Linux Kernel SYSFS_Write_File本地整数溢出漏洞

漏洞信息详情

Linux Kernel SYSFS_Write_File本地整数溢出漏洞

• CNNVD编号：CNNVD-200412-1126
• 危害等级： 低危
  
  
• CVE编号：
  CVE-2004-2302
  
• 漏洞类型：
  
  
  边界条件错误
  
• 发布时间：
  
  2004-12-31
  
• 威胁类型：
  
  
  本地
  
• 更新时间：
  
  2010-04-02
  
• 厂        商：
  
  linux
• 漏洞来源：
  Alexander Nyberg i…

Linux kernel 2.6.10之前版本的sysfs_read_file和 sysfs_write_file函数存在竞争条件漏洞。本地用户借助sysfs文件的超大偏移读取核心内存和导致服务拒绝（崩溃）。

SuSE has released advisory SUSE-SA:2005:018 along with fixes dealing with this issue. Please see the referenced advisory for more information.
Ubuntu Linux has released advisory USN-110-1 along with fixes dealing with this issue. Please see the referenced advisory for more information.
RedHat has released advisory RHSA-2005:366-19 to address this, and other issues in RedHat Enterprise Linux 4, and RedHat Desktop 4 operating systems. Please see the referenced advisory for further information.
SUSE has released advisory SUSE-SA:2005:044 to address various issues. Please see the referenced advisory for more information.
Mandriva has released advisory MDKSA-2005:218 to address various issues affecting the Linux Kernel. Please see the referenced advisory for more information.
Mandriva has released advisory MDKSA-2005:219 to address various issues affecting the Linux Kernel in Mandrake Linux 10.1. Please see the referenced advisory for more information.
Debian GNU/Linux has released advisory DSA 922-1, along with fixes to address multiple kernel issues. Please see the referenced advisory for further information.

Linux kernel 2.6.3

• Mandriva kernel-source-stripped-2.6.3-29mdk.x86_64.rpmCorporate 3.0/X86_64:
  
  http://www1.mandrivalinux.com/en/ftp.php3
• Mandriva kernel-2.6.3.29mdk-1-1mdk.x86_64.rpmCorporate 3.0/X86_64:
  
  http://www1.mandrivalinux.com/en/ftp.php3
• Mandriva kernel-enterprise-2.6.3.29mdk-1-1mdk.i586.rpmCorporate 3.0:
  
  http://www1.mandrivalinux.com/en/ftp.php3
• Mandriva kernel-secure-2.6.3.29mdk-1-1mdk.i586.rpmCorporate 3.0:
  
  http://www1.mandrivalinux.com/en/ftp.php3
• Mandriva kernel-secure-2.6.3.29mdk-1-1mdk.x86_64.rpmCorporate 3.0/X86_64:
  
  http://www1.mandrivalinux.com/en/ftp.php3
• Mandriva kernel-smp-2.6.3.29mdk-1-1mdk.i586.rpmCorporate 3.0:
  
  http://www1.mandrivalinux.com/en/ftp.php3
• Mandriva kernel-source-2.6.3-29mdk.i586.rpmCorporate 3.0:
  
