PT-2004-3736 · Linux+2 · Linux Kernel+2

Publicado 1970-01-01 · Atualizado 2017-10-11 · CVE-2004-1074

Positive Technologies (AI Summary)

CVSS v2.0

10

Alta

Vetor base

AV:N/AC:L/Au:N/C:C/I:C/A:C

Name of the Vulnerable Software and Affected Versions Linux kernel (affected versions not specified) Debian GNU/Linux kernel-image-2.4.19-sun4u-smp (affected versions not specified) Debian GNU/Linux kernel-image-2.4.18-powerpc-xfs (affected versions not specified) Debian GNU/Linux kernel-image-2.4.18-sun4u (affected versions not specified) Debian GNU/Linux kernel-patch-benh (affected versions not specified) Debian GNU/Linux kernel-image-2.4.18-sun4u-smp (affected versions not specified) Debian GNU/Linux kernel-headers-2.4.19-sparc (affected versions not specified) Debian GNU/Linux kernel-headers-2.4.18-sparc (affected versions not specified) Debian GNU/Linux kernel-image-2.4.19-sun4u (affected versions not specified)

Description The issue allows local users to cause a denial of service via a malformed a.out binary when "memory overcommit" is enabled in the Linux kernel. Multiple vulnerabilities in Debian GNU/Linux kernel packages can lead to disruption of confidentiality, integrity, and availability of protected information. These vulnerabilities can be exploited remotely.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Exploit

Identificadores relacionados

BDU:2015-03380

BDU:2015-03381

BDU:2015-03382

BDU:2015-03383

BDU:2015-03384

BDU:2015-03385

BDU:2015-03576

BDU:2015-03577

CVE-2004-1074

DSA-1067-1

DSA-1069-1

DSA-1070-1

DSA-1082-1

RHSA-2005:043

RHSA-2005_043

Produtos afetados

Debian

Linux Kernel

Red Hat

Referências · 66

• 🔥 http://securityfocus.com/bid/11754 · Exploit
• 🔥 https://exploit-db.com/exploits/24777 · Exploit
• http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2004-0138 · Nota de Segurança
• https://bdu.fstec.ru/vul/2015-03576 · Nota de Segurança
• http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2004-0997 · Nota de Segurança
• https://bdu.fstec.ru/vul/2015-03384 · Nota de Segurança
• http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2004-1072 · Nota de Segurança
• http://marc.info/?l=bugtraq&m=110322596918807&w=2 · Nota
• https://rhn.redhat.com/errata/RHSA-2005-043.html · Nota
• https://redhat.com/security/data/cve/CVE-2005-0003.html · Nota
• http://debian.org/security/2006/dsa-1069 · Aviso do Fabricante
• http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2004-1070 · Nota de Segurança
• http://marc.info/?l=linux-kernel&m=110021173607372&w=2 · Nota
• https://redhat.com/security/data/cve/CVE-2004-1235.html · Nota
• http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2005-0001 · Nota de Segurança