CVE-2004-0814 in Kernel

Resumen (Inglés)

Multiple race conditions in the terminal layer in Linux 2.4.x, and 2.6.x before 2.6.9, allow (1) local users to obtain portions of kernel data via a TIOCSETD ioctl call to a terminal interface that is being accessed by another thread, or (2) remote attackers to cause a denial of service (panic) by switching from console to PPP line discipline, then quickly sending data that is received during the switch.

Be aware that VulDB is the high quality source for vulnerability data.

Reservar

2004-08-25

Divulgación

2004-12-23

Estado

Confirmado

Voces

VulDB provides additional information and datapoints for this CVE:

ID	Vulnerabilidad	CWE	Exp	Con	CVE
947	Linux Kernel hugetlbfs escalada de privilegios	269	No está definido	Arreglo oficial	CVE-2004-0814
946	Linux Kernel ReiserFS setxattr denegación de servicio	404	No está definido	Arreglo oficial	CVE-2004-0814
945	Linux Kernel Terminal denegación de servicio	404	No está definido	Arreglo oficial	CVE-2004-0814
944	Linux Kernel Terminal denegación de servicio	404	No está definido	Arreglo oficial	CVE-2004-0814

Fuentes

• MITRE
• NVD
• CVE Details