Linux TTY Layer Kernel Panic Denial Of Service Vulnerability
BID:7791
Info
Linux TTY Layer Kernel Panic Denial Of Service Vulnerability
| Bugtraq ID: | 7791 |
| Class: | Unknown |
| CVE: |
CVE-2003-0247 |
| Remote: | No |
| Local: | Yes |
| Published: | Jun 03 2003 12:00AM |
| Updated: | Jul 11 2009 10:06PM |
| Credit: | Discovery of this vulnerability credited to Al Viro. |
| Vulnerable: |
RedHat Linux 9.0 i386 RedHat Linux 8.0 i686 RedHat Linux 8.0 i386 RedHat Linux 8.0 RedHat Linux 7.3 i686 RedHat Linux 7.3 i386 RedHat Linux 7.3 RedHat Linux 7.2 i686 RedHat Linux 7.2 i586 RedHat Linux 7.2 i386 RedHat Linux 7.2 athlon RedHat Linux 7.2 RedHat Linux 7.1 i686 RedHat Linux 7.1 i586 RedHat Linux 7.1 i386 RedHat Linux 7.1 RedHat kernel-utils-2.4-8.29.i386.rpm RedHat kernel-utils-2.4-8.13.i386.rpm RedHat kernel-utils-2.4-7.4.i386.rpm RedHat kernel-uml-2.4.18-14.i686.rpm RedHat kernel-source-2.4.7-10.i386.rpm RedHat kernel-source-2.4.20-8.i386.rpm RedHat kernel-source-2.4.2-2.i386.rpm RedHat kernel-source-2.4.18-3.i386.rpm RedHat kernel-source-2.4.18-14.i386.rpm RedHat kernel-smp-2.4.7-10.i686.rpm RedHat kernel-smp-2.4.7-10.i586.rpm RedHat kernel-smp-2.4.7-10.athlon.rpm RedHat kernel-smp-2.4.20-8.i686.rpm RedHat kernel-smp-2.4.20-8.athlon.rpm RedHat kernel-smp-2.4.2-2.i686.rpm RedHat kernel-smp-2.4.2-2.i586.rpm RedHat kernel-smp-2.4.18-3.i686.rpm RedHat kernel-smp-2.4.18-3.i586.rpm RedHat kernel-smp-2.4.18-3.athlon.rpm RedHat kernel-smp-2.4.18-14.i686.rpm RedHat kernel-smp-2.4.18-14.athlon.rpm RedHat kernel-headers-2.4.7-10.i386.rpm RedHat kernel-headers-2.4.2-2.i386.rpm RedHat kernel-enterprise-2.4.2-2.i686.rpm RedHat kernel-doc-2.4.7-10.i386.rpm RedHat kernel-doc-2.4.20-8.i386.rpm RedHat kernel-doc-2.4.2-2.i386.rpm RedHat kernel-doc-2.4.18-3.i386.rpm RedHat kernel-doc-2.4.18-14.i386.rpm RedHat kernel-debug-2.4.18-3.i686.rpm RedHat kernel-debug-2.4.18-14.i686.rpm RedHat kernel-BOOT-2.4.7-10.i386.rpm RedHat kernel-BOOT-2.4.20-8.i386.rpm RedHat kernel-BOOT-2.4.2-2.i386.rpm RedHat kernel-BOOT-2.4.18-3.i386.rpm RedHat kernel-BOOT-2.4.18-14.i386.rpm RedHat kernel-bigmem-2.4.20-8.i686.rpm RedHat kernel-bigmem-2.4.18-3.i686.rpm RedHat kernel-bigmem-2.4.18-14.i686.rpm RedHat kernel-2.4.7-10.i686.rpm RedHat kernel-2.4.7-10.i386.rpm RedHat kernel-2.4.7-10.athlon.rpm RedHat kernel-2.4.20-8.i686.rpm RedHat kernel-2.4.20-8.i586.rpm RedHat kernel-2.4.20-8.athlon.rpm RedHat kernel-2.4.2-2.i686.rpm RedHat kernel-2.4.2-2.i586.rpm RedHat kernel-2.4.2-2.i386.rpm RedHat kernel-2.4.18-3.i686.rpm