CVE-2008-5079: linux linux_kernel Resource Management Errors

Modified

Published 09-12-2008Last modified 07-08-2024

Vulnerability summary

CVE-2008-5079 is a medium (CVSS 4.9) Resource Management Errors vulnerability in linux linux_kernel. EPSS estimates a 1.09% chance of exploitation in the next 30 days, higher than 65.5% of scored vulnerabilities. 1 public exploit is recorded.

Priority

Routine

Not severe (CVSS 4.9, local access); no exploitation reported by the 5 checked sources

Source freshness unavailable

How is this decided?

CVSS score

4.9/10

010

Medium · v2.0 (NVD)

EPSS score

1.09%

0%100%

Low · 0.00 pp in 30 days

KEVNot listedNot listed by any tracked catalog.

RansomwareNot flaggedNo ransomware use recorded.

Public exploits1exploit-database

Advisory lineage

Upstream 0 · Downstream 5

DSA-1687-1 DSA-1787-1 RHSA-2009:0021 RHSA-2009:0053 RHSA-2009:0225

Timeline

09-12-2008
PublishedVulnerability first disclosed.
07-08-2024
Last modifiedVulnerability information updated.

Description

net/atm/svc.c in the ATM subsystem in the Linux kernel 2.6.27.8 and earlier allows local users to cause a denial of service (kernel infinite loop) by making two calls to svc_listen for the same socket, and then reading a /proc/net/atm/*vc file, related to corruption of the vcc table.

CVSS metrics

1 score · 1 source · 1 version

v2.04.9

EPSS trend

Probability

1.09%

Chance of exploitation in the next 30 days

Percentile

66%

Versus all other CVEs

30-day change

No change 0.00 pp

From 1.09% on 04-10-2026

04-10-202603-11-2026

Known exploited

Compare KEV catalogs

CISA KEV

Not in the CISA KEV catalog.

ENISA CNW

Not in the ENISA CNW catalog.

CIRCL

Not in the CIRCL catalog.

Public exploits

1 found

exploit-databasedoslinuxVerified
Linux Kernel 2.6.27.8 - ATMSVC Local Denial of Service
Maturity: poc

Weaknesses

CWE · root cause

CWE-399Resource Management ErrorsWeaknesses in this category are related to improper management of system resources.

Affected systems

Version check

Known conditions: local access, no authentication (CVSS vector). Other conditions: not stated in public data.

Linux1 product

linux_kernel≤ 2.6.27.8 | 2.2.27 | 2.4.36 | 2.4.36.1 | 2.4.36.2 | 2.4.36.3 | 2.4.36.4 | 2.4.36.5 | 2.4.36.6 | 2.6 | 2.6.18 | 2.6.18:rc1 | 2.6.18:rc2 | 2.6.18:rc3 | 2.6.18:rc4 | 2.6.18:rc5 | 2.6.18:rc6 | 2.6.18:rc7 | 2.6.19.4 | 2.6.19.5 | 2.6.19.6 | 2.6.19.7 | 2.6.20.16 | 2.6.20.17 | 2.6.20.18 | 2.6.20.19 | 2.6.20.20 | 2.6.20.21 | 2.6.21.5 | 2.6.21.6 | 2.6.21.7 | 2.6.22 | 2.6.22.1 | 2.6.22.2 | 2.6.22.8 | 2.6.22.9 | 2.6.22.10 | 2.6.22.11 | 2.6.22.12 | 2.6.22.13 | 2.6.22.14 | 2.6.22.15 | 2.6.22.17 | 2.6.22.18 | 2.6.22.19 | 2.6.22.20 | 2.6.22.21 | 2.6.22.22 | 2.6.22_rc1 | 2.6.22_rc7 | 2.6.23 | 2.6.23.8 | 2.6.23.9 | 2.6.23.10 | 2.6.23.11 | 2.6.23.12 | 2.6.23.13 | 2.6.23.15 | 2.6.23.16 | 2.6.23.17 | 2.6.23_rc1 | 2.6.24 | 2.6.24.1 | 2.6.24.2 | 2.6.24.3 | 2.6.24.4 | 2.6.24.5 | 2.6.24.6 | 2.6.24.7 | 2.6.24_rc1 | 2.6.24_rc4 | 2.6.24_rc5 | 2.6.25 | 2.6.25.1 | 2.6.25.2 | 2.6.25.3 | 2.6.25.4 | 2.6.25.5 | 2.6.25.6 | 2.6.25.7 | 2.6.25.8 | 2.6.25.9 | 2.6.25.10 | 2.6.25.11 | 2.6.25.12 | 2.6.25.13 | 2.6.25.14 | 2.6.25.15 | 2.6.25.16 | 2.6.25.17 | 2.6.26 | 2.6.26.1 | 2.6.26.2 | 2.6.26.3 | 2.6.26.4 | 2.6.26.5 | 2.6.27

