Gentoo: 200312-02 High: Kernel Buffer Overflow Local Exploit
gentoo
December 4, 2003
Lack of proper bounds checking exists in the do_brk() kernel function inLinux kernels prior to 2.4.23
Summary
-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1
- -------------------------------------------------------------------------- GENTOO LINUX SECURITY ANNOUNCEMENT 200312-02 - --------------------------------------------------------------------------
GLSA: 200312-02 package: kernel summary: A flaw in the do_brk() function of Linux kernel 2.4.22 and earlier can be exploited by local users or malicious services to gain root privileges. severity: high Gentoo bug: 34844 date: 2003-12-04 CVE: CAN-2003-0961 exploit: local affected: <2.4.22 fixed: >=2.4.23 fixed: >=2.4.22+patches
DESCRIPTION:
Lack of proper bounds checking exists in the do_brk() kernel function in Linux kernels prior to 2.4.23. This bug can be used to give a userland program or malicious service access to the full kernel address space and gain root privileges. This issue is known to be exploitable.
All kernel ebuilds in Portage have been bumped or patched and do no...Read the Full Advisory
Topics Covered
Resolution
References
Availability
style>.gentoo_availability{display:block;}
Concerns
PREVIOUS
NEXT
Severity
critical
Lowest
Low
Medium
High
Critical
Topics Covered
Background
Get the latest News and Insights
Get the latest Linux and open source security news straight to your inbox.
Affected Packages
Impact
Workaround
Related News
Powered By
Linux Security - Your source for Top Linux News, Advisories, HOWTOs and Feature Releases
QUICK LINKS
subscribe to newsletters!
Like staying secure? So do we.
Sign up for updates, tips, and alerts!