PT-2004-3763 · Linux+2 · Linux Kernel+2

Jan Lieskovsky · Published 1970-01-01 · Updated 2018-10-03 · CVE-2007-6694

Positive Technologies (AI Summary)

CVSS v2.0

7.8

High

Base vector

AV:N/AC:L/Au:N/C:N/I:N/A:C

Name of the Vulnerable Software and Affected Versions Linux kernel versions 2.4.21 through 2.6.18-53 Debian GNU/Linux kernel-image-2.4.27-4-itanium version 2.4.27-4 Debian GNU/Linux kernel-pcmcia-modules-2.4.27-4-686 version 2.4.27-4 Debian GNU/Linux kernel-pcmcia-modules-2.4.27-4-586tsc version 2.4.27-4 Debian GNU/Linux kernel-pcmcia-modules-2.4.27-4-k7-smp version 2.4.27-4 Debian GNU/Linux kernel-headers-2.4.27-4-itanium-smp version 2.4.27-4 Debian GNU/Linux kernel-image-2.4.27-4-586tsc version 2.4.27-4 Debian GNU/Linux kernel-headers-2.4.27-4-sparc64 version 2.4.27-4 Debian GNU/Linux kernel-headers-2.4.27-4-k7 version 2.4.27-4 Debian GNU/Linux kernel-image-2.4.27-4-s390 version 2.4.27-4 Debian GNU/Linux kernel-headers-2.4.27-4-686-smp version 2.4.27-4 Debian GNU/Linux hostap-modules-2.4.27-4-386 version 2.4.27-4 Debian GNU/Linux kernel-image-2.4.27-4-s390-tape version 2.4.27-4 Debian GNU/Linux i2c-2.4.27-4-686 version 2.4.27-4 Debian GNU/Linux kernel-pcmcia-modules-2.4.27-4-k7 version 2.4.27-4 Debian GNU/Linux kernel-pcmcia-modules-2.4.27-4-386 version 2.4.27-4 Debian GNU/Linux hostap-modules-2.4.27-4-586tsc version 2.4.27-4 Debian GNU/Linux i2c-2.4.27-4-586tsc version 2.4.27-4 Debian GNU/Linux pcmcia-modules-2.4.27-4-686 version 2.4.27-4 Debian GNU/Linux lm-sensors-2.4.27-4-k6 version 2.4.27-4 Debian GNU/Linux kernel-headers-2.4.27-4-sparc64-smp version 2.4.27-4 Debian GNU/Linux kernel-build-2.4.27-4 version 2.4.27-4 Debian GNU/Linux pcmcia-modules-2.4.27-4-386 version 2.4.27-4 Debian GNU/Linux kernel-pcmcia-modules-2.4.27-4-686-smp version 2.4.27-4 Debian GNU/Linux kernel-image-2.4.27-4-generic version 2.4.27-4 Debian GNU/Linux kernel-image-2.4.27-4-mckinley version 2.4.27-4 Debian GNU/Linux kernel-image-2.4.27-4-k7-smp version 2.4.27-4 Debian GNU/Linux lm-sensors-2.4.27-4-686-smp version 2.4.27-4 Debian GNU/Linux kernel-image-2.4.27-4-686-smp version 2.4.27-4 Debian GNU/Linux pcmcia-modules-2.4.27-4-k6 version 2.4.27-4 Debian GNU/Linux lm-sensors-2.4.27-4-586tsc version 2.4.27-4 Debian GNU/Linux hostap-modules-2.4.27-4-686 version 2.4.27-4 Debian GNU/Linux pcmcia-modules-2.4.27-4-686-smp version 2.4.27-4 Debian GNU/Linux lm-sensors-2.4.27-4-386 version 2.4.27-4 Debian GNU/Linux kernel-image-2.4.27-4-sparc64 version 2.4.27-4 Debian GNU/Linux kernel-headers-2.4.27-4-586tsc version 2.4.27-4 Debian GNU/Linux kernel-image-2.4.27-4-sparc32 version 2.4.27-4 Debian GNU/Linux kernel-headers-2.4.27-4-mckinley-smp version 2.4.27-4 Debian GNU/Linux kernel-image-2.4.27-4-itanium-smp version 2.4.27-4 Debian GNU/Linux kernel-image-2.4.27-4-k6 version 2.4.27-4 Debian GNU/Linux kernel-image-2.4.27-4-mckinley-smp version 2.4.27-4 Debian GNU/Linux pcmcia-modules-2.4.27-4-k7 version 2.4.27-4 Debian GNU/Linux hostap-modules-2.4.27-4-k7-smp version 2.4.27-4 Debian GNU/Linux kernel-image-2.4.27-4-686 version 2.4.27-4 Debian GNU/Linux lm-sensors-2.4.27-4-k7 version 2.4.27-4 Debian GNU/Linux kernel-image-2.4.27-4-smp version 2.4.27-4 Debian GNU/Linux kernel-headers-2.4.27-4-smp version 2.4.27-4 Debian GNU/Linux i2c-2.4.27-4-686-smp version 2.4.27-4 Debian GNU/Linux pcmcia-modules-2.4.27-4-586tsc version 2.4.27-4 Debian GNU/Linux i2c-2.4.27-4-k7 version 2.4.27-4 Debian GNU/Linux kernel-headers-2.4.27-4-k7-smp version 2.4.27-4 Debian GNU/Linux kernel-headers-2.4.27-4-generic version 2.4.27-4 Debian GNU/Linux kernel-image-2.4.27-4-s390x version 2.4.27-4 Debian GNU/Linux lm-sensors-2.4.27-4-k7-smp version 2.4.27-4 Debian GNU/Linux kernel-headers-2.4.27-4-mckinley version 2.4.27-4 Debian GNU/Linux kernel-headers-2.4.27-4-686 version 2.4.27-4 Debian GNU/Linux kernel-image-2.4.27-4-k7 version 2.4.27-4 Debian GNU/Linux kernel-image-2.4.27-4-sparc64-smp version 2.4.27-4 Debian GNU/Linux kernel-pcmcia-modules-2.4.27-4-k6 version 2.4.27-4 Debian GNU/Linux i2c-2.4.27-4-k7-smp version 2.4.27-4 Debian GNU/Linux lm-sensors-2.4.27-4-686 version 2.4.27-4 Debian GNU/Linux kernel-headers-2.4.27-4 version 2.4.27-4 Debian GNU/Linux kernel-image-2.4.27-4-386 version 2.4.27-4 Debian GNU/Linux hostap-modules-2.4.27-4-k7 version 2.4.27-4 Debian GNU/Linux kernel-headers-2.4.27-4-itanium version 2.4.27-4 Debian GNU/Linux hostap-modules-2.4.27-4-686-smp version 2.4.27-4 Debian GNU/Linux kernel-headers-2.4.27-4-sparc32-smp version 2.4.27-4 Debian GNU/Linux kernel-headers-2.4.27-4-k6 version 2.4.27-4 Debian GNU/Linux kernel-headers-2.4.27-4-sparc32 version 2.4.27-4 Debian GNU/Linux pcmcia-modules-2.4.27-4-k7-smp version 2.4.27-4 Debian GNU/Linux kernel-headers-2.4.27-4-386 version 2.4.27-4 Debian GNU/Linux i2c-2.4.27-4-k6 version 2.4.27-4 Debian GNU/Linux i2c-2.4.27-4-386 version 2.4.27-4 Debian GNU/Linux hostap-modules-2.4.27-4-k6 version 2.4.27-4 Debian GNU/Linux kernel-image-2.4.27-4-sparc32-smp version 2.4.27-4

