SB2004123106 - Out-of-bounds read in Linux kernel
Published: December 31, 2004
Security Bulletin ID
SB2004123106
Severity
Low
Patch available
YES
Number of vulnerabilities
1
Exploitation vector
Local access
Highest impact
Information disclosure
Breakdown by Severity
- Low
- Medium
- High
- Critical
Description
This security bulletin contains information about 1 security vulnerability.
1) Out-of-bounds read (CVE-ID: CVE-2004-2607)
The vulnerability allows a local user to gain access to sensitive information.
A numeric casting discrepancy in sdla_xfer in Linux kernel 2.6.x up to 2.6.5 and 2.4 up to 2.4.29-rc1 allows local users to read portions of kernel memory via a large len argument, which is received as an int but cast to a short, which prevents a read loop from filling a buffer.
Remediation
Install update from vendor's website.
References
- http://secunia.com/advisories/18977
- http://secunia.com/advisories/19369
- http://www.debian.org/security/2006/dsa-1018
- http://www.mandriva.com/security/advisories?name=MDKSA-2006:072
- http://www.securityfocus.com/bid/16759
- http://www.uwsg.iu.edu/hypermail/linux/kernel/0404.2/0313.html
- http://www.uwsg.iu.edu/hypermail/linux/kernel/0404.2/0743.html
- http://wwwnew.mandriva.com/security/advisories?name=MDKSA-2006:044