Linux Kernel多个本地漏洞

漏洞信息详情

Linux Kernel多个本地漏洞

• CNNVD编号：CNNVD-200412-066
• 危害等级： 低危
  
  
• CVE编号：
  CVE-2004-1334
  
• 漏洞类型：
  
  
  缓冲区溢出
  
• 发布时间：
  
  2004-12-15
  
• 威胁类型：
  
  
  本地
  
• 更新时间：
  
  2005-10-20
  
• 厂        商：
  
  linux
• 漏洞来源：
  Discovery of these…

Linux kernel 2.6.10以前的版本的ip_options_get函数存在整数溢出漏洞。本地用户借助一个包含-1的cmsg_len导致服务拒绝（内核崩溃），引发缓冲区溢出。

Reportedly, these vulnerabilities are addressed in versions 2.6.10rc3bk5 and 2.4rc of the Linux kernel, but this is not confirmed.
Please see the referenced advisories for more information.
RedHat Fedora Core1

• RedHat kernel-2.4.22-1.2199.5.legacy.nptl.athlon.rpmFedora Core 1:
  
  http://download.fedoralegacy.org/fedora/1/updates/i386/kernel-2.4.22-1
  .2199.5.legacy.nptl.athlon.rpm
• RedHat kernel-2.4.22-1.2199.5.legacy.nptl.i586.rpmFedora Core 1:
  
  http://download.fedoralegacy.org/fedora/1/updates/i386/kernel-2.4.22-1
  .2199.5.legacy.nptl.i586.rpm
• RedHat kernel-2.4.22-1.2199.5.legacy.nptl.i686.rpmFedora Core 1:
  
  http://download.fedoralegacy.org/fedora/1/updates/i386/kernel-2.4.22-1
  .2199.5.legacy.nptl.i686.rpm
• RedHat kernel-BOOT-2.4.22-1.2199.5.legacy.nptl.i386.rpmFedora Core 1:
  
  http://download.fedoralegacy.org/fedora/1/updates/i386/kernel-BOOT-2.4
  .22-1.2199.5.legacy.nptl.i386.rpm
• RedHat kernel-doc-2.4.22-1.2199.5.legacy.nptl.i386.rpmFedora Core 1:
  
  http://download.fedoralegacy.org/fedora/1/updates/i386/kernel-doc-2.4.
  22-1.2199.5.legacy.nptl.i386.rpm
• RedHat kernel-smp-2.4.22-1.2199.5.legacy.nptl.athlon.rpmFedora Core 1:
  
  http://download.fedoralegacy.org/fedora/1/updates/i386/kernel-smp-2.4.
  22-1.2199.5.legacy.nptl.athlon.rpm
• RedHat kernel-smp-2.4.22-1.2199.5.legacy.nptl.i586.rpmFedora Core 1:
  
  http://download.fedoralegacy.org/fedora/1/updates/i386/kernel-smp-2.4.
  22-1.2199.5.legacy.nptl.i586.rpm
• RedHat kernel-smp-2.4.22-1.2199.5.legacy.nptl.i686.rpmFedora Core 1:
  
  http://download.fedoralegacy.org/fedora/1/updates/i386/kernel-smp-2.4.
  22-1.2199.5.legacy.nptl.i686.rpm
• RedHat kernel-source-2.4.22-1.2199.5.legacy.nptl.i386.rpmFedora Core 1:
  
  http://download.fedoralegacy.org/fedora/1/updates/i386/kernel-source-2
  .4.22-1.2199.5.legacy.nptl.i386.rpm

Linux kernel 2.4.17

• Debian kernel-headers-2.4.17_2.4.17-0.020226.2.woody3_mips.deb
  
  http://security.debian.org/pool/updates/main/k/kernel-patch-2.4.17-mip
  s/kernel-headers-2.4.17_2.4.17-0.020226.2.woody3_mips.deb
• Debian kernel-headers-2.4.17_2.4.17-0.020226.2.woody3_mipsel.deb
  
  http://security.debian.org/pool/updates/main/k/kernel-patch-2.4.17-mip
  s/kernel-headers-2.4.17_2.4.17-0.020226.2.woody3_mipsel.deb
• Debian kernel-image-2.4.17-r3k-kn02_2.4.17-0.020226.2.woody3_mipsel.deb
  
