PT-2008-1445 · Linux+1 · Linux Kernel+1

Publicado

2008-01-31

·

Atualizado

2017-09-29

·

CVE-2007-4130

CVSS v2.0

7.2

Alta

VetorAV:L/AC:L/Au:N/C:C/I:C/A:C
Name of the Vulnerable Software and Affected Versions Linux kernel version 2.6.9 before 2.6.9-67 in Red Hat Enterprise Linux (RHEL) 4 on Itanium (ia64)
Description The issue is related to the handling of page faults during NUMA memory access. Local users can cause a denial of service (panic) by providing invalid arguments to set mempolicy in an MPOL BIND operation.
Recommendations For Linux kernel version 2.6.9 before 2.6.9-67 in Red Hat Enterprise Linux (RHEL) 4 on Itanium (ia64), update to version 2.6.9-67 or later to resolve the issue.

Exploit

Correção

DoS

RCE

Encontrou algum problema na descrição? Tem algo a acrescentar? Fique à vontade para nos escrever 👾
dbugs@ptsecurity.com

Enumeração de Fraquezas

CWE-20

Identificadores relacionados

CVE-2007-4130
RHSA-2008:0055
RHSA-2008_0055

Produtos afetados

Linux Kernel
Red Hat