Description The issue is related to multiple vulnerabilities in the Linux kernel and various Debian GNU/Linux packages. These vulnerabilities can be exploited remotely and may lead to a denial of service (crash) or other security issues. The chrp show cpuinfo function in the Linux kernel is specifically mentioned as a potential vulnerability when running on PowerPC. The issue may be triggered by unknown vectors that cause the of get property function to fail, resulting in a NULL pointer dereference.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.

DoS

Weakness Enumeration

CWE-189

CWE-399

Related Identifiers

BDU:2015-03581

BDU:2015-03582

BDU:2015-03583

BDU:2015-03584

BDU:2015-03585

BDU:2015-03586

BDU:2015-03587

BDU:2015-03588

BDU:2015-03589

BDU:2015-03590

BDU:2015-03591

BDU:2015-03592

BDU:2015-03593

BDU:2015-03594

BDU:2015-03595

BDU:2015-03596

BDU:2015-03597

BDU:2015-03598

BDU:2015-03599

BDU:2015-03600

BDU:2015-03601

BDU:2015-03602

BDU:2015-03603

BDU:2015-03604

BDU:2015-03605

BDU:2015-03606

BDU:2015-03607

BDU:2015-03608

BDU:2015-03609

BDU:2015-03610

BDU:2015-03611

BDU:2015-03612

BDU:2015-03613

BDU:2015-03614

BDU:2015-03615

BDU:2015-03616

BDU:2015-03617

BDU:2015-03618

BDU:2015-03619

BDU:2015-03620

BDU:2015-03621

BDU:2015-03622

BDU:2015-03623

BDU:2015-03624

BDU:2015-03625

BDU:2015-03626

BDU:2015-03627

BDU:2015-03628

BDU:2015-03629

BDU:2015-03630

BDU:2015-03631

BDU:2015-03632

BDU:2015-03633

BDU:2015-03634

BDU:2015-03635

BDU:2015-03636

BDU:2015-03637

BDU:2015-03638

BDU:2015-03639

BDU:2015-03640

BDU:2015-03641

BDU:2015-03642

BDU:2015-03643

BDU:2015-03644

BDU:2015-03645

BDU:2015-03646

BDU:2015-03647

BDU:2015-03648

BDU:2015-03649

BDU:2015-03650

BDU:2015-03651

BDU:2015-03652

BDU:2015-03653

BDU:2015-03654

CVE-2007-6694

DSA-1503-1

DSA-1503-2

DSA-1504-1

DSA-1565-1

RHSA-2008:0055

RHSA-2008:0154

RHSA-2008_0055

RHSA-2008_0154

Affected Products

Debian

Linux Kernel

Red Hat

References · 503

• https://bdu.fstec.ru/vul/2015-03902 · Security Note
• https://bdu.fstec.ru/vul/2015-02380 · Security Note
• https://bdu.fstec.ru/vul/2015-03879 · Security Note
• https://bdu.fstec.ru/vul/2015-03834 · Security Note
• https://bdu.fstec.ru/vul/2015-03591 · Security Note
• https://bdu.fstec.ru/vul/2015-03820 · Security Note
• https://bdu.fstec.ru/vul/2015-03972 · Security Note
• https://bdu.fstec.ru/vul/2015-04994 · Security Note
• https://bdu.fstec.ru/vul/2015-03590 · Security Note
• https://bdu.fstec.ru/vul/2015-03617 · Security Note
• https://bdu.fstec.ru/vul/2015-02383 · Security Note
• https://bdu.fstec.ru/vul/2015-03759 · Security Note
• https://bdu.fstec.ru/vul/2015-03730 · Security Note
• https://bdu.fstec.ru/vul/2015-03786 · Security Note
• https://bdu.fstec.ru/vul/2015-03815 · Security Note