PT-2003-1974 · Linux · Linux Kernel

Publicado 2003-12-31 · Atualizado 2017-07-11 · CVE-2003-0956

Positive Technologies (AI Summary)

CVSS v2.0

2.6

Baixa

Vetor base

AV:L/AC:H/Au:N/C:P/I:P/A:N

Name of the Vulnerable Software and Affected Versions Linux kernel versions prior to 2.4.22

Description The issue is related to multiple race conditions in the handling of O DIRECT in the Linux kernel. This could lead to stale data being returned from the disk when handling sparse files, or incorrect data being returned when a file is truncated as it is being read. As a result, local users might obtain sensitive data that was originally owned by other users.

Recommendations For Linux kernel versions prior to 2.4.22, update to version 2.4.22 or later to resolve the issue.

Correção

Identificadores relacionados

CVE-2003-0956

Produtos afetados

Linux Kernel

Referências · 3

• https://exchange.xforce.ibmcloud.com/vulnerabilities/42942 · Nota
• http://linux.bkbits.net:8080/linux-2.4/cset%403ef33d95ym_22QH2xwhDMt264M55Fg · Nota
• https://nvd.nist.gov/vuln/detail/CVE-2003-0956 · Nota de Segurança