PT-2001-1043 · Red Hat+1 · Red Hat Linux Kernel-Debug-2.4.9+7
Publicado
2001-10-09
·
Atualizado
2017-10-10
·
CVE-2002-0046
CVSS v2.0
5.0
Média
| Vetor | AV:N/AC:L/Au:N/C:N/I:N/A:P |
Name of the Vulnerable Software and Affected Versions
Linux kernel versions (affected versions not specified)
Red Hat Linux kernel-enterprise-2.4.9
Red Hat Linux kernel-2.4.9
Red Hat Linux kernel-smp-2.4.9
Red Hat Linux kernel-doc-2.4.9
Red Hat Linux kernel-headers-2.4.9
Red Hat Linux kernel-BOOT-2.4.9
Red Hat Linux kernel-debug-2.4.9
Red Hat Linux modutils-2.4.10
Red Hat Linux krb5-libs-1.2.2
Description
The issue allows remote attackers to read portions of memory via a series of fragmented ICMP packets that generate an ICMP TTL Exceeded response, which includes portions of the memory in the response packet. Multiple vulnerabilities in various Red Hat Linux packages can lead to disruption of confidentiality, integrity, and availability of protected information. These vulnerabilities can be exploited remotely.
Recommendations
For Linux kernel, update to a version that includes the necessary security patches.
For Red Hat Linux kernel-enterprise-2.4.9, consider upgrading to a newer version or applying security patches.
For Red Hat Linux kernel-2.4.9, consider upgrading to a newer version or applying security patches.
For Red Hat Linux kernel-smp-2.4.9, consider upgrading to a newer version or applying security patches.
For Red Hat Linux kernel-doc-2.4.9, consider upgrading to a newer version or applying security patches.
For Red Hat Linux kernel-headers-2.4.9, consider upgrading to a newer version or applying security patches.
For Red Hat Linux kernel-BOOT-2.4.9, consider upgrading to a newer version or applying security patches.
For Red Hat Linux kernel-debug-2.4.9, consider upgrading to a newer version or applying security patches.
For Red Hat Linux modutils-2.4.10, consider upgrading to a newer version or applying security patches.
For Red Hat Linux krb5-libs-1.2.2, consider upgrading to a newer version or applying security patches.
As a temporary workaround, consider restricting access to vulnerable components until a patch is available.
Exploit
Correção
Encontrou algum problema na descrição? Tem algo a acrescentar? Fique à vontade para nos escrever 👾
Identificadores relacionados
Produtos afetados
Linux Kernel
Red Hat Linux Kernel-2.4.9
Red Hat Linux Kernel-Boot-2.4.9
Red Hat Linux Kernel-Debug-2.4.9
Red Hat Linux Kernel-Enterprise-2.4.9
Red Hat Linux Kernel-Headers-2.4.9
Krb5-Libs-1.2.2
Modutils-2.4.10