CVE-2009-4271

The Linux kernel 2.6.9 through 2.6.17 on the x86_64 and amd64 platforms allows local users to cause a denial of service (panic) via a 32-bit application that calls mprotect on its Virtual Dynamic Shared Object (VDSO) page and then triggers a segmentation fault.
ProviderTypeBase ScoreAtk. VectorAtk. ComplexityPriv. RequiredVector
NISTNIST
4.7 UNKNOWN
LOCAL
MEDIUM
AV:L/AC:M/Au:N/C:N/I:N/A:C
redhatCNA
---
---
CVEADP
---
---
Base Score
CVSS 3.x
EPSS Score
Percentile: 14%
VendorProductVersion
linuxlinux_kernel
2.6.9
linuxlinux_kernel
2.6.9:rc1
linuxlinux_kernel
2.6.9:rc2
linuxlinux_kernel
2.6.9:rc3
linuxlinux_kernel
2.6.9:rc4
linuxlinux_kernel
2.6.10
linuxlinux_kernel
2.6.11
linuxlinux_kernel
2.6.11.1
linuxlinux_kernel
2.6.11.2
linuxlinux_kernel
2.6.11.3
linuxlinux_kernel
2.6.11.4
linuxlinux_kernel
2.6.11.5
linuxlinux_kernel
2.6.11.6
linuxlinux_kernel
2.6.11.7
linuxlinux_kernel
2.6.11.8
linuxlinux_kernel
2.6.11.9
linuxlinux_kernel
2.6.11.10
linuxlinux_kernel
2.6.11.11
linuxlinux_kernel
2.6.11.12
linuxlinux_kernel
2.6.12
linuxlinux_kernel
2.6.12.1
linuxlinux_kernel
2.6.12.2
linuxlinux_kernel
2.6.12.3
linuxlinux_kernel
2.6.12.4
linuxlinux_kernel
2.6.12.5
linuxlinux_kernel
2.6.12.6
linuxlinux_kernel
2.6.13
linuxlinux_kernel
2.6.13.1
linuxlinux_kernel
2.6.13.2
linuxlinux_kernel
2.6.13.3
linuxlinux_kernel
2.6.13.4
linuxlinux_kernel
2.6.13.5
linuxlinux_kernel
2.6.14
linuxlinux_kernel
2.6.14.1
linuxlinux_kernel
2.6.14.2
linuxlinux_kernel
2.6.14.3
linuxlinux_kernel
2.6.14.4
linuxlinux_kernel
2.6.14.5
linuxlinux_kernel
2.6.14.6
linuxlinux_kernel
2.6.14.7
linuxlinux_kernel
2.6.15
linuxlinux_kernel
2.6.15.1
linuxlinux_kernel
2.6.15.2
linuxlinux_kernel
2.6.15.3
linuxlinux_kernel
2.6.15.4
linuxlinux_kernel
2.6.15.5
linuxlinux_kernel
2.6.15.6
linuxlinux_kernel
2.6.15.7
linuxlinux_kernel
2.6.16
linuxlinux_kernel
2.6.16.1
linuxlinux_kernel
2.6.16.2
linuxlinux_kernel
2.6.16.3
linuxlinux_kernel
2.6.16.4
linuxlinux_kernel
2.6.16.5
linuxlinux_kernel
2.6.16.6
linuxlinux_kernel
2.6.16.7
linuxlinux_kernel
2.6.16.8
linuxlinux_kernel
2.6.16.9
linuxlinux_kernel
2.6.16.10
linuxlinux_kernel
2.6.16.11
linuxlinux_kernel
2.6.16.12
linuxlinux_kernel
2.6.16.13
linuxlinux_kernel
2.6.16.14
linuxlinux_kernel
2.6.16.15
linuxlinux_kernel
2.6.16.16
linuxlinux_kernel
2.6.16.17
linuxlinux_kernel
2.6.16.18
linuxlinux_kernel
2.6.16.19
linuxlinux_kernel
2.6.16.20
linuxlinux_kernel
2.6.16.21
linuxlinux_kernel
2.6.16.22
linuxlinux_kernel
2.6.16.23
linuxlinux_kernel
2.6.16.24
linuxlinux_kernel
2.6.16.25
linuxlinux_kernel
2.6.16.26
linuxlinux_kernel
2.6.16.27
linuxlinux_kernel
2.6.16.28
linuxlinux_kernel
2.6.16.29
linuxlinux_kernel
2.6.16.30
linuxlinux_kernel
2.6.16.31
linuxlinux_kernel
2.6.16.31:-rc1
linuxlinux_kernel
2.6.16.31:-rc2
linuxlinux_kernel
2.6.16.31:-rc3
linuxlinux_kernel
2.6.16.31:-rc4
linuxlinux_kernel
2.6.16.31:-rc5
linuxlinux_kernel
2.6.16.32
linuxlinux_kernel
2.6.16.33
linuxlinux_kernel
2.6.16.34
linuxlinux_kernel
2.6.16.35
linuxlinux_kernel
2.6.16.36
linuxlinux_kernel
2.6.16.37
linuxlinux_kernel
2.6.16.38
linuxlinux_kernel
2.6.16.39
linuxlinux_kernel
2.6.16.40
linuxlinux_kernel
2.6.16.41
linuxlinux_kernel
2.6.16.42
linuxlinux_kernel
2.6.16.43
linuxlinux_kernel
2.6.16.44
linuxlinux_kernel
2.6.16.45
linuxlinux_kernel
2.6.16.46
linuxlinux_kernel
2.6.16.47
linuxlinux_kernel
2.6.16.48
linuxlinux_kernel
2.6.16.49
linuxlinux_kernel
2.6.16.50
linuxlinux_kernel
2.6.16.51
linuxlinux_kernel
2.6.16.52
linuxlinux_kernel
2.6.16.53
linuxlinux_kernel
2.6.16.54
linuxlinux_kernel
2.6.16.55
linuxlinux_kernel
2.6.16.56
linuxlinux_kernel
2.6.16.57
linuxlinux_kernel
2.6.16.58
linuxlinux_kernel
2.6.16.59
linuxlinux_kernel
2.6.16.60
linuxlinux_kernel
2.6.16.61
linuxlinux_kernel
2.6.16.62
linuxlinux_kernel
2.6.17
linuxlinux_kernel
2.6.17:rc1
linuxlinux_kernel
2.6.17:rc2
linuxlinux_kernel
2.6.17:rc3
linuxlinux_kernel
2.6.17:rc4
linuxlinux_kernel
2.6.17:rc5
linuxlinux_kernel
2.6.17:rc6
𝑥
= Vulnerable software versions
Ubuntu logo
Ubuntu Releases
Ubuntu Product
Codename
linux
lucid
not-affected
karmic
not-affected
jaunty
not-affected
intrepid
not-affected
hardy
not-affected
dapper
dne
linux-source-2.6.15
lucid
dne
karmic
dne
jaunty
dne
intrepid
dne
hardy
dne
dapper
Fixed 2.6.15-55.84
released
References
http://www.openwall.com/lists/oss-security/2010/03/17/1
https://bugzilla.redhat.com/show_bug.cgi?id=548876
https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A10248
https://rhn.redhat.com/errata/RHSA-2010-0146.html
http://www.openwall.com/lists/oss-security/2010/03/17/1
https://bugzilla.redhat.com/show_bug.cgi?id=548876
https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A10248
https://rhn.redhat.com/errata/RHSA-2010-0146.html