Red Hat Linux 2.4 Kernel Multiple Potential Vulnerabilities
BID:9284
Info
Red Hat Linux 2.4 Kernel Multiple Potential Vulnerabilities
| Bugtraq ID: | 9284 |
| Class: | Unknown |
| CVE: | |
| Remote: | No |
| Local: | Yes |
| Published: | Dec 23 2003 12:00AM |
| Updated: | Dec 23 2003 12:00AM |
| Credit: | These issues were announced by the vendor. |
| Vulnerable: |
Redhat kernel-2.4.7-10.i686.rpm Redhat kernel-2.4.7-10.i386.rpm Redhat kernel-2.4.7-10.athlon.rpm Redhat kernel-2.4.20-8.i686.rpm Redhat kernel-2.4.20-8.i586.rpm Redhat kernel-2.4.20-8.athlon.rpm Redhat kernel-2.4.2-2.i686.rpm Redhat kernel-2.4.2-2.i586.rpm Redhat kernel-2.4.2-2.i386.rpm Redhat kernel-2.4.18-3.i686.rpm Redhat kernel-2.4.18-3.i386.rpm Redhat kernel-2.4.18-3.athlon.rpm Redhat kernel-2.4.18-14.i686.rpm Redhat kernel-2.4.18-14.i586.rpm Redhat kernel-2.4.18-14.athlon.rpm Linux kernel 2.4.20 |
| Not Vulnerable: | |
Discussion
Red Hat Linux 2.4 Kernel Multiple Potential Vulnerabilities
Red Hat Linux has released a 2.4 Kernel update to fix multiple potential security issues. Other non-security related issues were also addresses in this upgrade.
The issues are as follows:
Red Hat has reported that ioctls of several RTC drivers have been fixed to prevent potential data leaks. This may be related to BID 9154.
A previous kernel upgrade may have caused certain "--reject-with tcp-reset" IPTABLES rules to malfunction.
Initiating certain bonding interfaces may trigger a kernel panic.
Red Hat Linux has released a 2.4 Kernel update to fix multiple potential security issues. Other non-security related issues were also addresses in this upgrade.
The issues are as follows:
Red Hat has reported that ioctls of several RTC drivers have been fixed to prevent potential data leaks. This may be related to BID 9154.
A previous kernel upgrade may have caused certain "--reject-with tcp-reset" IPTABLES rules to malfunction.
Initiating certain bonding interfaces may trigger a kernel panic.
Exploit / POC
Red Hat Linux 2.4 Kernel Multiple Potential Vulnerabilities
Currently we are not aware of any exploits for this issue. If you feel we are in error or are aware of more recent information, please mail us at: [email protected] <mailto:[email protected]>.
Currently we are not aware of any exploits for this issue. If you feel we are in error or are aware of more recent information, please mail us at: [email protected] <mailto:[email protected]>.
Solution / Fix
Red Hat Linux 2.4 Kernel Multiple Potential Vulnerabilities
Solution:
Red Hat has released an advisory (RHBA-2003:394-01) and updates to address these issues as well as other non-security related issues. Users are advised to apply updates as soon as possible. Further information relating to obtaining and applying updates can be found in the referenced advisory.
Solution:
Red Hat has released an advisory (RHBA-2003:394-01) and updates to address these issues as well as other non-security related issues. Users are advised to apply updates as soon as possible. Further information relating to obtaining and applying updates can be found in the referenced advisory.
References
Red Hat Linux 2.4 Kernel Multiple Potential Vulnerabilities
References:
References: