Improper input validation in Linux kernel

1) Improper input validation

EUVDB-ID: #VU95657

Risk: Low

CVSSv4.0: 1.1 [CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:L/VI:L/VA:L/SC:N/SI:N/SA:N/E:U/U:Clear]

CVE-ID: CVE-2004-0003

CWE-ID: CWE-20 - Improper input validation

Exploit availability: No

Description

The vulnerability allows a local user to read and manipulate data.

Unknown vulnerability in Linux kernel before 2.4.22 allows local users to gain privileges, related to 'R128 DRI limits checking.'

Mitigation

Install update from vendor's repository.

Vulnerable software versions

Linux kernel: All versions

CPE2.3

• cpe:2.3:o:linux_foundation:linux_kernel:*:*:*:*:*:*:*:*

External links

https://secunia.com/advisories/10782
https://secunia.com/advisories/10911
https://secunia.com/advisories/10912
https://secunia.com/advisories/11202
https://secunia.com/advisories/11361
https://secunia.com/advisories/11362
https://secunia.com/advisories/11369
https://secunia.com/advisories/11370
https://secunia.com/advisories/11376
https://secunia.com/advisories/11464
https://secunia.com/advisories/11891
https://secunia.com/advisories/12075
https://www.ciac.org/ciac/bulletins/o-082.shtml
https://www.ciac.org/ciac/bulletins/o-121.shtml
https://www.ciac.org/ciac/bulletins/o-126.shtml
https://www.ciac.org/ciac/bulletins/o-127.shtml
https://www.ciac.org/ciac/bulletins/o-145.shtml
https://www.debian.org/security/2004/dsa-479
https://www.debian.org/security/2004/dsa-480
https://www.debian.org/security/2004/dsa-481
https://www.debian.org/security/2004/dsa-482
https://www.debian.org/security/2004/dsa-489
https://www.debian.org/security/2004/dsa-491
https://www.debian.org/security/2004/dsa-495
https://www.linuxcompatible.org/print25630.html
https://www.mandrakesecure.net/en/advisories/advisory.php?name=MDKSA-2004:029
https://www.novell.com/linux/security/advisories/2004_05_linux_kernel.html
https://www.redhat.com/support/errata/RHSA-2004-044.html
https://www.redhat.com/support/errata/RHSA-2004-065.html
https://www.redhat.com/support/errata/RHSA-2004-106.html
https://www.redhat.com/support/errata/RHSA-2004-166.html
https://www.securityfocus.com/bid/9570
https://www.turbolinux.com/security/2004/TLSA-2004-14.txt
https://exchange.xforce.ibmcloud.com/vulnerabilities/15029
https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A1017
https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A834
https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A9204

Q & A

Can this vulnerability be exploited remotely?

No. This vulnerability can be exploited locally. The attacker should have authentication credentials and successfully authenticate on the system.

Is there known malware, which exploits this vulnerability?

No. We are not aware of malware exploiting this vulnerability.