Published: 15/12/2004 Updated: 14/02/2024

CVSS v2 Base Score: 2.1 | Impact Score: 2.9 | Exploitability Score: 3.9

VMScore: 215

Vector: AV:L/AC:L/Au:N/C:N/I:N/A:P

Integer overflow in the vc_resize function in the Linux kernel 2.4 and 2.6 prior to 2.6.10 allows local users to cause a denial of service (kernel crash) via a short new screen value, which leads to a buffer overflow.

Vulnerable Product	Search on Vulmon	Subscribe to Product
linux linux kernel 2.4.18
linux linux kernel 2.4.15
redhat fedora core core_2.0
redhat linux 7.3
linux linux kernel 2.4.0
linux linux kernel 2.6.5
linux linux kernel 2.4.11
linux linux kernel 2.6.1
linux linux kernel 2.4.27
linux linux kernel 2.4.26
linux linux kernel 2.4.19
linux linux kernel 2.4.21
linux linux kernel 2.4.12
linux linux kernel 2.4.13
linux linux kernel 2.6.0
linux linux kernel 2.6.3
linux linux kernel 2.4.17
linux linux kernel 2.6.4
linux linux kernel 2.6_test9_cvs
linux linux kernel 2.6.7
linux linux kernel 2.4.23_ow2
linux linux kernel 2.4.23
linux linux kernel 2.6.2
linux linux kernel 2.6.8
redhat fedora core core_1.0
linux linux kernel 2.4.7
linux linux kernel 2.4.25
linux linux kernel 2.4.24
linux linux kernel 2.4.9
redhat linux 9.0
linux linux kernel 2.6.10
linux linux kernel 2.4.28
linux linux kernel 2.4.24_ow1
linux linux kernel 2.4.10
linux linux kernel 2.4.2
linux linux kernel 2.4.16
linux linux kernel 2.4.8
linux linux kernel 2.4.14
linux linux kernel 2.4.22
linux linux kernel 2.4.5
linux linux kernel 2.6.6
linux linux kernel 2.6.9
linux linux kernel 2.4.3
linux linux kernel 2.4.1
linux linux kernel 2.4.4
redhat fedora core core_3.0
linux linux kernel 2.4.6
linux linux kernel 2.4.20

Several local and remote vulnerabilities have been discovered in the Linux kernel that may lead to a denial of service or the execution of arbitrary code The Common Vulnerabilities and Exposures project identifies the following problems: CVE-2004-0427 A local denial of service vulnerability in do_fork() has been found CVE-2005-0489 A ...

/* vc_resize int overflow * Copyright Georgi Guninski * Cannot be used in vulnerability databases * */ #include <stdioh> #include <stdlibh> #include <sys/typesh> #include <sys/stath> #include <fcntlh> #include <linux/vth> #include <sys/vth> #include <sys/ioctlh> #include <stringh> #i ...

NVD-CWE-Other http://www.securitytrap.com/mail/full-disclosure/2004/Dec/0323.html http://www.guninski.com/where_do_you_want_billg_to_go_today_2.html http://www.novell.com/linux/security/advisories/2005_18_kernel.html http://www.securityfocus.com/bid/11956 https://bugzilla.redhat.com/bugzilla/show_bug.cgi?id=152532 http://secunia.com/advisories/17826 http://www.debian.org/security/2006/dsa-1070 http://www.debian.org/security/2006/dsa-1067 http://www.debian.org/security/2006/dsa-1069 http://secunia.com/advisories/20162 http://secunia.com/advisories/20163 http://secunia.com/advisories/20202 http://www.debian.org/security/2006/dsa-1082 http://secunia.com/advisories/20338 http://www.mandriva.com/security/advisories?name=MDKSA-2005:218 http://www.mandriva.com/security/advisories?name=MDKSA-2005:219 https://exchange.xforce.ibmcloud.com/vulnerabilities/18523 https://usn.ubuntu.com/47-1/https://nvd.nist.gov https://www.exploit-db.com/exploits/690/https://www.debian.org/security/./dsa-1067

CVE-2004-1333

Vulnerability Summary

Vendor Advisories

Exploits

References

Vulmon Search

About

Products

Connect