PT-2003-1098 · Linux · Linux Kernel
Publicado
2003-05-22
·
Atualizado
2017-10-11
·
CVE-2003-0700
CVSS v2.0
10
Alta
| Vetor | AV:N/AC:L/Au:N/C:C/I:C/A:C |
Name of the Vulnerable Software and Affected Versions
Linux kernel versions 2.4.20 through 2.4.21
Linux kernel version 2.4.20
Description
The issue affects the Linux kernel, specifically versions 2.4.20, and can be exploited remotely. This may lead to a breach of confidentiality, integrity, and availability of protected information. The C-Media PCI sound driver in Linux before 2.4.22 does not use the get user function to access userspace in certain conditions, which crosses security boundaries and may facilitate the exploitation of vulnerabilities.
Recommendations
For Linux kernel version 2.4.20, consider updating to a version later than 2.4.21 to mitigate the risk.
For Linux kernel versions 2.4.20 through 2.4.21, restrict access to the C-Media PCI sound driver until a patch is available.
At the moment, there is no information about a newer version that contains a fix for this vulnerability.
Encontrou algum problema na descrição? Tem algo a acrescentar? Fique à vontade para nos escrever 👾
Identificadores relacionados
Produtos afetados
Linux Kernel