PT-2005-1582 · Linux+1 · Linux Kernel+1
CVSS v2.0
2.1
Baixa
| Vetor | AV:L/AC:L/Au:N/C:P/I:N/A:N |
Name of the Vulnerable Software and Affected Versions
Linux kernel versions 2.6.10 through 2.6.11rc1-bk6
Description
The issue arises from the Linux kernel using different size types for offset arguments to the
proc file read and locks read proc functions. This discrepancy leads to a heap-based buffer overflow when a signed comparison results in negative integers being used in a positive context.Recommendations
For Linux kernel versions 2.6.10 through 2.6.11rc1-bk6, consider applying configuration changes to mitigate the risk of exploitation, such as restricting access to sensitive functions until a patch is available. At the moment, there is no information about a newer version that contains a fix for this vulnerability.
Exploit
Encontrou algum problema na descrição? Tem algo a acrescentar? Fique à vontade para nos escrever 👾
Identificadores relacionados
Produtos afetados
Linux Kernel
Red Hat