PT-2004-3686 · Linux+2 · Linux Kernel+2
Harald Welte
·
Publicado
1970-01-01
·
Atualizado
2018-10-19
·
CVE-2005-3055
CVSS v2.0
10
Alta
| Vetor | AV:N/AC:L/Au:N/C:C/I:C/A:C |
Name of the Vulnerable Software and Affected Versions
Linux kernel versions 2.6.8 through 2.6.14-rc2
Debian GNU/Linux kernel-image and kernel-headers packages (affected versions not specified)
Description
The issue affects the Linux kernel and can lead to a denial of service (kernel OOPS) via a userspace process that issues a USB Request Block (URB) to a USB device and terminates before the URB is finished, resulting in a stale pointer reference. This can cause disruption to confidentiality, integrity, and availability of protected information. The vulnerability can be exploited remotely.
Recommendations
For Linux kernel versions 2.6.8 through 2.6.14-rc2, update to a version later than 2.6.14-rc2 to resolve the issue.
For Debian GNU/Linux kernel-image and kernel-headers packages, update to the latest available versions to ensure you have the latest security patches.
As a temporary workaround, consider restricting access to USB devices until a patch is available.
Correção
DoS
RCE
Encontrou algum problema na descrição? Tem algo a acrescentar? Fique à vontade para nos escrever 👾
Enumeração de Fraquezas
Identificadores relacionados
Produtos afetados
Debian
Linux Kernel
Red Hat