Linux Kernel Floating Point Exception Handler Local Denial Of Service Vulnerability

BID:10538

Info

Linux Kernel Floating Point Exception Handler Local Denial Of Service Vulnerability

Bugtraq ID: 10538
Class: Design Error
CVE: CVE-2004-0554
Remote: No
Local: Yes
Published: Jun 14 2004 12:00AM
Updated: Aug 05 2010 07:46PM
Credit: Discovery of this issue is credited to Stian Skjelstad <[email protected]>.
Vulnerable: tinysofa enterprise server 1.0 -U1
tinysofa enterprise server 1.0
SuSE Linux 8.1
SuSE Linux 8.0
SuSE Linux 9.1
SuSE Linux 9
S.u.S.E. Linux Office Server
S.u.S.E. Linux Firewall on CD
S.u.S.E. Linux Database Server 0
S.u.S.E. Linux Connectivity Server
S.u.S.E. Linux Admin-CD for Firewall
Mandriva Linux Mandrake 10.0 AMD64
Mandriva Linux Mandrake 10.0
Mandriva Linux Mandrake 9.2 amd64
Mandriva Linux Mandrake 9.2
Mandriva Linux Mandrake 9.1 ppc
Mandriva Linux Mandrake 9.1
MandrakeSoft Multi Network Firewall 2.0
MandrakeSoft Corporate Server 2.1 x86_64
MandrakeSoft Corporate Server 2.1
Linux kernel 2.6.7 rc1
Linux kernel 2.6.6 rc1
Linux kernel 2.6.6
Linux kernel 2.6.5
+ S.u.S.E. Linux Personal 9.1 x86_64
 + S.u.S.E. Linux Personal 9.1 x86_64
 + S.u.S.E. Linux Personal 9.1
+ S.u.S.E. Linux Personal 9.1
+ SuSE Linux Enterprise Server 9
 Linux kernel 2.6.4
Linux kernel 2.6.3
Linux kernel 2.6.2
Linux kernel 2.6.1 -rc2
Linux kernel 2.6.1 -rc1
Linux kernel 2.6.1
Linux kernel 2.6
Linux kernel 2.4.26
Linux kernel 2.4.25
Linux kernel 2.4.24
Linux kernel 2.4.23
+ Trustix Secure Linux 2.0
Linux kernel 2.4.22
+ Devil-Linux Devil-Linux 1.0.5
+ Devil-Linux Devil-Linux 1.0.4
+ Mandriva Linux Mandrake 9.2 amd64
 + Mandriva Linux Mandrake 9.2
+ Redhat Fedora Core1
 + Slackware Linux 9.1
Linux kernel 2.4.21
+ Mandriva Linux Mandrake 9.1 ppc
 + Mandriva Linux Mandrake 9.1
+ Redhat Desktop 3.0
+ Redhat Enterprise Linux AS 3
 + Redhat Enterprise Linux ES 3
 + Redhat Enterprise Linux WS 3
 + S.u.S.E. Linux Personal 9.0 x86_64
 + S.u.S.E. Linux Personal 9.0
+ SuSE SUSE Linux Enterprise Server 8
 Linux kernel 2.4.20
+ CRUX CRUX Linux 1.0
+ Gentoo Linux 1.4
+ Gentoo Linux 1.2
+ Redhat Linux 9.0 i386
 + Slackware Linux 9.0
+ WOLK WOLK 4.4 s
 Linux kernel 2.4.19
+ Conectiva Linux Enterprise Edition 1.0
+ MandrakeSoft Corporate Server 2.1 x86_64
 + MandrakeSoft Corporate Server 2.1
+ MandrakeSoft Multi Network Firewall 2.0
+ Mandriva Linux Mandrake 9.0
+ Slackware Linux -current
 + SuSE Linux 8.1
+ SuSE SUSE Linux Enterprise Server 8
 + SuSE SUSE Linux Enterprise Server 7
 Linux kernel 2.4.18
+ Astaro Security Linux 2.0 23
 + Astaro Security Linux 2.0 16
 + Debian Linux 3.0 sparc
 + Debian Linux 3.0 s/390
 + Debian Linux 3.0 ppc
 + Debian Linux 3.0 mipsel
 + Debian Linux 3.0 mips
 + Debian Linux 3.0 m68k
 + Debian Linux 3.0 ia-64
 + Debian Linux 3.0 ia-32
 + Debian Linux 3.0 hppa
 + Debian Linux 3.0 arm
 + Debian Linux 3.0 alpha
 + Mandriva Linux Mandrake 8.2
+ Mandriva Linux Mandrake 8.1
+ Mandriva Linux Mandrake 8.0
+ Redhat Advanced Workstation for the Itanium Processor 2.1 IA64
 + Redhat Advanced Workstation for the Itanium Processor 2.1
+ Redhat Enterprise Linux AS 2.1 IA64
 + Redhat Linux 8.0
+ Redhat Linux 7.3
+ S.u.S.E. Linux Connectivity Server
+ S.u.S.E. Linux Database Server 0
 + S.u.S.E. Linux Firewall on CD
+ S.u.S.E. Linux Office Server
+ S.u.S.E. Linux Personal 8.2
+ S.u.S.E. SuSE eMail Server 3.1
+ S.u.S.E. SuSE eMail Server III
+ SuSE Linux 8.1
+ SuSE Linux 8.0
+ SuSE Linux 7.3
+ SuSE Linux 7.2
+ SuSE Linux 7.1
+ SuSE Linux Openexchange Server
+ SuSE SUSE Linux Enterprise Server 8
 + SuSE SUSE Linux Enterprise Server 7
 + Turbolinux Turbolinux Server 8.0
+ Turbolinux Turbolinux Server 7.0
+ Turbolinux Turbolinux Workstation 8.0
+ Turbolinux Turbolinux Workstation 7.0
Gentoo Linux 1.4
EnGarde Secure Professional 1.5
EnGarde Secure Community 2.0
Avaya S8700 R2.0.1
Avaya S8700 R2.0.0
Avaya S8500 R2.0.1
Avaya S8500 R2.0.0
Avaya S8300 R2.0.1
Avaya S8300 R2.0.0
Avaya S3400 Message Application Server 0
+ Microsoft Windows 2000 Server
Avaya Intuity LX
Avaya Converged Communications Server 2.0
Not Vulnerable: tinysofa enterprise server 1.0 -U2
Linux kernel 2.6.7
Linux kernel 2.2.19
+ EnGarde Secure Linux 1.0.1
+ Immunix Immunix OS 7+
 + MandrakeSoft Single Network Firewall 7.2
+ Mandriva Linux Mandrake 8.1
+ Mandriva Linux Mandrake 8.0 ppc
 + Mandriva Linux Mandrake 8.0
+ SuSE Linux 7.0
+ SuSE Linux 6.4
+ SuSE Linux 6.3
+ Trustix Secure Linux 1.5
Gentoo Linux Kernel 2.4.26 _pre6-gentoo
Gentoo Linux Kernel 2.4.26 -rc3-gentoo

