PT-2001-2680 · Debian+1 · Kernel-Image-2.2.19-Jensen+22

Published 1970-01-01 · Updated 2016-12-08 · CVE-2001-1390

Positive Technologies (AI Summary)

CVSS v2.0

7.5

High

Base vector

AV:N/AC:L/Au:N/C:P/I:P/A:P

Name of the Vulnerable Software and Affected Versions Debian GNU/Linux kernel-image-2.2.19 versions prior to 2.2.19 Debian GNU/Linux kernel-image-2.2.19-atari version 2.2.19 Debian GNU/Linux kernel-image-2.2.19-amiga version 2.2.19 Debian GNU/Linux kernel-image-2.2.19-bvme6000 version 2.2.19 Debian GNU/Linux kernel-image-2.2.19-chrp version 2.2.19 Debian GNU/Linux kernel-image-2.2.19-compact version 2.2.19 Debian GNU/Linux kernel-image-2.2.19-generic version 2.2.19 Debian GNU/Linux kernel-image-2.2.19-ide version 2.2.19 Debian GNU/Linux kernel-image-2.2.19-idepci version 2.2.19 Debian GNU/Linux kernel-image-2.2.19-jensen version 2.2.19 Debian GNU/Linux kernel-image-2.2.19-mac version 2.2.19 Debian GNU/Linux kernel-image-2.2.19-mvme147 version 2.2.19 Debian GNU/Linux kernel-image-2.2.19-mvme16x version 2.2.19 Debian GNU/Linux kernel-image-2.2.19-nautilus version 2.2.19 Debian GNU/Linux kernel-image-2.2.19-pmac version 2.2.19 Debian GNU/Linux kernel-image-2.2.19-prep version 2.2.19 Debian GNU/Linux kernel-image-2.2.19-sun4cdm version 2.2.19 Debian GNU/Linux kernel-image-2.2.19-sun4dm-pci version 2.2.19 Debian GNU/Linux kernel-image-2.2.19-sun4dm-smp version 2.2.19 Debian GNU/Linux kernel-image-2.2.19-sun4u version 2.2.19 Debian GNU/Linux kernel-image-2.2.19-sun4u-smp version 2.2.19 Debian GNU/Linux kernel-image-2.2.19-smp version 2.2.19 Red Hat Linux mount-2.10r-0.6.x version 2.10r-0.6.x Red Hat Linux mount-2.10r-5 version 2.10r-5 Red Hat Linux losetup-2.10r-0.6.x version 2.10r-0.6.x Red Hat Linux losetup-2.10r-5 version 2.10r-5 Red Hat Linux nfs-utils-0.3.1 version 0.3.1

Description The issue affects multiple packages in Debian GNU/Linux and Red Hat Linux, allowing for remote exploitation that may lead to a breach of confidentiality, integrity, and availability of protected information. The vulnerabilities can be exploited remotely.

Recommendations As a temporary workaround, consider disabling the vulnerable kernel functions until a patch is available. Restrict access to the vulnerable kernel modules to minimize the risk of exploitation. Avoid using the vulnerable kernel versions until the issue is resolved. At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Weakness Enumeration

CWE-193

Related Identifiers

BDU:2015-03682

BDU:2015-03683

BDU:2015-03684

BDU:2015-03685

BDU:2015-03686

BDU:2015-03687

BDU:2015-03688

BDU:2015-03689

BDU:2015-03690

BDU:2015-03691

BDU:2015-03692

BDU:2015-03693

BDU:2015-03694

BDU:2015-03695

BDU:2015-03696

BDU:2015-03697

BDU:2015-03698

BDU:2015-03699

BDU:2015-03700

BDU:2015-03701

BDU:2015-03702

BDU:2015-03703

BDU:2015-03704

BDU:2015-03705

BDU:2015-03706

BDU:2015-03707

BDU:2015-03708

BDU:2015-03709

BDU:2015-08156

BDU:2015-08157

BDU:2015-08165

BDU:2015-08166

BDU:2015-08173

CVE-2001-1390

Affected Products

Debian

Linux

Kernel-Image-2.2.19

Kernel-Image-2.2.19-Amiga

Kernel-Image-2.2.19-Atari

Kernel-Image-2.2.19-Bvme6000

Kernel-Image-2.2.19-Chrp

Kernel-Image-2.2.19-Compact

Kernel-Image-2.2.19-Generic

Kernel-Image-2.2.19-Ide

Kernel-Image-2.2.19-Jensen

Kernel-Image-2.2.19-Mac

Kernel-Image-2.2.19-Mvme147

Kernel-Image-2.2.19-Mvme16X

Kernel-Image-2.2.19-Nautilus

Kernel-Image-2.2.19-Prep

Kernel-Image-2.2.19-Smp

Kernel-Image-2.2.19-Sun4Cdm

Kernel-Image-2.2.19-Sun4Dm-Pci

Kernel-Image-2.2.19-Sun4Dm-Smp

Losetup

Mount

Nfs-Utils

References · 58

• http://marc.info/?l=bugtraq&m=98775114228203&w=2 · Vendor Advisory
• https://bdu.fstec.ru/vul/2015-08156 · Security Note
• https://bdu.fstec.ru/vul/2015-03693 · Security Note
• http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2001-1397 · Security Note
• https://bdu.fstec.ru/vul/2015-03702 · Security Note
• https://bdu.fstec.ru/vul/2015-03697 · Security Note
• https://bdu.fstec.ru/vul/2015-03689 · Security Note
• https://bdu.fstec.ru/vul/2015-03690 · Security Note
• https://bdu.fstec.ru/vul/2015-03700 · Security Note
• https://bdu.fstec.ru/vul/2015-03692 · Security Note
• https://bdu.fstec.ru/vul/2015-08157 · Security Note
• https://bdu.fstec.ru/vul/2015-03682 · Security Note
• https://bdu.fstec.ru/vul/2015-03703 · Security Note
• http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2001-1390 · Security Note
• http://marc.info/?l=bugtraq&m=98637996127004&w=2 · Vendor Advisory