PT-2004-3723 · Linux+1 · Linux Kernel+1

Publicado 1970-01-01 · Atualizado 2017-10-11 · CVE-2004-0138

Positive Technologies (AI Summary)

CVSS v2.0

10

Alta

Vetor base

AV:N/AC:L/Au:N/C:C/I:C/A:C

Name of the Vulnerable Software and Affected Versions Linux kernel versions prior to 2.4.25 Debian GNU/Linux kernel-image-2.4.19-sun4u-smp version Debian GNU/Linux kernel-image-2.4.18-powerpc-xfs version Debian GNU/Linux kernel-image-2.4.18-sun4u version Debian GNU/Linux kernel-patch-benh version Debian GNU/Linux kernel-image-2.4.18-sun4u-smp version Debian GNU/Linux kernel-headers-2.4.19-sparc version Debian GNU/Linux kernel-headers-2.4.18-sparc version Debian GNU/Linux kernel-image-2.4.19-sun4u version

Description The issue allows local users to cause a denial of service via a crafted ELF file with an interpreter with an invalid arch, which triggers a BUG when an invalid VMA is unmapped. Multiple vulnerabilities in Debian GNU/Linux kernel packages may lead to disruption of confidentiality, integrity, and availability of protected information. These vulnerabilities can be exploited remotely.

Recommendations For Linux kernel versions prior to 2.4.25, update to version 2.4.25 or later to resolve the issue. For Debian GNU/Linux kernel-image-2.4.19-sun4u-smp, consider applying available security patches or updates. For Debian GNU/Linux kernel-image-2.4.18-powerpc-xfs, consider applying available security patches or updates. For Debian GNU/Linux kernel-image-2.4.18-sun4u, consider applying available security patches or updates. For Debian GNU/Linux kernel-patch-benh, consider applying available security patches or updates. For Debian GNU/Linux kernel-image-2.4.18-sun4u-smp, consider applying available security patches or updates. For Debian GNU/Linux kernel-headers-2.4.19-sparc, consider applying available security patches or updates. For Debian GNU/Linux kernel-headers-2.4.18-sparc, consider applying available security patches or updates. For Debian GNU/Linux kernel-image-2.4.19-sun4u, consider applying available security patches or updates.

Correção

Identificadores relacionados

BDU:2015-03380

BDU:2015-03381

BDU:2015-03382

BDU:2015-03383

BDU:2015-03384

BDU:2015-03385

BDU:2015-03576

BDU:2015-03577

CVE-2004-0138

DSA-1067-1

DSA-1069-1

DSA-1070-1

DSA-1082-1

RHSA-2004:549

Produtos afetados

Debian

Linux Kernel

Referências · 57

• http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2004-0138 · Nota de Segurança
• https://bdu.fstec.ru/vul/2015-03576 · Nota de Segurança
• http://secunia.com/advisories/20162 · Aviso do Fabricante
• http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2004-0997 · Nota de Segurança
• https://bdu.fstec.ru/vul/2015-03384 · Nota de Segurança
• http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2004-1072 · Nota de Segurança
• http://debian.org/security/2006/dsa-1069 · Aviso do Fabricante
• http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2004-1070 · Nota de Segurança
• http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2005-0001 · Nota de Segurança
• http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2004-1234 · Nota de Segurança
• http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2004-1073 · Nota de Segurança
• http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2005-0003 · Nota de Segurança
• http://secunia.com/advisories/20338 · Nota
• http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2004-0565 · Nota de Segurança
• http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2003-0984 · Nota de Segurança