PT-2004-1609 · Red Hat+1 · Red Hat+1

Publicado 2004-12-31 · Atualizado 2017-10-11 · CVE-2004-0491

Positive Technologies (AI Summary)

CVSS v2.0

2.1

Baixa

Vetor base

AV:L/AC:L/Au:N/C:N/I:P/A:N

Name of the Vulnerable Software and Affected Versions Red Hat Enterprise Linux 3

Description The issue arises from the linux-2.4.21-mlock.patch, which fails to correctly update the mlock page count when a process unlocks pages belonging to another process. This allows local users to lock more memory than the limit specified by the rlimit.

Recommendations For Red Hat Enterprise Linux 3, consider applying a patch that correctly maintains the mlock page count to prevent local users from exceeding the specified memory limit.

Correção

Identificadores relacionados

CVE-2004-0491

RHSA-2005:472

RHSA-2005_472

Produtos afetados

Red Hat

Linux

Referências · 13

• https://nvd.nist.gov/vuln/detail/CVE-2004-0491 · Nota de Segurança
• https://rhn.redhat.com/errata/RHSA-2005-472.html · Nota
• https://bugzilla.redhat.com/bugzilla/show_bug.cgi?id=126411 · Nota
• http://secunia.com/advisories/19607 · Nota
• https://redhat.com/security/data/cve/CVE-2004-0491.html · Nota
• http://securityfocus.com/bid/13769 · Nota
• https://redhat.com/security/data/cve/CVE-2005-1263.html · Nota
• https://redhat.com/security/data/cve/CVE-2005-0176.html · Nota
• https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A1117 · Nota
• http://redhat.com/support/errata/RHSA-2005-472.html · Aviso do Fabricante
• https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A10672 · Nota
• http://marc.info/?l=linux-kernel&m=108087017610947&w=2 · Nota
• ftp://patches.sgi.com/support/free/security/advisories/20060402-01-U · Aviso do Fabricante