Secunia

Some vulnerabilities have been reported in the Linux Kernel, which can be exploited by malicious, local users to cause a DoS (Denial of Service) or potentially gain escalated privileges.

1) A boundary error exists in the system call handling in the 32bit system call emulation on AMD64 / Intel EM64T systems.

2) An unspecified error within the memory management handling of ELF executables in "load_elf_binary" can be exploited to crash the system via a specially crafted ELF binary.

Issue 2 only affects Kernel versions prior to 2.4.26.

3) An error in handling NULL return values in the "find_target()" function in ptrace32.c can be exploited to crash the kernel by running a 32-bit ltrace program with the -i option on a 64-bit executable program.

Solution
Update to version 2.4.29.
Further details available in Customer Area

Provided and/or discovered by
1) Petr Vandrovec
2) Kirill Korotaev

Changelog
Further details available in Customer Area

Original Advisory
http://rhn.redhat.com/errata/RHSA-2004-689.html

Deep Links
Links available in Customer Area