Attacker Value
Unknown
(0 users assessed)
Exploitability
Unknown
(0 users assessed)
User Interaction
Unknown
Privileges Required
Unknown
Attack Vector
Unknown
0

CVE-2007-5093

Disclosure Date: September 26, 2007 •
CVE-2007-5093
Add MITRE ATT&CK tactics and techniques that apply to this CVE.

Description

The disconnect method in the Philips USB Webcam (pwc) driver in Linux kernel 2.6.x before 2.6.22.6 “relies on user space to close the device,” which allows user-assisted local attackers to cause a denial of service (USB subsystem hang and CPU consumption in khubd) by not closing the device after the disconnect is invoked. NOTE: this rarely crosses privilege boundaries, unless the attacker can convince the victim to unplug the affected device.

Add Assessment

No one has assessed this topic. Be the first to add your voice to the community.

CVSS V3 Severity and Metrics
Base Score:
None
Impact Score:
Unknown
Exploitability Score:
Unknown
Vector:
Unknown
Attack Vector (AV):
Unknown
Attack Complexity (AC):
Unknown
Privileges Required (PR):
Unknown
User Interaction (UI):
Unknown
Scope (S):
Unknown
Confidentiality (C):
Unknown
Integrity (I):
Unknown
Availability (A):
Unknown

General Information

Offensive Application
Unknown
Utility Class
Unknown
Ports
Unknown
OS
Unknown
Vulnerable Versions
n/a
Prerequisites
Unknown
Discovered By
Unknown
PoC Author
Unknown
Metasploit Module
Unknown
Reporter
Unknown

Vendors

  • linux

Products

  • linux kernel 2.6 test9 cvs,
  • linux kernel 2.6.0,
  • linux kernel 2.6.1,
  • linux kernel 2.6.10,
  • linux kernel 2.6.11,
  • linux kernel 2.6.11 rc1 bk6,
  • linux kernel 2.6.11.1,
  • linux kernel 2.6.11.10,
  • linux kernel 2.6.11.11,
  • linux kernel 2.6.11.12,
  • linux kernel 2.6.11.2,
  • linux kernel 2.6.11.3,
  • linux kernel 2.6.11.4,
  • linux kernel 2.6.11.5,
  • linux kernel 2.6.11.6,
  • linux kernel 2.6.11.7,
  • linux kernel 2.6.11.8,
  • linux kernel 2.6.11.9,
  • linux kernel 2.6.12,
  • linux kernel 2.6.12.1,
  • linux kernel 2.6.12.12,
  • linux kernel 2.6.12.2,
  • linux kernel 2.6.12.22,
  • linux kernel 2.6.12.3,
  • linux kernel 2.6.12.4,
  • linux kernel 2.6.12.5,
  • linux kernel 2.6.12.6,
  • linux kernel 2.6.13,
  • linux kernel 2.6.13.1,
  • linux kernel 2.6.13.2,
  • linux kernel 2.6.13.3,
  • linux kernel 2.6.13.4,
  • linux kernel 2.6.13.5,
  • linux kernel 2.6.14,
  • linux kernel 2.6.14.1,
  • linux kernel 2.6.14.2,
  • linux kernel 2.6.14.3,
  • linux kernel 2.6.14.4,
  • linux kernel 2.6.14.5,
  • linux kernel 2.6.15,
  • linux kernel 2.6.15.1,
  • linux kernel 2.6.15.11,
  • linux kernel 2.6.15.2,
  • linux kernel 2.6.15.3,
  • linux kernel 2.6.15.4,
  • linux kernel 2.6.15.5,
  • linux kernel 2.6.15.6,
  • linux kernel 2.6.15.7,
  • linux kernel 2.6.16,
  • linux kernel 2.6.16.1,
  • linux kernel 2.6.16.10,
  • linux kernel 2.6.16.11,
  • linux kernel 2.6.16.12,
  • linux kernel 2.6.16.19,
  • linux kernel 2.6.16.2,
  • linux kernel 2.6.16.23,
  • linux kernel 2.6.16.27,
  • linux kernel 2.6.16.3,
  • linux kernel 2.6.16.4,
  • linux kernel 2.6.16.5,
  • linux kernel 2.6.16.7,
  • linux kernel 2.6.16.9,
  • linux kernel 2.6.17,
  • linux kernel 2.6.17.1,
  • linux kernel 2.6.17.10,
  • linux kernel 2.6.17.11,
  • linux kernel 2.6.17.12,
  • linux kernel 2.6.17.13,
  • linux kernel 2.6.17.14,
  • linux kernel 2.6.17.2,
  • linux kernel 2.6.17.3,
  • linux kernel 2.6.17.4,
  • linux kernel 2.6.17.5,
  • linux kernel 2.6.17.6,
  • linux kernel 2.6.17.7,
  • linux kernel 2.6.17.8,
  • linux kernel 2.6.17.9,
  • linux kernel 2.6.18,
  • linux kernel 2.6.18.1,
  • linux kernel 2.6.18.2,
  • linux kernel 2.6.18.3,
  • linux kernel 2.6.18.4,
  • linux kernel 2.6.19,
  • linux kernel 2.6.19.1,
  • linux kernel 2.6.19.2,
  • linux kernel 2.6.2,
  • linux kernel 2.6.20,
  • linux kernel 2.6.20.1,
  • linux kernel 2.6.20.10,
  • linux kernel 2.6.20.11,
  • linux kernel 2.6.20.12,
  • linux kernel 2.6.20.13,
  • linux kernel 2.6.20.14,
  • linux kernel 2.6.20.15,
  • linux kernel 2.6.20.2,
  • linux kernel 2.6.20.3,
  • linux kernel 2.6.20.4,
  • linux kernel 2.6.20.5,
  • linux kernel 2.6.20.8,
  • linux kernel 2.6.20.9,
  • linux kernel 2.6.21,
  • linux kernel 2.6.21.1,
  • linux kernel 2.6.21.2,
  • linux kernel 2.6.21.3,
  • linux kernel 2.6.21.4,
  • linux kernel 2.6.22,
  • linux kernel 2.6.22.1,
  • linux kernel 2.6.22.3,
  • linux kernel 2.6.22.4,
  • linux kernel 2.6.22.5,
  • linux kernel 2.6.22.6,
  • linux kernel 2.6.22.7,
  • linux kernel 2.6.23,
  • linux kernel 2.6.3,
  • linux kernel 2.6.4,
  • linux kernel 2.6.5,
  • linux kernel 2.6.6,
  • linux kernel 2.6.7,
  • linux kernel 2.6.8,
  • linux kernel 2.6.8.1,
  • linux kernel 2.6.8.1.5,
  • linux kernel 2.6.9

