PT-2001-1043 · Red Hat+1 · Red Hat Linux Kernel-Debug-2.4.9+7
Published
2001-10-09
·
Updated
2017-10-10
·
CVE-2002-0046
CVSS v2.0
5.0
Medium
| Vector | AV:N/AC:L/Au:N/C:N/I:N/A:P |
Name of the Vulnerable Software and Affected Versions
Linux kernel versions (affected versions not specified)
Red Hat Linux kernel-enterprise-2.4.9
Red Hat Linux kernel-2.4.9
Red Hat Linux kernel-smp-2.4.9
Red Hat Linux kernel-doc-2.4.9
Red Hat Linux kernel-headers-2.4.9
Red Hat Linux kernel-BOOT-2.4.9
Red Hat Linux kernel-debug-2.4.9
Red Hat Linux modutils-2.4.10
Red Hat Linux krb5-libs-1.2.2
Description
The issue allows remote attackers to read portions of memory via a series of fragmented ICMP packets that generate an ICMP TTL Exceeded response, which includes portions of the memory in the response packet. Multiple vulnerabilities in various Red Hat Linux packages can lead to disruption of confidentiality, integrity, and availability of protected information. These vulnerabilities can be exploited remotely.
Recommendations
For Linux kernel, update to a version that includes the necessary security patches.
For Red Hat Linux kernel-enterprise-2.4.9, consider upgrading to a newer version or applying security patches.
For Red Hat Linux kernel-2.4.9, consider upgrading to a newer version or applying security patches.
For Red Hat Linux kernel-smp-2.4.9, consider upgrading to a newer version or applying security patches.
For Red Hat Linux kernel-doc-2.4.9, consider upgrading to a newer version or applying security patches.
For Red Hat Linux kernel-headers-2.4.9, consider upgrading to a newer version or applying security patches.
For Red Hat Linux kernel-BOOT-2.4.9, consider upgrading to a newer version or applying security patches.
For Red Hat Linux kernel-debug-2.4.9, consider upgrading to a newer version or applying security patches.
For Red Hat Linux modutils-2.4.10, consider upgrading to a newer version or applying security patches.
For Red Hat Linux krb5-libs-1.2.2, consider upgrading to a newer version or applying security patches.
As a temporary workaround, consider restricting access to vulnerable components until a patch is available.
Exploit
Fix
Found an issue in the description? Have something to add? Feel free to write us 👾
Related Identifiers
Affected Products
Linux Kernel
Red Hat Linux Kernel-2.4.9
Red Hat Linux Kernel-Boot-2.4.9
Red Hat Linux Kernel-Debug-2.4.9
Red Hat Linux Kernel-Enterprise-2.4.9
Red Hat Linux Kernel-Headers-2.4.9
Krb5-Libs-1.2.2
Modutils-2.4.10