← back
CVE-2009-0028

CVE-2009-0028

23Vexday Risk Score

No sign of exploitation. It has a public proof of concept.

ssvc Attendepss 0.7%
from disclosure to weapon0 days
Published on NVDFeb 27
1st PoCFeb 25
exploitation probability
0.7%top 50% of all CVEs
observed exploitation
nono source reports it
1 public exploit(s)
The clone system call in the Linux kernel 2.6.28 and earlier allows local users to send arbitrary signals to a parent process from an unprivileged child process by launching an additional child process with the CLONE_PARENT flag, and then letting this new process exit.
Affected products
n/a · n/a
public PoCs found — 1✓ VexDay Proof
exploitdb✓ VexDay Proofwww.exploit-db.com/exploits/32815
⚠ Public resources, to assess the exposure of systems you control or are authorized to test. Test only with authorization.
References
http://lists.opensuse.org/opensuse-security-announce/2009-02/msg00003.htmlhttp://lists.opensuse.org/opensuse-security-announce/2009-06/msg00000.htmlhttp://lists.opensuse.org/opensuse-security-announce/2009-06/msg00001.htmlhttp://osvdb.org/52204http://rhn.redhat.com/errata/RHSA-2009-0459.htmlhttps://bugzilla.redhat.com/show_bug.cgi?id=479932http://scarybeastsecurity.blogspot.com/2009/02/linux-kernel-minor-signal-vulnerability.htmlhttp://scary.beasts.org/security/CESA-2009-002.htmlhttp://secunia.com/advisories/33758http://secunia.com/advisories/34033http://secunia.com/advisories/34680http://secunia.com/advisories/34917