  http://www1.mandrivalinux.com/en/ftp.php3

Linux kernel 2.6.4

• SuSE kernel-bigsmp-2.6.4-54.3.i586.patch.rpm
  ftp://ftp.suse.com/pub/suse/i386/update/9.1/rpm/i586/kernel-bigsmp-2.6
  .4-54.3.i586.patch.rpm
• SuSE kernel-bigsmp-2.6.5-7.151.i586.rpm
  ftp://ftp.suse.com/pub/suse/i386/update/9.1/rpm/i586/kernel-bigsmp-2.6
  .5-7.151.i586.rpm
• SuSE kernel-default-2.6.5-7.151.i586.rpm
  ftp://ftp.suse.com/pub/suse/i386/update/9.1/rpm/i586/kernel-default-2.
  6.5-7.151.i586.rpm
• SuSE kernel-default-2.6.5-7.151.x86_64.rpm
  ftp://ftp.suse.com/pub/suse/x86_64/update/9.1/rpm/x86_64/kernel-defaul
  t-2.6.5-7.151.x86_64.rpm
• SuSE kernel-docs-2.6.5-7.151.noarch.rpm
  ftp://ftp.suse.com/pub/suse/i386/update/9.1/rpm/noarch/kernel-docs-2.6
  .5-7.151.noarch.rpm
• SuSE kernel-smp-2.6.5-7.151.i586.rpm
  ftp://ftp.suse.com/pub/suse/i386/update/9.1/rpm/i586/kernel-smp-2.6.5-
  7.151.i586.rpm
• SuSE kernel-smp-2.6.5-7.151.x86_64.rpm
  ftp://ftp.suse.com/pub/suse/x86_64/update/9.1/rpm/x86_64/kernel-smp-2.
  6.5-7.151.x86_64.rpm
• SuSE kernel-source-2.6.5-7.151.i586.rpm
  ftp://ftp.suse.com/pub/suse/i386/update/9.1/rpm/i586/kernel-source-2.6
  .5-7.151.i586.rpm
• SuSE kernel-source-2.6.5-7.151.x86_64.rpm
  ftp://ftp.suse.com/pub/suse/x86_64/update/9.1/rpm/x86_64/kernel-source
  -2.6.5-7.151.x86_64.rpm
• SuSE kernel-syms-2.6.5-7.151.i586.rpm
  ftp://ftp.suse.com/pub/suse/i386/update/9.1/rpm/i586/kernel-syms-2.6.5
  -7.151.i586.rpm
• SuSE kernel-syms-2.6.5-7.151.x86_64.rpm
  ftp://ftp.suse.com/pub/suse/x86_64/update/9.1/rpm/x86_64/kernel-syms-2
  .6.5-7.151.x86_64.rpm
• SuSE ltmodem-2.6.2-38.14.i586.rpm
  ftp://ftp.suse.com/pub/suse/i386/update/9.1/rpm/i586/ltmodem-2.6.2-38.
  14.i586.rpm

Linux kernel 2.6.8 rc1

• Mandriva kernel-2.6.8.1.26mdk-1-1mdk.i586.rpmMandriva Linux 10.1:
  
  http://www1.mandrivalinux.com/en/ftp.php3
• Mandriva kernel-2.6.8.1.26mdk-1-1mdk.x86_64.rpmMandriva Linux 10.1/X86_64:
  
  http://www1.mandrivalinux.com/en/ftp.php3
• Mandriva kernel-enterprise-2.6.8.1.26mdk-1-1mdk.i586.rpmMandriva Linux 10.1:
  
  http://www1.mandrivalinux.com/en/ftp.php3
• Mandriva kernel-i586-up-1GB-2.6.8.1.26mdk-1-1mdk.i586.rpmMandriva Linux 10.1:
  
  http://www1.mandrivalinux.com/en/ftp.php3
• Mandriva kernel-i686-up-64GB-2.6.8.1.26mdk-1-1mdk.i586.rpmMandriva Linux 10.1:
  
  http://www1.mandrivalinux.com/en/ftp.php3
• Mandriva kernel-secure-2.6.8.1.26mdk-1-1mdk.i586.rpmMandriva Linux 10.1:
  
  http://www1.mandrivalinux.com/en/ftp.php3
• Mandriva kernel-secure-2.6.8.1.26mdk-1-1mdk.x86_64.rpmMandriva Linux 10.1/X86_64:
  
  http://www1.mandrivalinux.com/en/ftp.php3
• Mandriva kernel-smp-2.6.8.1.26mdk-1-1mdk.i586.rpmMandriva Linux 10.1:
  
  http://www1.mandrivalinux.com/en/ftp.php3
• Mandriva kernel-smp-2.6.8.1.26mdk-1-1mdk.x86_64.rpmMandriva Linux 10.1/X86_64:
  
  http://www1.mandrivalinux.com/en/ftp.php3
• Mandriva kernel-source-2.6-2.6.8.1-26mdk.i586.rpmMandriva Linux 10.1:
  
  http://www1.mandrivalinux.com/en/ftp.php3
• Mandriva kernel-source-2.6-2.6.8.1-26mdk.x86_64.rpmMandriva Linux 10.1/X86_64:
  http