Linux Kernel e1000 Initialization Error May Disclose Kernel Memory to Local Users
|
|
SecurityTracker Alert ID: 1010273
|
|
SecurityTracker URL: http://securitytracker.com/id?1010273
|
|
CVE Reference: CAN-2004-0535
(Links to External Site)
|
Updated: Jun 8 2004
|
Original Entry Date: May 25 2004
|
Impact: Disclosure of system information, Disclosure of user information
|
Fix Available: Yes
Vendor Confirmed: Yes
|
Version(s): prior to 2.4.27-pre1
|
Description: A vulnerability was reported in the Linux kernel in the e1000 Ethernet card driver. A local user may be able to view portions of kernel memory.
Ken Ashcraft reported (http://www.uwsg.iu.edu/hypermail/linux/kernel/0404.2/0139.html) that the 'e1000_ethtool.c' contains a flaw where unbounded input is used in a copy_to_user() function call.
|
Impact: A local user may be able to view portions of kernel memory.
|
Solution: A fix is available in version 2.4.27-pre1.
|
Vendor URL: www.kernel.org/pub/linux/kernel/v2.4/testing/patch-2.4.27.log (Links to External Site)
|
Cause: Access control error, State error
|
Underlying OS: Linux (Caldera/SCO), Linux (Conectiva), Linux (Debian), Linux (EnGarde), Linux (Gentoo), Linux (HP Secure OS), Linux (Immunix), Linux (Mandrake), Linux (Progeny Debian), Linux (Red Hat Enterprise), Linux (Red Hat Fedora), Linux (Red Hat Linux), Linux (SGI), Linux (Slackware), Linux (Sun), Linux (SuSE), Linux (Trustix), Linux (Turbo Linux), Linux (Xandros)
|
|
Message History:
This archive entry has one or more follow-up message(s) listed below.
|
Source Message Contents
|
Date: Tue, 25 May 2004 00:08:28 -0400
Subject: http://www.kernel.org/pub/linux/kernel/v2.4/testing/patch-2.4.27.log
|
http://www.kernel.org/pub/linux/kernel/v2.4/testing/patch-2.4.27.log
> o e1000: fix probable security hole
|
|
