CVE-2004-0814 in Kernel

Résumé (Anglaise)

Multiple race conditions in the terminal layer in Linux 2.4.x, and 2.6.x before 2.6.9, allow (1) local users to obtain portions of kernel data via a TIOCSETD ioctl call to a terminal interface that is being accessed by another thread, or (2) remote attackers to cause a denial of service (panic) by switching from console to PPP line discipline, then quickly sending data that is received during the switch.

Be aware that VulDB is the high quality source for vulnerability data.

Réserver

25/08/2004

Divulgation

23/12/2004

Statut

Confirmé

Entrées

VulDB provides additional information and datapoints for this CVE:

ID	Vulnérabilité	CWE	Exp	Con	CVE
947	Linux Kernel hugetlbfs élévation de privilèges	269	Non défini	Correctif officiel	CVE-2004-0814
946	Linux Kernel ReiserFS setxattr déni de service	404	Non défini	Correctif officiel	CVE-2004-0814
945	Linux Kernel Terminal déni de service	404	Non défini	Correctif officiel	CVE-2004-0814
944	Linux Kernel Terminal déni de service	404	Non défini	Correctif officiel	CVE-2004-0814

Sources

• MITRE
• NVD
• CVE Details