PT-2004-3727 · Linux · Linux Kernel

Stefan Esser · Published 1970-01-01 · Updated 2017-10-11 · CVE-2004-0883

Positive Technologies (AI Summary)

CVSS v2.0

10

High

Base vector

AV:N/AC:L/Au:N/C:C/I:C/A:C

Name of the Vulnerable Software and Affected Versions Debian GNU/Linux kernel-image-2.4.18-powerpc-xfs version Debian GNU/Linux kernel-image-2.4.18-sun4u version Debian GNU/Linux kernel-image-2.4.18-sun4u-smp version Debian GNU/Linux kernel-image-2.4.19-sparc version Debian GNU/Linux kernel-image-2.4.19-sun4u version Debian GNU/Linux kernel-image-2.4.19-sun4u-smp version Debian GNU/Linux kernel-headers-2.4.18-sparc version Debian GNU/Linux kernel-headers-2.4.19-sparc version Debian GNU/Linux kernel-patch-benh version

Description The issue involves multiple vulnerabilities in the Linux kernel of Debian GNU/Linux, which can be exploited remotely to compromise the confidentiality, integrity, and availability of protected information. The vulnerabilities can cause a denial of service or allow an attacker to gain sensitive information from kernel memory.

Recommendations For kernel-image-2.4.18-powerpc-xfs, consider disabling the vulnerable functions until a patch is available. For kernel-image-2.4.18-sun4u, restrict access to the vulnerable modules to minimize the risk of exploitation. For kernel-image-2.4.18-sun4u-smp, avoid using the vulnerable parameters in the affected API endpoints until the issue is resolved. For kernel-image-2.4.19-sparc, kernel-image-2.4.19-sun4u, kernel-image-2.4.19-sun4u-smp, kernel-headers-2.4.18-sparc, kernel-headers-2.4.19-sparc, and kernel-patch-benh, at the moment, there is no information about a newer version that contains a fix for this vulnerability.

Related Identifiers

BDU:2015-03380

BDU:2015-03381

BDU:2015-03382

BDU:2015-03383

BDU:2015-03384

BDU:2015-03385

BDU:2015-03576

BDU:2015-03577

CVE-2004-0883

DSA-1067-1

DSA-1069-1

DSA-1070-1

DSA-1082-1

RHSA-2004:549

Affected Products

Linux Kernel

References · 64

• https://nvd.nist.gov/vuln/detail/CVE-2004-0883 · Security Note
• http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2004-0138 · Security Note
• https://bdu.fstec.ru/vul/2015-03380 · Security Note
• http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2004-0394 · Security Note
• https://bdu.fstec.ru/vul/2015-03576 · Security Note
• http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2004-0997 · Security Note
• https://bdu.fstec.ru/vul/2015-03384 · Security Note
• http://debian.org/security/2006/dsa-1067 · Vendor Advisory
• http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2004-1072 · Security Note
• http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2005-0504 · Security Note
• http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2005-0489 · Security Note
• http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2004-0554 · Security Note
• http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2004-0447 · Security Note
• http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2004-1335 · Security Note
• http://debian.org/security/2006/dsa-1069 · Vendor Advisory