CVE-2008-1294: Input Validation
Published May 2, 2008
·Updated
Linux kernel 2.6.17, and other versions before 2.6.22, does not check when a user attempts to set RLIMITCPU to 0 until after the change is made, which allows local users to bypass intended resource limits.
Affected Software
143 affected components
Linux Linux kernel=2.6.20.6
Linux Linux kernel=2.6.17-rc6
Linux Linux kernel=2.6.20.9
Linux Linux kernel=2.6.18-rc3
Linux Linux kernel=2.6.16.16
Linux Linux kernel=2.6.20-rc2
Linux Linux kernel=2.6.18.7
Linux Linux kernel=2.6.17.12
Linux Linux kernel=2.6.16.39
Linux Linux kernel=2.6.21
Linux Linux kernel=2.6.21-git3
Linux Linux kernel=2.6.16.9
Linux Linux kernel=2.6.17.9
Linux Linux kernel=2.6.19-rc4
Linux Linux kernel=2.6.21-git5
Linux Linux kernel=2.6.16.43
Linux Linux kernel=2.6.21-git4
Linux Linux kernel=2.6.16.6
Linux Linux kernel=2.6.16.8
Linux Linux kernel=2.6.16-rc6
Linux Linux kernel=2.6.20.13
Linux Linux kernel=2.6.21-rc5
Linux Linux kernel=2.6.18-rc2
Linux Linux kernel=2.6.16-rc1
Linux Linux kernel=2.6.17.2
Linux Linux kernel=2.6.18-rc5
Linux Linux kernel=2.6.21-rc4
Linux Linux kernel=2.6.16.34
Linux Linux kernel=2.6.18-rc4
Linux Linux kernel=2.6.17.8
Linux Linux kernel=2.6.17.4
Linux Linux kernel=2.6.16.18
Linux Linux kernel=2.6.17.14
Linux Linux kernel=2.6.16.45
Linux Linux kernel=2.6.18.3
Linux Linux kernel=2.6.16.37
Linux Linux kernel=2.6.16.48
Linux Linux kernel=2.6.16.13
Linux Linux kernel=2.6.16.4
Linux Linux kernel=2.6.17.3
Linux Linux kernel=2.6.20.5
Linux Linux kernel=2.6.16.15
Linux Linux kernel=2.6.19.3
Linux Linux kernel=2.6.19.1
Linux Linux kernel=2.6.18.4
Linux Linux kernel=2.6.16.1
Linux Linux kernel=2.6.18.1
Linux Linux kernel=2.6.2
Linux Linux kernel=2.6.17.5
Linux Linux kernel=2.6.2-rc3
Linux Linux kernel=2.6.18.5
Linux Linux kernel=2.6.21.1
Linux Linux kernel=2.6.16.32
Linux Linux kernel=2.6.16.49
Linux Linux kernel=2.6.17
Linux Linux kernel=2.6.19.2
Linux Linux kernel=2.6.21.4
Linux Linux kernel=2.6.16.11
Linux Linux kernel=2.6.21-git2
Linux Linux kernel=2.6.16.14
Linux Linux kernel=2.6.20.12
Linux Linux kernel=2.6.16.25
Linux Linux kernel=2.6.16.21
Linux Linux kernel=2.6.16.33
Linux Linux kernel=2.6.16.28
Linux Linux kernel=2.6.17.10
Linux Linux kernel=2.6.19-rc1
Linux Linux kernel=2.6.16.23
Linux Linux kernel=2.6.16-rc5
Linux Linux kernel=2.6.20
Linux Linux kernel=2.6.16.3
Linux Linux kernel=2.6.17-rc3
Linux Linux kernel<=2.6.21
Linux Linux kernel=2.6.16.36
Linux Linux kernel=2.6.16.46
Linux Linux kernel=2.6.17.1
Linux Linux kernel=2.6.20.8
Linux Linux kernel=2.6.21-rc6
Linux Linux kernel=2.6.20.15
Linux Linux kernel=2.6.2-rc1
Linux Linux kernel=2.6.16-rc4
Linux Linux kernel=2.6.21-git7
