PT-2004-3741 · Linux+2 · Linux Kernel+2

Paul Starzetz · Published 1970-01-01 · Updated 2017-10-11 · CVE-2005-0001

Positive Technologies (AI Summary)

CVSS v2.0

10

High

Base vector

AV:N/AC:L/Au:N/C:C/I:C/A:C

Name of the Vulnerable Software and Affected Versions Linux kernel versions 2.2.x through 2.2.7 Linux kernel versions 2.4 through 2.4.29 Linux kernel versions 2.6 through 2.6.10 Debian GNU/Linux kernel-image-2.4.19-sun4u-smp (affected versions not specified) Debian GNU/Linux kernel-image-2.4.18-powerpc-xfs (affected versions not specified) Debian GNU/Linux kernel-image-2.4.18-sun4u (affected versions not specified) Debian GNU/Linux kernel-patch-benh (affected versions not specified) Debian GNU/Linux kernel-image-2.4.18-sun4u-smp (affected versions not specified) Debian GNU/Linux kernel-headers-2.4.19-sparc (affected versions not specified) Debian GNU/Linux kernel-headers-2.4.18-sparc (affected versions not specified) Debian GNU/Linux kernel-image-2.4.19-sun4u (affected versions not specified)

Description A race condition in the page fault handler for Linux kernel allows local users to execute arbitrary code via concurrent threads that share the same virtual memory space and simultaneously request stack expansion. Multiple vulnerabilities in Debian GNU/Linux kernel packages may lead to disruption of confidentiality, integrity, and availability of protected information, and can be exploited remotely.

Recommendations For Linux kernel versions 2.2.x through 2.2.7, update to a version outside of this range to resolve the issue. For Linux kernel versions 2.4 through 2.4.29, update to a version outside of this range to resolve the issue. For Linux kernel versions 2.6 through 2.6.10, update to a version outside of this range to resolve the issue. For Debian GNU/Linux kernel-image-2.4.19-sun4u-smp, kernel-image-2.4.18-powerpc-xfs, kernel-image-2.4.18-sun4u, kernel-patch-benh, kernel-image-2.4.18-sun4u-smp, kernel-headers-2.4.19-sparc, kernel-headers-2.4.18-sparc, and kernel-image-2.4.19-sun4u, update to a version that is not vulnerable to resolve the issue. As a temporary workaround, consider restricting access to the vulnerable kernel packages until a patch is available.

Fix

Related Identifiers

BDU:2015-03380

BDU:2015-03381

BDU:2015-03382

BDU:2015-03383

BDU:2015-03384

BDU:2015-03385

BDU:2015-03576

BDU:2015-03577

CVE-2005-0001

DSA-1067-1

DSA-1069-1

DSA-1070-1

DSA-1082-1

RHSA-2005:092

RHSA-2005_092

Affected Products

Debian

Linux Kernel

Red Hat

References · 80

• http://redhat.com/support/errata/RHSA-2005-016.html · Vendor Advisory
• http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2004-0138 · Security Note
• https://bdu.fstec.ru/vul/2015-03576 · Security Note
• https://bdu.fstec.ru/vul/2015-03384 · Security Note
• http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2004-0997 · Security Note
• http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2004-1072 · Security Note
• http://redhat.com/support/errata/RHSA-2005-017.html · Vendor Advisory
• http://debian.org/security/2006/dsa-1069 · Vendor Advisory
• http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2004-1070 · Security Note
• http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2005-0001 · Security Note
• http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2004-1234 · Security Note
• http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2004-1073 · Security Note
• http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2005-0003 · Security Note
• http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2004-0565 · Security Note
• http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2003-0984 · Security Note