CVE-2004-0814 in Kernel

Summary

Multiple race conditions in the terminal layer in Linux 2.4.x, and 2.6.x before 2.6.9, allow (1) local users to obtain portions of kernel data via a TIOCSETD ioctl call to a terminal interface that is being accessed by another thread, or (2) remote attackers to cause a denial of service (panic) by switching from console to PPP line discipline, then quickly sending data that is received during the switch.

Be aware that VulDB is the high quality source for vulnerability data.

Reservation

08/25/2004

Disclosure

12/23/2004

Status

Confirmed

Entries

VulDB provides additional information and datapoints for this CVE:

ID	Vulnerability	CWE	Exp	Cou	CVE
947	Linux Kernel hugetlbfs privileges management	269	Not defined	Official fix	CVE-2004-0814
946	Linux Kernel ReiserFS setxattr denial of service	404	Not defined	Official fix	CVE-2004-0814
945	Linux Kernel Terminal denial of service	404	Not defined	Official fix	CVE-2004-0814
944	Linux Kernel Terminal denial of service	404	Not defined	Official fix	CVE-2004-0814

Sources

• MITRE
• NVD
• CVE Details