CVE-2008-5700

kernel: enforce a minimum SG_IO timeout

Published Dec 22, 2008 CVSS 2.0 · 1.9 Low EPSS < 1% KEV · Not listed
Description
libata in the Linux kernel before 2.6.27.9 does not set minimum timeouts for SG_IO requests, which allows local users to cause a denial of service (Programmed I/O mode on drives) via multiple simultaneous invocations of an unspecified test program.

Remediation

No solution or workaround provided in the CVE record

Tracking

Sign in to view the affected projects.

Advisories

Source ID Title
Debian DSA Debian DSA DSA-1787-1 New Linux 2.6.24 packages fix several vulnerabilities
EUVD EUVD EUVD-2008-5671 libata in the Linux kernel before 2.6.27.9 does not set minimum timeouts for SG_IO requests, which allows local users to cause a denial of service (Programmed I/O mode on drives) via multiple simultaneous invocations of an unspecified test program.
Ubuntu USN Ubuntu USN USN-714-1 Linux kernel vulnerabilities
Ubuntu USN Ubuntu USN USN-715-1 Linux kernel vulnerabilities
References
Link Providers
http://git.kernel.org/?p=linux/kernel/git/stable/linux-2.6.27.y.git%3Ba=commit%3Bh=f2f1fa78a155524b849edf359e42a3001ea652c0 cve-icon cve-icon
http://lists.opensuse.org/opensuse-security-announce/2009-02/msg00003.html cve-icon cve-icon
http://openwall.com/lists/oss-security/2008/12/09/2 cve-icon cve-icon
http://secunia.com/advisories/33706 cve-icon cve-icon
http://secunia.com/advisories/33756 cve-icon cve-icon
http://secunia.com/advisories/33758 cve-icon cve-icon
http://secunia.com/advisories/33854 cve-icon cve-icon
http://secunia.com/advisories/34252 cve-icon cve-icon
http://secunia.com/advisories/34762 cve-icon cve-icon
http://secunia.com/advisories/34981 cve-icon cve-icon
http://secunia.com/advisories/37471 cve-icon cve-icon
http://support.avaya.com/elmodocs2/security/ASA-2009-114.htm cve-icon cve-icon
http://www.debian.org/security/2009/dsa-1787 cve-icon cve-icon
http://www.kernel.org/pub/linux/kernel/v2.6/ChangeLog-2.6.27.9 cve-icon cve-icon
http://www.redhat.com/support/errata/RHSA-2009-0053.html cve-icon cve-icon
http://www.redhat.com/support/errata/RHSA-2009-0326.html cve-icon cve-icon
http://www.redhat.com/support/errata/RHSA-2009-0331.html cve-icon cve-icon
http://www.securityfocus.com/archive/1/507985/100/0/threaded cve-icon cve-icon
http://www.ubuntu.com/usn/usn-715-1 cve-icon cve-icon
http://www.vmware.com/security/advisories/VMSA-2009-0016.html cve-icon cve-icon
http://www.vupen.com/english/advisories/2009/3316 cve-icon cve-icon
https://bugzilla.redhat.com/show_bug.cgi?id=474495 cve-icon cve-icon
https://exchange.xforce.ibmcloud.com/vulnerabilities/47669 cve-icon cve-icon
https://nvd.nist.gov/vuln/detail/CVE-2008-5700 cve-icon
https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A10948 cve-icon cve-icon
https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A8606 cve-icon cve-icon
https://usn.ubuntu.com/714-1/ cve-icon cve-icon
https://www.cve.org/CVERecord?id=CVE-2008-5700 cve-icon
History

No history.

Weaknesses

Sources

Status
PUBLISHED
Assigner
mitre
Published
Updated
Aug 7, 2024, 11:04 AM
Reserved
Dec 22, 2008, 12:00 AM
Status
Modified
Published
Dec 22, 2008, 3:30 PM
Modified
Jun 16, 2026, 11:00 PM
Severity
Low
Public date
Dec 5, 2008, 12:00 AM