Discussion

Linux Kernel Floating Point Exception Handler Local Denial Of Service Vulnerability

The Linux Kernel is reported to be affected by a local denial of service vulnerability. This issue is due to a design error that causes the kernel to fail to properly handle floating-point exceptions.

This issue may be leveraged by an attacker to cause the affected system to crash, denying service to legitimate users.

Although only select Linux kernels are reported to be affected, it is likely that various other versions are vulnerable as well.

Exploit / POC

Linux Kernel Floating Point Exception Handler Local Denial Of Service Vulnerability

The following exploit is available:

Solution / Fix

Linux Kernel Floating Point Exception Handler Local Denial Of Service Vulnerability

Solution:
A number of third party patches have been released dealing with this issue; none of which have been verified by Symantec nor the vendor.

Mandrake Linux has released advisory MDKSA-2004:062 dealing with this issue. Please see the referenced advisory for further information.

Avaya has released an advisory that acknowledges this vulnerability for Avaya products. Fixes are not currently available; customers are advised to contact the vendor for further details regarding fix availability. Please see the referenced Avaya advisory at the following location for further details:
http://support.avaya.com/japple/css/japple?temp.groupID=128450&temp.selectedFamily=128451&temp.selectedProduct=154235&temp.selectedBucket=126655&temp.feedbackState=askForFeedback&temp.documentID=194893&PAGE=avaya.css.CSSLvl1Detail&executeTransaction=avaya.css.UsageUpdate()

Trustix Linux has released advisory TSLSA-2004-0034 dealing with this issue for their linux distribution. Please see the referenced advisory for more information.

SuSE Linux has released advisory SuSE-SA:2004:017 dealing with this issue. Please see the referenced advisory for more information.

TurboLinux has released advisory TLSA-2004-18 dealing with this issue for their supported operating systems. Please see the referenced advisory for more information.

Red Hat has released advisory RHSA-2004:255-10 and fixes to address this and other issues on Red Hat Linux Enterprise platforms. Customers who are affected by this issue are advised to apply the appropriate updates. Customers subscribed to the Red Hat Network may apply the appropriate fixes using the Red Hat Update Agent (up2date). Please see referenced advisory for additional information.

EnGarde Linux has released advisory ESA-20040621-005 dealing with this issue. Please see the referenced advisory for further information.

Linux Kernel 2.6.7 has been released and it deals with this issue. Users are advised to upgrade their systems.

Tinysofa Linux has released advisory TSSA-2004-011 dealing with this issue. Please see the referenced advisory for further information.

RedHat has released an advisory (FEDORA-2004-186) to address this and other issues in Fedora Core 1. Please see the referenced advisory for more information.

Gentoo Linux has released advisory GLSA 200407-02 addressing this and other issues. Please see the referenced advisory for further information about this issue and information on upgrading packages using emerge.

Slackware has released an advisory (SSA:2004-161-01) addressing this issue. Please see the referenced advisory for further information.


Linux kernel 2.4.18

Linux kernel 2.4.20

Linux kernel 2.4.21

Linux kernel 2.4.22

Linux kernel 2.4.25

Linux kernel 2.4.26

Linux kernel 2.6

Linux kernel 2.6.1 -rc1

Linux kernel 2.6.1 -rc2

Linux kernel 2.6.1

Linux kernel 2.6.2

Linux kernel 2.6.3

Linux kernel 2.6.4

Linux kernel 2.6.5

Linux kernel 2.6.6 rc1

Linux kernel 2.6.6

Linux kernel 2.6.7 rc1

References

Linux Kernel Floating Point Exception Handler Local Denial Of Service Vulnerability

References:

© CVE.report 2026

Use of this information constitutes acceptance for use in an AS IS condition. There are NO warranties, implied or otherwise, with regard to this information or its use. Any use of this information is at the user's risk. It is the responsibility of user to evaluate the accuracy, completeness or usefulness of any information, opinion, advice or other content. EACH USER WILL BE SOLELY RESPONSIBLE FOR ANY consequences of his or her direct or indirect use of this web site. ALL WARRANTIES OF ANY KIND ARE EXPRESSLY DISCLAIMED. This site will NOT BE LIABLE FOR ANY DIRECT, INDIRECT or any other kind of loss.

CVE, CWE, and OVAL are registred trademarks of The MITRE Corporation and the authoritative source of CVE content is MITRE's CVE web site. This site includes MITRE data granted under the following license.

Free CVE JSON API cve.report/api

CVE.report and Source URL Uptime Status status.cve.report