CVE-2008-4554

The do_splice_from function in fs/splice.c in the Linux kernel before 2.6.27 does not reject file descriptors that have the O_APPEND flag set, which allows…

published October 15, 2008

CVSS
—
EPSS
0%
Percentile
31.9
In the wild
Unconfirmed
What it is

The do_splice_from function in fs/splice.c in the Linux kernel before 2.6.27 does not reject file descriptors that have the O_APPEND flag set, which allows local users to bypass append mode and make arbitrary changes to other locations in the file.

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.00392 · 31.9th percentile
Published
2008-10-15T19:00Z
EPSS history
Timeline
  • 15 OCT 19:00Z
    The do_splice_from function in fs/splice.c in the Linux kernel before 2.6.27 does not reject file descriptors that have the O_APPEND flag set, which allows…
    cvelistv5