CVSS Meta Temp Score | Current Exploit Price (≈) | CTI Interest Score |
---|---|---|
6.2 | $0-$5k | 0.00 |
A vulnerability was found in Linux Kernel (Operating System) and classified as critical. This issue affects an unknown function in the library load_elf_binary. The manipulation with an unknown input leads to a denial of service vulnerability. Using CWE to declare the problem leads to CWE-404. The product does not release or incorrectly releases a resource before it is made available for re-use. Impacted is availability. The summary by CVE is:
load_elf_binary in Linux before 2.4.26 allows local users to cause a denial of service (system crash) via an ELF binary in which the interpreter is NULL.
The bug was discovered 12/23/2004. The weakness was published 12/24/2004 by Kirill Korotaev with Red Hat (Website). The advisory is shared at rhn.redhat.com. The identification of this vulnerability is CVE-2004-1234 since 12/15/2004. The attack needs to approached within the local network. No form of authentication is needed for a successful exploitation. Technical details are known, but no exploit is available.
The vulnerability was handled as a non-public zero-day exploit for at least 1 days. During that time the estimated underground price was around $0-$5k. The vulnerability scanner Nessus provides a plugin with the ID 22609 (Debian DSA-1067-1 : kernel-source-2.4.16 - several vulnerabilities), which helps to determine the existence of the flaw in a target environment. It is assigned to the family Debian Local Security Checks and running in the context l.
Upgrading to version 2.4.26 eliminates this vulnerability. Applying a patch is able to eliminate this problem. The bugfix is ready for download at ftp.kernel.org. The best possible mitigation is suggested to be upgrading to the latest version. A possible mitigation has been published 2 years after the disclosure of the vulnerability.
The vulnerability is also documented in the databases at X-Force (18687) and Tenable (22609). Similar entries are available at 987, 1071, 1084 and 23680.
Product
Type
Vendor
Name
Version
- 2.4.0
- 2.4.1
- 2.4.2
- 2.4.3
- 2.4.4
- 2.4.5
- 2.4.6
- 2.4.7
- 2.4.8
- 2.4.9
- 2.4.10
- 2.4.11
- 2.4.12
- 2.4.13
- 2.4.14
- 2.4.15
- 2.4.16
- 2.4.17
- 2.4.18
- 2.4.19
- 2.4.20
- 2.4.21
- 2.4.22
- 2.4.23
- 2.4.23 Ow2
- 2.4.24
- 2.4.24 Ow1
- 2.4.25
- 2.4.26
License
CPE 2.3
CPE 2.2
CVSSv4
VulDB CVSS-B Score: 🔍VulDB CVSS-BT Score: 🔍
VulDB Vector: 🔍
VulDB Reliability: 🔍
CVSSv3
VulDB Meta Base Score: 6.5VulDB Meta Temp Score: 6.2
VulDB Base Score: 6.5
VulDB Temp Score: 6.2
VulDB Vector: 🔍
VulDB Reliability: 🔍
CVSSv2
AV | AC | Au | C | I | A |
---|---|---|---|---|---|
💳 | 💳 | 💳 | 💳 | 💳 | 💳 |
💳 | 💳 | 💳 | 💳 | 💳 | 💳 |
💳 | 💳 | 💳 | 💳 | 💳 | 💳 |
Vector | Complexity | Authentication | Confidentiality | Integrity | Availability |
---|---|---|---|---|---|
unlock | unlock | unlock | unlock | unlock | unlock |
unlock | unlock | unlock | unlock | unlock | unlock |
unlock | unlock | unlock | unlock | unlock | unlock |
VulDB Base Score: 🔍
VulDB Temp Score: 🔍
VulDB Reliability: 🔍
NVD Base Score: 🔍
Exploiting
Class: Denial of serviceCWE: CWE-404
CAPEC: 🔍
ATT&CK: 🔍
Local: No
Remote: Partially
Availability: 🔍
Status: Not defined
EPSS Score: 🔍
EPSS Percentile: 🔍
Price Prediction: 🔍
Current Price Estimation: 🔍
0-Day | unlock | unlock | unlock | unlock |
---|---|---|---|---|
Today | unlock | unlock | unlock | unlock |
Nessus ID: 22609
Nessus Name: Debian DSA-1067-1 : kernel-source-2.4.16 - several vulnerabilities
Nessus File: 🔍
Nessus Risk: 🔍
Nessus Family: 🔍
Nessus Context: 🔍
OpenVAS ID: 56784
OpenVAS Name: Debian Security Advisory DSA 1067-1 (kernel 2.4.16)
OpenVAS File: 🔍
OpenVAS Family: 🔍
Threat Intelligence
Interest: 🔍Active Actors: 🔍
Active APT Groups: 🔍
Countermeasures
Recommended: UpgradeStatus: 🔍
Reaction Time: 🔍
0-Day Time: 🔍
Exposure Time: 🔍
Upgrade: Kernel 2.4.26
Patch: ftp.kernel.org
Fortigate IPS: 🔍
Timeline
11/10/2004 🔍12/15/2004 🔍
12/23/2004 🔍
12/23/2004 🔍
12/24/2004 🔍
12/24/2004 🔍
12/24/2004 🔍
12/24/2004 🔍
12/31/2004 🔍
01/10/2005 🔍
05/26/2005 🔍
05/20/2006 🔍
10/14/2006 🔍
06/30/2019 🔍
Sources
Vendor: kernel.orgAdvisory: rhn.redhat.com
Researcher: Kirill Korotaev
Organization: Red Hat
Status: Not defined
Confirmation: 🔍
CVE: CVE-2004-1234 (🔍)
OVAL: 🔍
X-Force: 18687 - Linux kernel load_elf_binary denial of service, Medium Risk
SecurityTracker: 1012165
Vulnerability Center: 8153 - DoS in Linux Kernel via load_elf_binary, Medium
SecurityFocus: 12101 - Linux Kernel ELF Binary Loading Denial Of Service Vulnerability
Secunia: 13627 - Linux Kernel 32bit System Call Emulation and ELF Binary Vulnerabilities, Less Critical
OSVDB: 12589 - Linux Kernel load_elf_binary DoS
See also: 🔍
Entry
Created: 01/10/2005 10:33Updated: 06/30/2019 18:20
Changes: 01/10/2005 10:33 (101), 06/30/2019 18:20 (3)
Complete: 🔍
No comments yet. Languages: en.
Please log in to comment.