References

Canonical
CVE-2007-5093 (https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2007-5093)
BID-25504 (http://www.securityfocus.com/bid/25504)
Advisory
http://www.redhat.com/support/errata/RHSA-2008-0275.html
SECUNIA-30294 (http://secunia.com/advisories/30294)
20070902 Oops in pwc v4l driver (http://marc.info?l=linux-kernel&m=118873457814808&w=2)
20070903 Re: Oops in pwc v4l driver (http://marc.info?l=linux-kernel&m=118880154122548&w=2)
http://rhn.redhat.com/errata/RHSA-2008-0972.html
SECUNIA-28706 (http://secunia.com/advisories/28706)
http://www.kernel.org/pub/linux/kernel/v2.6/ChangeLog-2.6.22.6
SECUNIA-26994 (http://secunia.com/advisories/26994)
DSA-1504 (http://www.debian.org/security/2008/dsa-1504)
http://www.mandriva.com/security/advisories?name=MDVSA-2008:008
https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A10494
USN-558-1 (http://www.ubuntu.com/usn/usn-558-1)
DSA-1381 (http://www.debian.org/security/2007/dsa-1381)
http://www.mandriva.com/security/advisories?name=MDVSA-2008:105
DSA-1503 (http://www.debian.org/security/2008/dsa-1503)
USN-574-1 (http://www.ubuntu.com/usn/usn-574-1)
SECUNIA-29058 (http://secunia.com/advisories/29058)
SECUNIA-28971 (http://secunia.com/advisories/28971)
SECUNIA-28170 (http://secunia.com/advisories/28170)
SECUNIA-32799 (http://secunia.com/advisories/32799)
USN-578-1 (http://www.ubuntu.com/usn/usn-578-1)
Miscellaneous
http://marc.info/?l=linux-kernel&m=118873457814808&w=2
http://marc.info/?l=linux-kernel&m=118880154122548&w=2

Additional Info

Authenticated
Unknown
Exploitable
Unknown
Reliability
Unknown
Stability
Unknown
Available Mitigations
Unknown
Shelf Life
Unknown
Userbase/Installbase
Unknown
Patch Effectiveness
Unknown
Technical Analysis