lkml.org 
[lkml]   [2009]   [Nov]   [4]   [last100]   RSS Feed
Views: [wrap][no wrap]   [headers]  [forward] 
 
Messages in this thread
    /
    Date
    From
    SubjectCVE-2009-2584
    Hi,

    CVE-2009-2584 [0],[1] has been disclosed for quite a while now (with
    existing exploit code by Brad Spengler [2]). A patch has also been
    available for the same amount of time [3], but as of 2.6.32-rc6 it is
    still not applied. Did this slip through the cracks? Thanks upfront
    for any info on the matter.

    Best wishes,
    Mike

    [0] http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2009-2584
    [1] http://xorl.wordpress.com/2009/07/21/linux-kernel-sgi-gru-driver-off-by-one-overwrite/
    [2] http://grsecurity.net/~spender/exploit_demo.c
    [3] http://lkml.org/lkml/2009/7/20/348


    \
     
     \ /
      Last update: 2009-11-04 23:03    [W:0.022 / U:88.940 seconds]
    ©2003-2016 Jasper Spaans. hosted at Digital OceanAdvertise on this site