RedHat kernel-2.4.18-3.i386.rpm RedHat kernel-2.4.18-3.athlon.rpm RedHat kernel-2.4.18-14.i686.rpm RedHat kernel-2.4.18-14.i586.rpm RedHat kernel-2.4.18-14.athlon.rpm RedHat Enterprise Linux WS 2.1 RedHat Enterprise Linux ES 2.1 Red Hat Enterprise Linux AS 2.1 Mandriva Linux Mandrake 9.1 ppc Mandriva Linux Mandrake 9.1 Mandriva Linux Mandrake 9.0 Mandriva Linux Mandrake 8.2 ppc Mandriva Linux Mandrake 8.2 MandrakeSoft Multi Network Firewall 2.0 MandrakeSoft Corporate Server 2.1 Linux kernel 2.5.69 Linux kernel 2.5.68 Linux kernel 2.5.67 Linux kernel 2.5.66 Linux kernel 2.5.65 Linux kernel 2.5.64 Linux kernel 2.5.63 Linux kernel 2.5.62 Linux kernel 2.5.61 Linux kernel 2.5.60 Linux kernel 2.5.59 Linux kernel 2.5.58 Linux kernel 2.5.57 Linux kernel 2.5.56 Linux kernel 2.5.55 Linux kernel 2.5.54 Linux kernel 2.5.53 Linux kernel 2.5.52 Linux kernel 2.5.51 Linux kernel 2.5.50 Linux kernel 2.5.49 Linux kernel 2.5.48 Linux kernel 2.5.47 Linux kernel 2.5.46 Linux kernel 2.5.45 Linux kernel 2.5.44 Linux kernel 2.5.43 Linux kernel 2.5.42 Linux kernel 2.5.41 Linux kernel 2.5.40 Linux kernel 2.5.39 Linux kernel 2.5.38 Linux kernel 2.5.37 Linux kernel 2.5.36 Linux kernel 2.5.35 Linux kernel 2.5.34 Linux kernel 2.5.33 Linux kernel 2.5.32 Linux kernel 2.5.31 Linux kernel 2.5.30 Linux kernel 2.5.29 Linux kernel 2.5.28 Linux kernel 2.5.27 Linux kernel 2.5.26 Linux kernel 2.5.25 Linux kernel 2.5.24 Linux kernel 2.5.23 Linux kernel 2.5.22 Linux kernel 2.5.21 Linux kernel 2.5.20 Linux kernel 2.5.19 Linux kernel 2.5.18 Linux kernel 2.5.17 Linux kernel 2.5.16 Linux kernel 2.5.15 Linux kernel 2.5.14 Linux kernel 2.5.13 Linux kernel 2.5.12 Linux kernel 2.5.11 Linux kernel 2.5.10 Linux kernel 2.5.9 Linux kernel 2.5.8 Linux kernel 2.5.7 Linux kernel 2.5.6 Linux kernel 2.5.5 Linux kernel 2.5.4 Linux kernel 2.5.3 Linux kernel 2.5.2 Linux kernel 2.5.1 Linux kernel 2.5 .0 Linux kernel 2.4.21 pre4 Linux kernel 2.4.21 pre1 Linux kernel 2.4.20 Linux kernel 2.4.19 -pre6 Linux kernel 2.4.19 -pre5 Linux kernel 2.4.19 -pre4 Linux kernel 2.4.19 -pre3 Linux kernel 2.4.19 -pre2 Linux kernel 2.4.19 -pre1 Linux kernel 2.4.19 Linux kernel 2.4.18 pre-8 Linux kernel 2.4.18 pre-7 Linux kernel 2.4.18 pre-6 Linux kernel 2.4.18 pre-5 Linux kernel 2.4.18 pre-4 Linux kernel 2.4.18 pre-3 Linux kernel 2.4.18 pre-2 Linux kernel 2.4.18 pre-1 Linux kernel 2.4.18 x86 Linux kernel 2.4.18 Linux kernel 2.4.17 Linux kernel 2.4.16 Linux kernel 2.4.15 Linux kernel 2.4.14 Linux kernel 2.4.13 Linux kernel 2.4.12 Linux