Vulnerability Description
The Linux kernel before 2.6.18.8-0.8 in SUSE openSUSE 10.2 does not properly handle failure of an AppArmor change_hat system call, which might allow attackers to trigger the unconfining of an apparmored task.
CVSS Score
HIGH
Affected Products
| Vendor | Product | Versions |
|---|---|---|
| Linux | Linux Kernel | <= 2.6.18.8 |
| Suse | Open Suse | 10.2 |
| Novell | Apparmor | All versions |
Related Weaknesses (CWE)
References
- http://lists.opensuse.org/opensuse-security-announce/2008-02/msg00002.html
- http://secunia.com/advisories/28806Vendor Advisory
- http://lists.opensuse.org/opensuse-security-announce/2008-02/msg00002.html
- http://secunia.com/advisories/28806Vendor Advisory
FAQ
What is CVE-2008-0731?
CVE-2008-0731 is a vulnerability with a CVSS score of 7.5 (HIGH). The Linux kernel before 2.6.18.8-0.8 in SUSE openSUSE 10.2 does not properly handle failure of an AppArmor change_hat system call, which might allow attackers to trigger the unconfining of an apparmor...
How severe is CVE-2008-0731?
CVE-2008-0731 has been rated HIGH with a CVSS base score of 7.5/10. Review the CVSS metrics above for detailed severity breakdown.
Is there a patch for CVE-2008-0731?
Check the references section above for vendor advisories and patch information. Affected products include: Linux Linux Kernel, Suse Open Suse, Novell Apparmor.