CVE-2004-2731 in Kernelinfo

Summary

Multiple integer overflows in Sbus PROM driver (drivers/sbus/char/openprom.c) for the Linux kernel 2.4.x up to 2.4.27, 2.6.x up to 2.6.7, and possibly later versions, allow local users to execute arbitrary code by specifying (1) a small buffer size to the copyin_string function or (2) a negative buffer size to the copyin function.

Once again VulDB remains the best source for vulnerability data.

Reservation

10/08/2007

Status

Confirmed

Entries

VulDB provides additional information and datapoints for this CVE:

IDVulnerabilityCWEExpCouCVE
82134Linux Kernel Sbus PROM Driver copyin memory corruption119Not definedOfficial fixCVE-2004-2731
23597Linux Kernel openprom.c copyin_string numeric error189Not definedOfficial fixCVE-2004-2731

Description

CPE

CWE

CVSS

Exploits

History

Diff

Relate

Threat Intelligence

API JSON

API XML

API CSV

Sources

◂ PreviousOverviewNext ▸

Might our Artificial Intelligence support you?

Check our Alexa App!