PT-2004-1609 · Red Hat+1 · Red Hat+1

Published 2004-12-31 · Updated 2017-10-11 · CVE-2004-0491

Positive Technologies (AI Summary)

CVSS v2.0

2.1

Low

Base vector

AV:L/AC:L/Au:N/C:N/I:P/A:N

Name of the Vulnerable Software and Affected Versions Red Hat Enterprise Linux 3

Description The issue arises from the linux-2.4.21-mlock.patch, which fails to correctly update the mlock page count when a process unlocks pages belonging to another process. This allows local users to lock more memory than the limit specified by the rlimit.

Recommendations For Red Hat Enterprise Linux 3, consider applying a patch that correctly maintains the mlock page count to prevent local users from exceeding the specified memory limit.

Fix

Related Identifiers

CVE-2004-0491

RHSA-2005:472

RHSA-2005_472

Affected Products

Red Hat

Linux

References · 13

• https://nvd.nist.gov/vuln/detail/CVE-2004-0491 · Security Note
• http://redhat.com/support/errata/RHSA-2005-472.html · Vendor Advisory
• ftp://patches.sgi.com/support/free/security/advisories/20060402-01-U · Vendor Advisory
• https://rhn.redhat.com/errata/RHSA-2005-472.html · Note
• https://bugzilla.redhat.com/bugzilla/show_bug.cgi?id=126411 · Note
• http://secunia.com/advisories/19607 · Note
• https://redhat.com/security/data/cve/CVE-2004-0491.html · Note
• http://securityfocus.com/bid/13769 · Note
• https://redhat.com/security/data/cve/CVE-2005-1263.html · Note
• https://redhat.com/security/data/cve/CVE-2005-0176.html · Note
• https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A1117 · Note
• https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A10672 · Note
• http://marc.info/?l=linux-kernel&m=108087017610947&w=2 · Note