  http://security.debian.org/pool/updates/main/k/kernel-patch-2.4.17-mip
  s/kernel-image-2.4.17-r3k-kn02_2.4.17-0.020226.2.woody3_mipsel.deb
• Debian kernel-image-2.4.17-r4k-ip22_2.4.17-0.020226.2.woody3_mips.deb
  
  http://security.debian.org/pool/updates/main/k/kernel-patch-2.4.17-mip
  s/kernel-image-2.4.17-r4k-ip22_2.4.17-0.020226.2.woody3_mips.deb
• Debian kernel-image-2.4.17-r4k-kn04_2.4.17-0.020226.2.woody3_mipsel.deb
  
  http://security.debian.org/pool/updates/main/k/kernel-patch-2.4.17-mip
  s/kernel-image-2.4.17-r4k-kn04_2.4.17-0.020226.2.woody3_mipsel.deb
• Debian kernel-image-2.4.17-r5k-ip22_2.4.17-0.020226.2.woody3_mips.deb
  
  http://security.debian.org/pool/updates/main/k/kernel-patch-2.4.17-mip
  s/kernel-image-2.4.17-r5k-ip22_2.4.17-0.020226.2.woody3_mips.deb
• Debian kernel-patch-2.4.17-mips_2.4.17-0.020226.2.woody3_all.deb
  
  http://security.debian.org/pool/updates/main/k/kernel-patch-2.4.17-mip
  s/kernel-patch-2.4.17-mips_2.4.17-0.020226.2.woody3_all.deb
• Debian kernel-patch-2.4.17-mips_2.4.17-0.020226.2.woody4_all.debArchitecture Independent.
  
  http://security.debian.org/pool/updates/main/k/kernel-patch-2.4.17-mip
  s/kernel-patch-2.4.17-mips_2.4.17-0.020226.2.woody4_all.deb
• Debian mips-tools_2.4.17-0.020226.2.woody3_mipsel.deb
  
  http://security.debian.org/pool/updates/main/k/kernel-patch-2.4.17-mip
  s/mips-tools_2.4.17-0.020226.2.woody3_mipsel.deb
• Debian kernel-doc-2.4.17_2.4.17-1woody3_all.debDebian GNU/Linux 3.0 (woody)
  
  http://security.debian.org/pool/updates/main/k/kernel-source-2.4.17/ke
  rnel-doc-2.4.17_2.4.17-1woody3_all.deb
• Debian kernel-doc-2.4.17_2.4.17-1woody4_all.debDebian GNU/Linux 3.0 alias woody
  
  http://security.debian.org/pool/updates/main/k/kernel-source-2.4.17/ke
  rnel-doc-2.4.17_2.4.17-1woody4_all.deb
• Debian kernel-headers-2.4.17-apus_2.4.17-5_powerpc.debDebian GNU/Linux 3.0 (woody)
  
  http://security.debian.org/pool/updates/main/k/kernel-patch-2.4.17-apu
  s/kernel-headers-2.4.17-apus_2.4.17-5_powerpc.deb
• Debian kernel-headers-2.4.17-apus_2.4.17-6_powerpc.debDebian GNU/Linux 3.0 alias woody
  
  http://security.debian.org/pool/updates/main/k/kernel-patch-2.4.17-apu
  s/kernel-headers-2.4.17-apus_2.4.17-6_powerpc.deb
• Debian kernel-headers-2.4.17-hppa_32.4_hppa

来源: XF
名称: linux-ipoptionsget-dos(18522)
链接:http://xforce.iss.net/xforce/xfdb/18522

来源: FULLDISC
名称: 20041215 fun with linux kernel
链接:http://www.securitytrap.com/mail/full-disclosure/2004/Dec/0323.html

来源: BID
名称: 11956
链接:http://www.securityfocus.com/bid/11956

来源: www.guninski.com
链接:http://www.guninski.com/where_do_you_want_billg_to_go_today_2.html

来源: BUGTRAQ
名称: 20041215 [USN-47-1] Linux kernel vulnerabilities
链接:http://marc.theaimsgroup.com/?l=bugtraq&m=110383108211524&w=2