Linux Linux kernel=2.6.17-rc1
Linux Linux kernel=2.6.17-rc2
Linux Linux kernel=2.6.18.8
Linux Linux kernel=2.6.16.31
Linux Linux kernel=2.6.16.26
Linux Linux kernel=2.6.18.2
Linux Linux kernel=2.6.16.29
Linux Linux kernel=2.6.20.11
Linux Linux kernel=2.6.19
Linux Linux kernel=2.6.20.3
Linux Linux kernel=2.6.16
Linux Linux kernel=2.6.21.3
Linux Linux kernel=2.6.16.51
Linux Linux kernel=2.6.16.22
Linux Linux kernel=2.6.16.40
Linux Linux kernel=2.6.16.47
Linux Linux kernel=2.6.17.11
Linux Linux kernel=2.6.16.10
Linux Linux kernel=2.6.16.41
Linux Linux kernel=2.6.16.52
Linux Linux kernel=2.6.20.10
Linux Linux kernel=2.6.16.24
Linux Linux kernel=2.6.16_rc7
Linux Linux kernel=2.6.16.30
Linux Linux kernel=2.6.21.2
Linux Linux kernel=2.6.16.38
Linux Linux kernel=2.6.16.17
Linux Linux kernel=2.6.21-git1
Linux Linux kernel=2.6.20.2
Linux Linux kernel=2.6.16.12
Linux Linux kernel=2.6.16.27
Linux Linux kernel=2.6.16.53
Linux Linux kernel=2.6.18-rc7
Linux Linux kernel=2.6.17.7
Linux Linux kernel=2.6.20.1
Linux Linux kernel=2.6.16.2
Linux Linux kernel=2.6.18.6
Linux Linux kernel=2.6.16.44
Linux Linux kernel=2.6.16.35
Linux Linux kernel=2.6.16.50
Linux Linux kernel=2.6.16-rc3
Linux Linux kernel=2.6.18-rc6
Linux Linux kernel=2.6.18
Linux Linux kernel=2.6.19-rc2
Linux Linux kernel=2.6.20.4
Linux Linux kernel=2.6.17.6
Linux Linux kernel=2.6.16.7
Linux Linux kernel=2.6.17.13
Linux Linux kernel=2.6.2-rc2
Linux Linux kernel=2.6.19-rc3
Linux Linux kernel=2.6.20.14
Linux Linux kernel=2.6.17-rc4
Linux Linux kernel=2.6.21-rc3
Linux Linux kernel=2.6.20.7
Linux Linux kernel=2.6.16.5
Linux Linux kernel=2.6.16.19
Linux Linux kernel=2.6.16.20
Linux Linux kernel=2.6.16-rc2
Linux Linux kernel=2.6.18-rc1
Linux Linux kernel=2.6.21-git6
Linux Linux kernel=2.6.17-rc5
Event History
May 2, 2008
CVE Published
via MITRE·04:00 PM
Data Sourced
via MITRE·04:00 PM
Description
Frequently Asked Questions
1
What is the severity of CVE-2008-1294?
CVE-2008-1294 has a medium severity rating due to its potential to allow local users to bypass resource limits.
2
How do I fix CVE-2008-1294?
To fix CVE-2008-1294, you should upgrade your Linux kernel to version 2.6.22 or later.
3
Who is affected by CVE-2008-1294?
CVE-2008-1294 affects local users on machines running specific older versions of the Linux kernel up to 2.6.21.
4
What types of systems are impacted by CVE-2008-1294?
CVE-2008-1294 impacts systems running older Linux kernel versions used in various distributions.
5
What are the consequences of exploiting CVE-2008-1294?
Exploitation of CVE-2008-1294 allows local users to exceed their CPU usage limits, potentially leading to denial of service.