PT-2004-1102 · Gentoo+1 · Aa-Sources+1

Publicado 2004-05-02 · Atualizado 2017-07-11 · CVE-2004-1983

Positive Technologies (AI Summary)

CVSS v2.0

7.2

Alta

Vetor base

AV:L/AC:L/Au:N/C:C/I:C/A:C

Name of the Vulnerable Software and Affected Versions aa-sources versions prior to 2.4.23-r2 Linux kernel 2.6 (with PaX patches and Address Space Layout Randomization (ASLR) enabled)

Description The issue affects the confidentiality, integrity, and availability of protected information. It can be exploited locally. The arch get unmapped area function in mmap.c in the PaX patches for the Linux kernel allows local users to cause a denial of service (infinite loop) via unknown attack vectors.

Recommendations For aa-sources versions prior to 2.4.23-r2, update to version 2.4.23-r2 or later. For Linux kernel 2.6 with PaX patches and ASLR enabled, consider disabling ASLR as a temporary workaround until a patch is available.

Exploit

Correção

Identificadores relacionados

BDU:2015-09455

CVE-2004-1983

Produtos afetados

Linux Kernel

Aa-Sources

Referências · 9

• 🔥 http://securityfocus.com/bid/10264 · Exploit
• 🔥 https://exploit-db.com/exploits/24078 · Exploit
• http://security.gentoo.org/glsa/glsa-200407-02.xml · Aviso do Fabricante
• https://nvd.nist.gov/vuln/detail/CVE-2004-1983 · Nota de Segurança
• https://bdu.fstec.ru/vul/2015-09455 · Nota de Segurança
• http://marc.info/?l=bugtraq&m=108360001130312&w=2 · Nota
• https://exchange.xforce.ibmcloud.com/vulnerabilities/16037 · Nota
• http://marc.info/?l=bugtraq&m=108420555920369&w=2 · Nota
• http://pax.grsecurity.net · Correção