PT-2003-1993 · Linux · Linux Kernel

Published 2003-12-31 · Updated 2017-10-11 · CVE-2003-0986

Positive Technologies (AI Summary)

CVSS v2.0

1.7

Low

Base vector

AV:L/AC:L/Au:S/C:N/I:N/A:P

Name of the Vulnerable Software and Affected Versions Linux kernel versions prior to 2.6.2 Linux kernel versions prior to 2.4.24

Description The issue concerns the ppc64 architecture on Linux kernel, where certain routines do not properly use the copy from user function when copying data from userspace to kernelspace. This crosses security boundaries and allows local users to cause a denial of service.

Recommendations For Linux kernel versions prior to 2.6.2, update to version 2.6.2 or later to resolve the issue. For Linux kernel versions prior to 2.4.24, update to version 2.4.24 or later to resolve the issue.

Fix

Related Identifiers

CVE-2003-0986

RHSA-2004:017

Affected Products

Linux Kernel

References · 5

• https://nvd.nist.gov/vuln/detail/CVE-2003-0986 · Security Note
• http://redhat.com/support/errata/RHSA-2004-017.html · Vendor Advisory
• https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A9707 · Note
• http://linux.bkbits.net:8080/linux-2.4/cset%403fdd54b3u9Eq0Wny2Nn1HGfI3pofOQ · Note
• http://linux.bkbits.net:8080/linux-2.6/cset%403ffcf122S7e3xPZCpibrXq6KRRjwqw · Note