1 vendor · 1 product

References

29 links

www.securityfocus.com/archive/1/499044/100/0/threadedMailing ListX Refsource BUGTRAQ
www.redhat.com/support/errata/RHSA-2009-0225.htmlVendor AdvisoryX Refsource REDHAT
oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A11288VDB EntrySignatureX Refsource OVAL
marc.info?l=linux-netdev&m=122841256115780&w=2Mailing ListX Refsource MLIST
secunia.com/advisories/33706Third Party AdvisoryX Refsource SECUNIA
issues.rpath.com/browse/RPL-2915X Refsource CONFIRM
lists.opensuse.org/opensuse-security-announce/2009-02/msg00003.htmlVendor AdvisoryX Refsource SUSE
secunia.com/advisories/33641Third Party AdvisoryX Refsource SECUNIA
www.redhat.com/support/errata/RHSA-2009-0053.htmlVendor AdvisoryX Refsource REDHAT
secunia.com/advisories/33756Third Party AdvisoryX Refsource SECUNIA

Show all 29 references

www.redhat.com/archives/fedora-package-announce/2008-December/msg01358.htmlVendor AdvisoryX Refsource FEDORA
secunia.com/advisories/33348Third Party AdvisoryX Refsource SECUNIA
secunia.com/advisories/32913Third Party AdvisoryX Refsource SECUNIAVendor Advisory
secunia.com/advisories/33623Third Party AdvisoryX Refsource SECUNIA
www.securityfocus.com/archive/1/498943/100/0/threadedMailing ListX Refsource BUGTRAQ
www.mandriva.com/security/advisories?name=MDVSA-2009:032Vendor AdvisoryX Refsource MANDRIVA
wiki.rpath.com/wiki/Advisories:rPSA-2008-0332X Refsource CONFIRM
www.securityfocus.com/bid/32676VDB EntryX Refsource BID
secunia.com/advisories/34981Third Party AdvisoryX Refsource SECUNIA
securityreason.com/securityalert/4694Third Party AdvisoryX Refsource SREASON
secunia.com/advisories/33083Third Party AdvisoryX Refsource SECUNIA
usn.ubuntu.com/714-1/Vendor AdvisoryX Refsource UBUNTU
www.debian.org/security/2009/dsa-1787Vendor AdvisoryX Refsource DEBIAN
www.ubuntu.com/usn/usn-715-1Vendor AdvisoryX Refsource UBUNTU
secunia.com/advisories/33854Third Party AdvisoryX Refsource SECUNIA
www.securitytracker.com/id?1021360VDB EntryX Refsource SECTRACK
secunia.com/advisories/33704Third Party AdvisoryX Refsource SECUNIA
lists.opensuse.org/opensuse-security-announce/2009-01/msg00010.htmlVendor AdvisoryX Refsource SUSE
lists.opensuse.org/opensuse-security-announce/2009-01/msg00006.htmlVendor AdvisoryX Refsource SUSE