PT-2002-1028 · Linux+1 · Linux Kernel+1
Publicado
2002-09-23
·
Atualizado
2017-10-10
·
CVE-2002-1319
CVSS v2.0
7.2
Alta
| Vetor | AV:L/AC:L/Au:N/C:C/I:C/A:C |
Name of the Vulnerable Software and Affected Versions
Linux kernel versions 2.4.20 and earlier, and 2.5.x
Red Hat Linux kernel versions 2.2.22 and earlier, and 2.4.18 and earlier
Description
The issue allows local users to cause a denial of service (hang) via the emulation mode, which does not properly clear TF and NT EFLAGs. Exploitation of the vulnerability can lead to disruption of confidentiality, integrity, and availability of protected information. The vulnerability can be exploited locally.
Recommendations
For Linux kernel versions 2.4.20 and earlier, and 2.5.x, update to a version that properly clears TF and NT EFLAGs in emulation mode.
For Red Hat Linux kernel versions 2.2.22 and earlier, and 2.4.18 and earlier, update to a version that fixes the vulnerability.
As a temporary workaround, consider disabling the emulation mode until a patch is available.
Restrict access to the vulnerable kernel modules to minimize the risk of exploitation.
Correção
Encontrou algum problema na descrição? Tem algo a acrescentar? Fique à vontade para nos escrever 👾
Identificadores relacionados
Produtos afetados
Linux Kernel
Red Hat Linux Kernel