-2007-0939.html
Tags : vendor-advisory, x_refsource_REDHAT
http://secunia.com/advisories/26978
Tags : third-party-advisory, x_refsource_SECUNIA
http://www.debian.org/security/2008/dsa-1504
Tags : vendor-advisory, x_refsource_DEBIAN
http://www.ubuntu.com/usn/usn-518-1
Tags : vendor-advisory, x_refsource_UBUNTU
http://secunia.com/advisories/26760
Tags : third-party-advisory, x_refsource_SECUNIA
http://www.redhat.com/support/errata/RHSA-2007-0705.html
Tags : vendor-advisory, x_refsource_REDHAT
http://secunia.com/advisories/26955
Tags : third-party-advisory, x_refsource_SECUNIA
http://secunia.com/advisories/29058
Tags : third-party-advisory, x_refsource_SECUNIA
http://secunia.com/advisories/27436
Tags : third-party-advisory, x_refsource_SECUNIA
http://www.debian.org/security/2007/dsa-1378
Tags : vendor-advisory, x_refsource_DEBIAN
http://secunia.com/advisories/23955
Tags : third-party-advisory, x_refsource_SECUNIA