PT-2001-1035 · Red Hat+1 · Red Hat+1
Published
2001-02-08
·
Updated
2017-10-10
·
CVE-2001-0316
CVSS v2.0
4.6
Medium
| Vector | AV:L/AC:L/Au:N/C:P/I:P/A:P |
Name of the Vulnerable Software and Affected Versions
Linux kernel versions 2.2 and 2.4
Red Hat Linux kernel versions 2.2.17
Description
The issue allows local users to read kernel memory and possibly gain privileges via a negative argument to the sysctl call. Multiple vulnerabilities in the kernel package of Red Hat Linux can lead to a breach of confidentiality, integrity, and availability of protected information. These vulnerabilities can be exploited locally.
Recommendations
For Linux kernel versions 2.2 and 2.4, update to a version that includes a fix for this issue.
For Red Hat Linux kernel version 2.2.17, consider disabling the sysctl call until a patch is available.
Restrict access to the kernel package to minimize the risk of exploitation.
Avoid using the sysctl call with negative arguments in the affected kernel versions until the issue is resolved.
At the moment, there is no information about a newer version that contains a fix for this vulnerability.
Exploit
Found an issue in the description? Have something to add? Feel free to write us 👾
Related Identifiers
Affected Products
Linux Kernel
Red Hat