|
Linux Kernel 32bit System Call Emulation and ELF Binary Vulnerabilities
|
|
Secunia Advisory:
|
SA13627
|
|
|
Release Date:
|
2004-12-24
|
|
Last Update:
|
2005-09-29
|
|
Popularity:
|
13,699 views
|
|
|
Critical:
|
Less critical
|
|
Impact:
|
Privilege escalation
DoS
|
|
Where:
|
Local system
|
|
Solution Status:
|
Vendor Patch
|
|
| OS: | Linux Kernel 2.4.x
|
|
|
Subscribe:
|
Instant alerts on relevant vulnerabilities 
|
|
| CVE reference: | CVE-2004-1144
CVE-2004-1234
CVE-2005-2553
|
|
Description:
Some vulnerabilities have been reported in the Linux Kernel, which can be exploited by malicious, local users to cause a DoS (Denial of Service) or potentially gain escalated privileges.
1) A boundary error exists in the system call handling in the 32bit system call emulation on AMD64 / Intel EM64T systems.
2) An unspecified error within the memory management handling of ELF executables in "load_elf_binary" can be exploited to crash the system via a specially crafted ELF binary.
Issue 2 only affects Kernel versions prior to 2.4.26.
3) An error in handling NULL return values in the "find_target()" function in ptrace32.c can be exploited to crash the kernel by running a 32-bit ltrace program with the -i option on a 64-bit executable program.
Solution:
Update to version 2.4.29.
http://kernel.org/
Provided and/or discovered by:
1) Petr Vandrovec
2) Kirill Korotaev
Changelog:
2005-01-20: Updated "Solution" section.
2005-09-29: Added information about third vulnerability.
Original Advisory:
http://rhn.redhat.com/errata/RHSA-2004-689.html
|
|
|
Track this Secunia Advisory
|
Customers of the Secunia Vulnerability Intelligence solutions will automatically receive updates when new information regarding this advisory is released.
Read more about our Vulnerability Intelligence solutions and what they can do for you and your company.
|
|
|
About this Secunia Advisory
|
Please note: The information that this Secunia Advisory is based on comes from a third party unless stated otherwise.
Secunia collects, validates, and verifies all vulnerability reports issued by security research groups, vendors, and others.
|
