PT-2003-1993 · Linux · Linux Kernel

Publicado 2003-12-31 · Atualizado 2017-10-11 · CVE-2003-0986

Positive Technologies (AI Summary)

CVSS v2.0

1.7

Baixa

Vetor base

AV:L/AC:L/Au:S/C:N/I:N/A:P

Name of the Vulnerable Software and Affected Versions Linux kernel versions prior to 2.6.2 Linux kernel versions prior to 2.4.24

Description The issue concerns the ppc64 architecture on Linux kernel, where certain routines do not properly use the copy from user function when copying data from userspace to kernelspace. This crosses security boundaries and allows local users to cause a denial of service.

Recommendations For Linux kernel versions prior to 2.6.2, update to version 2.6.2 or later to resolve the issue. For Linux kernel versions prior to 2.4.24, update to version 2.4.24 or later to resolve the issue.

Correção

Identificadores relacionados

CVE-2003-0986

RHSA-2004:017

Produtos afetados

Linux Kernel

Referências · 5

• https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A9707 · Nota
• http://linux.bkbits.net:8080/linux-2.4/cset%403fdd54b3u9Eq0Wny2Nn1HGfI3pofOQ · Nota
• https://nvd.nist.gov/vuln/detail/CVE-2003-0986 · Nota de Segurança
• http://linux.bkbits.net:8080/linux-2.6/cset%403ffcf122S7e3xPZCpibrXq6KRRjwqw · Nota
• http://redhat.com/support/errata/RHSA-2004-017.html · Aviso do Fabricante