Skip to main content

Mondoo Vulnerability Intelligence

Curated by Mondoo Research, enhanced with AI

Resources

Search Vulnerabilities
Trending CVEs
Browse Ecosystems
Terminology
Blog

Open Source

cnquery
cnspec

Star us on GitHub!

Company

Mondoo Platform
About
Contact

© 2026 Mondoo, Inc.

Privacy Policy Terms of Service Imprint

Vulnerability Intelligence

Vulnerability IntelligenceCVE-2009-3080

CVE-2009-3080

UNKNOWN

Array index error in the gdth_read_event function in drivers/scsi/gdth

Published Nov 20, 2009

Modified 1 years ago

Details

Array index error in the gdth_read_event function in drivers/scsi/gdth.c in the Linux kernel before 2.6.32-rc8 allows local users to cause a denial of service or possibly gain privileges via a negative event index in an IOCTL request.

References(28)

WEBhttp://git.kernel.org/?p=linux/kernel/git/torvalds/linux-2.6.git%3Ba=commit%3Bh=690e744869f3262855b83b4fb59199cf142765b0 ADVISORYhttp://lists.opensuse.org/opensuse-security-announce/2009-12/msg00002.html ADVISORYhttp://lists.opensuse.org/opensuse-security-announce/2009-12/msg00005.html ADVISORYhttp://lists.opensuse.org/opensuse-security-announce/2010-01/msg00000.html ADVISORYhttp://lists.opensuse.org/opensuse-security-announce/2010-01/msg00005.html ADVISORYhttp://lists.opensuse.org/opensuse-security-announce/2010-02/msg00007.html ADVISORYhttp://secunia.com/advisories/37435 ADVISORYhttp://secunia.com/advisories/37720 ADVISORYhttp://secunia.com/advisories/37909 ADVISORYhttp://secunia.com/advisories/38017 ADVISORYhttp://secunia.com/advisories/38276 WEBhttp://support.avaya.com/css/P8/documents/100073666 ADVISORYhttp://www.debian.org/security/2010/dsa-2005 WEBhttp://www.kernel.org/pub/linux/kernel/v2.6/testing/ChangeLog-2.6.32-rc8 ADVISORYhttp://www.mandriva.com/security/advisories?name=MDVSA-2010:030 ADVISORYhttp://www.mandriva.com/security/advisories?name=MDVSA-2011:051 ADVISORYhttp://www.redhat.com/support/errata/RHSA-2010-0041.html ADVISORYhttp://www.redhat.com/support/errata/RHSA-2010-0882.html WEBhttp://www.securityfocus.com/bid/37068 ADVISORYhttp://www.ubuntu.com/usn/usn-864-1 WEBhttp://www.vmware.com/security/advisories/VMSA-2011-0009.html WEBhttps://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A10989 WEBhttps://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A12862 WEBhttps://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A7101 ADVISORYhttps://rhn.redhat.com/errata/RHSA-2010-0046.html

CVSS Analysis

CVSS v2.0

7.2

Exploitability

Access Vector

LocalAV:L

Access Complexity

LowAC:L

Authentication

NoneAu:N

Impact

Confidentiality

CompleteC:C

Integrity

CompleteI:C

Availability

CompleteA:C

7.2/AV:L/AC:L/Au:N/C:C/I:C/A:C

Ecosystems

Timeline

PublishedNov 20, 2009

ModifiedAug 7, 2024

CVE-2009-3080 | Mondoo Vulnerability Intelligence