kernel 2.4.11 Linux kernel 2.4.10 Linux kernel 2.4.9 Linux kernel 2.4.8 Linux kernel 2.4.7 Linux kernel 2.4.6 Linux kernel 2.4.5 Linux kernel 2.4.4 Linux kernel 2.4.3 Linux kernel 2.4.2 Linux kernel 2.4.1 Linux kernel 2.4 .0-test9 Linux kernel 2.4 .0-test8 Linux kernel 2.4 .0-test7 Linux kernel 2.4 .0-test6 Linux kernel 2.4 .0-test5 Linux kernel 2.4 .0-test4 Linux kernel 2.4 .0-test3 Linux kernel 2.4 .0-test2 Linux kernel 2.4 .0-test12 Linux kernel 2.4 .0-test11 Linux kernel 2.4 .0-test10 Linux kernel 2.4 .0-test1 Linux kernel 2.4 Linux kernel 2.3.99 -pre7 Linux kernel 2.3.99 -pre6 Linux kernel 2.3.99 -pre5 Linux kernel 2.3.99 -pre4 Linux kernel 2.3.99 -pre3 Linux kernel 2.3.99 -pre2 Linux kernel 2.3.99 -pre1 Linux kernel 2.3.99 Linux kernel 2.3 .x Linux kernel 2.3 Linux kernel 2.2.25 Linux kernel 2.2.24 Linux kernel 2.2.23 Linux kernel 2.2.22 Linux kernel 2.2.21 Linux kernel 2.2.20 Linux kernel 2.2.19 Linux kernel 2.2.18 Linux kernel 2.2.17 Linux kernel 2.2.16 pre6 Linux kernel 2.2.16 Linux kernel 2.2.15 pre20 Linux kernel 2.2.15 pre16 Linux kernel 2.2.15 Linux kernel 2.2.14 Linux kernel 2.2.13 Linux kernel 2.2.12 Linux kernel 2.2.11 Linux kernel 2.2.10 Linux kernel 2.2.9 Linux kernel 2.2.8 Linux kernel 2.2.7 Linux kernel 2.2.6 Linux kernel 2.2.5 Linux kernel 2.2.4 Linux kernel 2.2.3 Linux kernel 2.2.2 Linux kernel 2.2.1 Linux kernel 2.2 .x Linux kernel 2.2 Linux kernel 2.1.89 Linux kernel 2.1 .x Linux kernel 2.1 Linux kernel 2.0.39 Linux kernel 2.0.38 Linux kernel 2.0.37 Linux kernel 2.0.36 Linux kernel 2.0.35 Linux kernel 2.0.34 Linux kernel 2.0.33 Linux kernel 2.0.32 Linux kernel 2.0.31 Linux kernel 2.0.30 Linux kernel 2.0.29 Linux kernel 2.0.28 Linux kernel 2.0.27 Linux kernel 2.0.26 Linux kernel 2.0.25 Linux kernel 2.0.24 Linux kernel 2.0.23 Linux kernel 2.0.22 Linux kernel 2.0.21 Linux kernel 2.0.20 Linux kernel 2.0.19 Linux kernel 2.0.18 Linux kernel 2.0.17 Linux kernel 2.0.16 Linux kernel 2.0.15 Linux kernel 2.0.14 Linux kernel 2.0.13 Linux kernel 2.0.12 Linux kernel 2.0.11 Linux kernel 2.0.10 Linux kernel 2.0.9 Linux kernel 2.0.8 Linux kernel 2.0.7 Linux kernel 2.0.6 Linux kernel 2.0.5 Linux kernel 2.0.4 Linux kernel 2.0.3 Linux kernel 2.0.2 Linux kernel 2.0.1 Linux kernel 2.0 .x Linux kernel 2.0 Leif M. Wright simplestmail.cgi 2.2.18 Leif M. Wright simplestmail.cgi 2.0.22 |
| Not Vulnerable: | |
Discussion
Linux TTY Layer Kernel Panic Denial Of Service Vulnerability
A vulnerability has been reported in the TTY layer that may result in a kernel panic.
