PT-2004-3721 · Linux+2 · Linux Kernel+2

Shaun Colley · Publicado 1970-01-01 · Atualizado 2017-07-11 · CVE-2004-0394

Positive Technologies (AI Summary)

CVSS v2.0

10

Alta

Vetor base

AV:N/AC:L/Au:N/C:C/I:C/A:C

Name of the Vulnerable Software and Affected Versions Debian GNU/Linux kernel-image-2.4.19-sun4u-smp versions 2.4.19 Debian GNU/Linux kernel-image-2.4.18-powerpc-xfs versions 2.4.18 Debian GNU/Linux kernel-image-2.4.18-sun4u versions 2.4.18 Debian GNU/Linux kernel-patch-benh (affected versions not specified) Debian GNU/Linux kernel-image-2.4.18-sun4u-smp versions 2.4.18 Debian GNU/Linux kernel-headers-2.4.19-sparc versions 2.4.19 Debian GNU/Linux kernel-headers-2.4.18-sparc versions 2.4.18 Debian GNU/Linux kernel-image-2.4.19-sun4u versions 2.4.19 Gentoo Linux aa-sources versions prior to 2.4.23-r2

Description The issue involves multiple vulnerabilities in the Linux kernel packages of various operating systems, including Debian GNU/Linux and Gentoo Linux. These vulnerabilities can be exploited remotely or locally, leading to a breach of confidentiality, integrity, and availability of protected information. A potential buffer overflow exists in the panic() function in Linux 2.4.x, although it may not be exploitable due to the functionality of panic(). The vulnerabilities can be exploited to disrupt the security of the affected systems.

Recommendations For Debian GNU/Linux kernel-image-2.4.19-sun4u-smp version 2.4.19, update to a newer version. For Debian GNU/Linux kernel-image-2.4.18-powerpc-xfs version 2.4.18, update to a newer version. For Debian GNU/Linux kernel-image-2.4.18-sun4u version 2.4.18, update to a newer version. For Debian GNU/Linux kernel-patch-benh, update to a newer version. For Debian GNU/Linux kernel-image-2.4.18-sun4u-smp version 2.4.18, update to a newer version. For Debian GNU/Linux kernel-headers-2.4.19-sparc version 2.4.19, update to a newer version. For Debian GNU/Linux kernel-headers-2.4.18-sparc version 2.4.18, update to a newer version. For Debian GNU/Linux kernel-image-2.4.19-sun4u version 2.4.19, update to a newer version. For Gentoo Linux aa-sources versions prior to 2.4.23-r2, update to version 2.4.23-r2 or later.

Correção

Identificadores relacionados

BDU:2015-03380

BDU:2015-03381

BDU:2015-03382

BDU:2015-03383

BDU:2015-03384

BDU:2015-03385

BDU:2015-03576

BDU:2015-03577

BDU:2015-09455

CVE-2004-0394

DSA-1067-1

DSA-1069-1

DSA-1070-1

DSA-1082-1

Produtos afetados

Debian

Gentoo Linux

Linux Kernel

Referências · 60

• http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2004-0138 · Nota de Segurança
• http://security.gentoo.org/glsa/glsa-200407-02.xml · Aviso do Fabricante
• https://bdu.fstec.ru/vul/2015-03576 · Nota de Segurança
• http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2004-0997 · Nota de Segurança
• https://bdu.fstec.ru/vul/2015-03384 · Nota de Segurança
• http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2004-1072 · Nota de Segurança
• http://linuxsecurity.com/advisories/engarde_advisory-4285.html · Aviso do Fabricante
• http://mandriva.com/security/advisories?name=MDKSA-2004:037 · Aviso do Fabricante
• http://debian.org/security/2006/dsa-1069 · Aviso do Fabricante
• http://securityfocus.com/bid/10233 · Nota
• http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2004-1070 · Nota de Segurança
• http://distro.conectiva.com.br/atualizacoes/?id=a&anuncio=000846 · Aviso do Fabricante
• http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2005-0001 · Nota de Segurança
• http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2004-1234 · Nota de Segurança
• http://secunia.com/advisories/20163 · Nota