Attacker Value

Unknown

(0 users assessed)

Exploitability

Unknown

(0 users assessed)

User Interaction

Unknown

Privileges Required

Unknown

Attack Vector

Unknown

0

CVE-2009-1338

Disclosure Date: April 22, 2009 •

MITRE ATT&CK

Add MITRE ATT&CK tactics and techniques that apply to this CVE.

Description

The kill_something_info function in kernel/signal.c in the Linux kernel before 2.6.28 does not consider PID namespaces when processing signals directed to PID -1, which allows local users to bypass the intended namespace isolation, and send arbitrary signals to all processes in all namespaces, via a kill command.

Add Assessment

No one has assessed this topic. Be the first to add your voice to the community.

CVSS V3 Severity and Metrics

Data provided by the National Vulnerability Database (NVD)

Base Score:

None

Impact Score:

Unknown

Exploitability Score:

Unknown

Vector:

Attack Vector (AV):

Unknown

Attack Complexity (AC):

Unknown

Privileges Required (PR):

Unknown

User Interaction (UI):

Unknown

Scope (S):

Unknown

Confidentiality (C):

Unknown

Integrity (I):

Unknown

Availability (A):

Unknown

Vendors

linux

Products

References

Canonical

CVE-2009-1338 (https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2009-1338)

Advisory

http://git.kernel.org?p=linux/kernel/git/torvalds/linux-2.6.git;a=commit;h=d25141a818383b3c3b09f065698c544a7a0ec6e7

SECUNIA-35656 (http://secunia.com/advisories/35656)

http://www.kernel.org/pub/linux/kernel/v2.6/ChangeLog-2.6.28

20090516 rPSA-2009-0084-1 kernel (http://www.securityfocus.com/archive/1/503610/100/0/threaded)

https://bugzilla.redhat.com/show_bug.cgi?id=496031

XF-kernel-killsomethinginfo-security-bypass(50386) (https://exchange.xforce.ibmcloud.com/vulnerabilities/50386)

[oss-security] 20090417 Re: CVE request: kernel: 'kill sig -1' must only apply to caller's PID namespace (http://www.openwall.com/lists/oss-security/2009/04/17/4)

SECUNIA-35120 (http://secunia.com/advisories/35120)

USN-793-1 (http://www.ubuntu.com/usn/usn-793-1)

http://www.redhat.com/support/errata/RHSA-2009-1081.html

SECUNIA-34981 (http://secunia.com/advisories/34981)

DSA-1800 (http://www.debian.org/security/2009/dsa-1800)

[linux-kernel] 20080723 Re: [PATCH 1/2] signals: kill(-1) should only signal processes in the same namespace (http://lkml.org/lkml/2008/7/23/148)

SECUNIA-35343 (http://secunia.com/advisories/35343)

[oss-security] 20090421 Re: CVE request: kernel: 'kill sig -1' must only apply to caller's PID namespace (http://www.openwall.com/lists/oss-security/2009/04/21/1)

DSA-1787 (http://www.debian.org/security/2009/dsa-1787)

http://wiki.rpath.com/Advisories:rPSA-2009-0084

[oss-security] 20090416 CVE request: kernel: 'kill sig -1' must only apply to caller's PID namespace (http://www.openwall.com/lists/oss-security/2009/04/16/2)

SECUNIA-35121 (http://secunia.com/advisories/35121)

Rapid7

Technical Analysis