The precise technical details of this vulnerability are currently unknown. This BID will be updated as further information is available.
A vulnerability has been reported in the TTY layer that may result in a kernel panic.
The precise technical details of this vulnerability are currently unknown. This BID will be updated as further information is available.
Exploit / POC
Linux TTY Layer Kernel Panic Denial Of Service Vulnerability
Currently we are not aware of any exploits for this issue. If you feel we are in error or are aware of more recent information, please mail us at: [email protected] <mailto:[email protected]>.
Currently we are not aware of any exploits for this issue. If you feel we are in error or are aware of more recent information, please mail us at: [email protected] <mailto:[email protected]>.
Solution / Fix
Linux TTY Layer Kernel Panic Denial Of Service Vulnerability
Solution:
Mandrake Linux have released a security advisory (MDKSA-2003:074) to address this issue. Further details regarding downloading and applying these fixes can be found in the referenced advisory. Fixes are linked below.
Mandrake has issued a kernel upgrade that is patched. Please see the advisory linked to in the reference section (MDKSA-2003:066) for further information.
Red Hat Linux has released an advisory RHSA-2003:187-01 and RHSA-2003:195-06. RHBA-2003:263-05 (for non-Enterprise Red Hat distributions) has been released to address unrelated bugs but provides Kernel updates that include more recent fixes for this and other security vulnerabilities.
Debian has issued a kernel upgrade that is patched. Please see the advisories linked to in the reference section (DSA-311-1 and DSA 312-1) for URLs to fixes.
Red Hat Linux has released a new advisory . Fixes are available through the Red Hat Network. Affected users are advised to upgrade.
Debian has released a new advisory DSA 332-1. Information about obtaining and applying fixes are available in the referenced advisory.
Debian has announced in DSA 336-2 that advisory DSA 336-1 does not address this issue.
Guardian Digital has released advisory ESA-20032407-018 for EnGarde Secure Linux. See referenced advisory for additonal details.
Conectiva has released advisory CLA-2003:701 to address this issue. See referenced advisory for additional details and fix information.
Red Hat has released an advisory (RHSA-2003:198-16) containing updated IA64 fixes for Red Hat Enterprise Linux AS (v. 2.1) and Red Hat Linux Advanced Workstation 2.1 for the Itanium Processor. These fixes are only available through the Red Hat Network which can be found at http://rhn.redhat.com/.
Conectiva has released a security advisory (CLA-2003:796) containing fixes to address this issue in Conectiva Linux 8.
Debian has released DSA 442-1 to provide fixes for s390 platforms. Please see the attached advisory for further information.
Redhat kernel-bigmem-2.4.18-14.i686.rpm
Redhat kernel-2.4.20-8.athlon.rpm
Redhat kernel-source-2.4.2-2.i386.rpm
Redhat kernel-2.4.20-8.i586.rpm
Redhat kernel-2.4.7-10.i686.rpm
Redhat kernel-bigmem-2.4.20-8.i686.rpm
Redhat kernel-source-2.4.20-8.i386.rpm
Redhat kernel-2.4.18-3.athlon.rpm
Redhat kernel-source-2.4.7-10.i386.rpm
Redhat kernel-BOOT-2.4.18-14.i386.rpm
Redhat kernel-2.4.2-2.i686.rpm
Redhat kernel-BOOT-2.4.7-10.i386.rpm
Mandriva Linux Mandrake 8.2
Mandriva Linux Mandrake 9.1
Solution:
Mandrake Linux have released a security advisory (MDKSA-2003:074) to address this issue. Further details regarding downloading and applying these fixes can be found in the referenced advisory. Fixes are linked below.
Mandrake has issued a kernel upgrade that is patched. Please see the advisory linked to in the reference section (MDKSA-2003:066) for further information.
Red Hat Linux has released an advisory RHSA-2003:187-01 and RHSA-2003:195-06. RHBA-2003:263-05 (for non-Enterprise Red Hat distributions) has been released to address unrelated bugs but provides Kernel updates that include more recent fixes for this and other security vulnerabilities.
Debian has issued a kernel upgrade that is patched. Please see the advisories linked to in the reference section (DSA-311-1 and DSA 312-1) for URLs to fixes.
