CVE-2008-0600
HIGH 7.2EPSS 3.5%
The vmsplice_to_pipe function in Linux kernel 2.6.17 through 2.6.24.1 does not validate a certain userspace pointer before dereference, which allows local users to gain root privileges via crafted arguments in a vmsplice system call, a different vulnerability than CVE-2008-0009 and CVE-2008-0010.
- CVSS v2.0 NVD
- 7.2 HIGH
AV:L/AC:L/Au:N/C:C/I:C/A:C - EPSS
- 3.54% chance of exploitation in the next 30 days, 89th percentile
- Published
- 2008-02-12
- Updated
- 2024-08-07
Proof-of-concept exploits (6)
- http://marc.info/?l=linux-kernel&m=120263652322197&w=2
- http://marc.info/?l=linux-kernel&m=120266353621139&w=2
- http://marc.info/?l=linux-kernel&m=120264520431307&w=2
- http://marc.info/?l=linux-kernel&m=120266328220808&w=2
- http://marc.info/?l=linux-kernel&m=120264773202422&w=2
- 0b0111100/20080★ · 2026-09-07
ExploitDB entries (2)
Exploit collections (1)
- CVE-2008-0600helloexp/0day
Security advisories
- http://www.mandriva.com/security/advisories?name=MDVSA-2008:043
- http://www.mandriva.com/security/advisories?name=MDVSA-2008:044
- http://www.redhat.com/support/errata/RHSA-2008-0129.html
- http://www.securityfocus.com/bid/27704
- http://www.securityfocus.com/bid/27801
- http://www.ubuntu.com/usn/usn-577-1