PT-2003-1083 · Gnu · Glibc
Published
2003-11-12
·
Updated
2017-10-11
·
CVE-2003-0859
CVSS v2.0
7.5
High
| Vector | AV:N/AC:L/Au:N/C:P/I:P/A:P |
Name of the Vulnerable Software and Affected Versions
glibc versions 2.2.4 and earlier
glibc versions 2.2.5
glibc versions 2.3.2
Description
The issue allows local users to cause a denial of service by sending spoofed messages as other users to the kernel netlink interface. Multiple vulnerabilities in the glibc package of Red Hat Linux can lead to disruption of confidentiality, integrity, and availability of protected information. These vulnerabilities can be exploited remotely.
Recommendations
For glibc versions 2.2.4 and earlier, update to a version later than 2.2.4 to resolve the issue.
For glibc versions 2.2.5, update to a version later than 2.2.5 to resolve the issue.
For glibc versions 2.3.2, update to a version later than 2.3.2 to resolve the issue.
As a temporary workaround, consider restricting access to the kernel netlink interface to minimize the risk of exploitation.
Fix
Found an issue in the description? Have something to add? Feel free to write us 👾
Related Identifiers
Affected Products
Glibc