Red Hat Linux has released a new advisory . Fixes are available through the Red Hat Network. Affected users are advised to upgrade.
Debian has released a new advisory DSA 332-1. Information about obtaining and applying fixes are available in the referenced advisory.
Debian has announced in DSA 336-2 that advisory DSA 336-1 does not address this issue.
Guardian Digital has released advisory ESA-20032407-018 for EnGarde Secure Linux. See referenced advisory for additonal details.
Conectiva has released advisory CLA-2003:701 to address this issue. See referenced advisory for additional details and fix information.
Red Hat has released an advisory (RHSA-2003:198-16) containing updated IA64 fixes for Red Hat Enterprise Linux AS (v. 2.1) and Red Hat Linux Advanced Workstation 2.1 for the Itanium Processor. These fixes are only available through the Red Hat Network which can be found at http://rhn.redhat.com/.
Conectiva has released a security advisory (CLA-2003:796) containing fixes to address this issue in Conectiva Linux 8.
Debian has released DSA 442-1 to provide fixes for s390 platforms. Please see the attached advisory for further information.
Redhat kernel-bigmem-2.4.18-14.i686.rpm
-
Red Hat kernel-bigmem-2.4.20-20.8.i686.rpm
ftp://updates.redhat.com/8.0/en/os/i686/kernel-bigmem-2.4.20-20.8.i686 .rpm
Redhat kernel-2.4.20-8.athlon.rpm
-
Red Hat kernel-2.4.20-20.9.athlon.rpm
ftp://updates.redhat.com/9/en/os/athlon/kernel-2.4.20-20.9.athlon.rpm
Redhat kernel-source-2.4.2-2.i386.rpm
-
Red Hat kernel-source-2.4.20-20.7.i386.rpm
ftp://updates.redhat.com/7.1/en/os/i386/kernel-source-2.4.20-20.7.i386 .rpm
Redhat kernel-2.4.20-8.i586.rpm
-
Red Hat kernel-2.4.20-20.9.i386.rpm
ftp://updates.redhat.com/9/en/os/i386/kernel-2.4.20-20.9.i386.rpm -
Red Hat kernel-2.4.20-20.9.i586.rpm
ftp://updates.redhat.com/9/en/os/i586/kernel-2.4.20-20.9.i586.rpm
Redhat kernel-2.4.7-10.i686.rpm
-
Red Hat kernel-2.4.20-20.7.i686.rpm
ftp://updates.redhat.com/7.2/en/os/i686/kernel-2.4.20-20.7.i686.rpm -
Red Hat kernel-bigmem-2.4.20-20.7.i686.rpm
ftp://updates.redhat.com/7.2/en/os/i686/kernel-bigmem-2.4.20-20.7.i686 .rpm
Redhat kernel-bigmem-2.4.20-8.i686.rpm
-
Red Hat kernel-bigmem-2.4.20-20.9.i686.rpm
ftp://updates.redhat.com/9/en/os/i686/kernel-bigmem-2.4.20-20.9.i686.r pm
Redhat kernel-source-2.4.20-8.i386.rpm
-
Red Hat kernel-source-2.4.20-20.9.i386.rpm
ftp://updates.redhat.com/9/en/os/i386/kernel-source-2.4.20-20.9.i386.r pm
Redhat kernel-2.4.18-3.athlon.rpm
-
Red Hat kernel-2.4.20-20.7.athlon.rpm
ftp://updates.redhat.com/7.3/en/os/athlon/kernel-2.4.20-20.7.athlon.rp m
Redhat kernel-source-2.4.7-10.i386.rpm
-
Red Hat kernel-source-2.4.20-20.7.i386.rpm
ftp://updates.redhat.com/7.2/en/os/i386/kernel-source-2.4.20-20.7.i386 .rpm
Redhat kernel-BOOT-2.4.18-14.i386.rpm
-
Red Hat kernel-BOOT-2.4.20-20.8.i386.rpm
ftp://updates.redhat.com/8.0/en/os/i386/kernel-BOOT-2.4.20-20.8.i386.r pm
Redhat kernel-2.4.2-2.i686.rpm
-
Red Hat kernel-2.4.20-20.7.i686.rpm
ftp://updates.redhat.com/7.1/en/os/i686/kernel-2.4.20-20.7.i686.rpm -
Red Hat kernel-bigmem-2.4.20-20.7.i686.rpm
ftp://updates.redhat.com/7.1/en/os/i686/kernel-bigmem-2.4.20-20.7.i686 .rpm
Redhat kernel-BOOT-2.4.7-10.i386.rpm
-
Red Hat kernel-BOOT-2.4.20-20.7.i386.rpm
ftp://updates.redhat.com/7.2/en/os/i386/kernel-BOOT-2.4.20-20.7.i386.r pm
Mandriva Linux Mandrake 8.2
-
Mandrake kernel-2.4.19.35mdk-1-1mdk.i586.rpm
Mandrake Linux 8.28.2/RPMS/kernel-2.4.19.35mdk-1-1mdk.i586.rpm
http://www.mandrakesecure.net/en/ftp.php -
Mandrake kernel-2.4.19.35mdk-1-1mdk.src.rpm
Mandrake Linux 8.28.2/SRPMS/kernel-2.4.19.35mdk-1-1mdk.src.rpm
http://www.mandrakesecure.net/en/ftp.php -
Mandrake kernel-BOOT-2.4.19.35mdk-1-1mdk.i586.rpm
Mandrake Linux 8.28.2/RPMS/kernel-BOOT-2.4.19.35mdk-1-1mdk.i586.rpm
http://www.mandrakesecure.net/en/ftp.php -
Mandrake kernel-doc-2.4.19-35mdk.i586.rpm
Mandrake Linux 8.28.2/RPMS/kernel-doc-2.4.19-35mdk.i586.rpm
http://www.mandrakesecure.net/en/ftp.php -
Mandrake kernel-enterprise-2.4.19.35mdk-1-1mdk.i586.rpm
Mandrake Linux 8.28.2/RPMS/kernel-enterprise-2.4.19.35mdk-1-1mdk.i586.rpm
http://www.mandrakesecure.net/en/ftp.php -
Mandrake kernel-secure-2.4.19.35mdk-1-1mdk.i586.rpm
Mandrake Linux 8.28.2/RPMS/kernel-secure-2.4.19.35mdk-1-1mdk.i586.rpm
http://www.mandrakesecure.net/en/ftp.php -
Mandrake kernel-smp-2.4.19.35mdk-1-1mdk.i586.rpm
Mandrake Linux 8.28.2/RPMS/kernel-smp-2.4.19.35mdk-1-1mdk.i586.rpm
http://www.mandrakesecure.net/en/ftp.php -
Mandrake kernel-source-2.4.19-35mdk.i586.rpm
Mandrake Linux 8.28.2/RPMS/kernel-source-2.4.19-35mdk.i586.rpm
http://www.mandrakesecure.net/en/ftp.php
Mandriva Linux Mandrake 9.1
-
Mandrake kernel-2.4.21.0.24mdk-1-1mdk.i586.rpm
http://www.mandrakesecure.net/en/ftp.php -
Mandrake kernel-BOOT-2.4.21.0.25mdk-1-1mdk.i586.rpm
http://www.mandrakesecure.net/en/ftp.php -
Mandrake kernel-doc-2.4.21-0.25mdk.i586.rpm
http://www.mandrakesecure.net/en/ftp.php -
Mandrake kernel-enterprise-2.4.21.0.25mdk-1-1mdk.i586.rpm
http://www.mandrakesecure.net/en/ftp.php -
Mandrake kernel-secure-2.4.21.0.24mdk-1-1mdk.i586.rpm
http://www.mandrakesecure.net/en/ftp.php -
Mandrake kernel-smp-2.4.21.0.24mdk-1-1mdk.i586.rpm
http://www.mandrakesecure.net/en/ftp.php -
Mandrake kernel-source-2.4.21-0.25mdk.i586.rpm
http://www.mandrakesecure.net/en/ftp.php
References
Linux TTY Layer Kernel Panic Denial Of Service Vulnerability
References:
References: