Linux Kernel execve() Malformed ELF File Unspecified Local Denial Of Service Vulnerability
BID:9695
Info
Linux Kernel execve() Malformed ELF File Unspecified Local Denial Of Service Vulnerability
| Bugtraq ID: | 9695 |
| Class: | Failure to Handle Exceptional Conditions |
| CVE: | |
| Remote: | No |
| Local: | Yes |
| Published: | Feb 18 2004 12:00AM |
| Updated: | Feb 18 2004 12:00AM |
| Credit: | Disclosure of this issue was announced in the referenced SuSE advisory. |
| Vulnerable: |
Linux kernel 2.4.24 -ow1 Linux kernel 2.4.24 Linux kernel 2.4.23 -pre9 Linux kernel 2.4.23 -ow2 Linux kernel 2.4.23 Linux kernel 2.4.22 Linux kernel 2.4.21 pre7 Linux kernel 2.4.21 pre4 Linux kernel 2.4.21 pre1 Linux kernel 2.4.21 Linux kernel 2.4.20 Linux kernel 2.4.19 -pre6 Linux kernel 2.4.19 -pre5 Linux kernel 2.4.19 -pre4 Linux kernel 2.4.19 -pre3 Linux kernel 2.4.19 -pre2 Linux kernel 2.4.19 -pre1 Linux kernel 2.4.19 Linux kernel 2.4.18 pre-8 Linux kernel 2.4.18 pre-7 Linux kernel 2.4.18 pre-6 Linux kernel 2.4.18 pre-5 Linux kernel 2.4.18 pre-4 Linux kernel 2.4.18 pre-3 Linux kernel 2.4.18 pre-2 Linux kernel 2.4.18 pre-1 Linux kernel 2.4.18 x86 Linux kernel 2.4.18 Linux kernel 2.4.17 Linux kernel 2.4.16 Linux kernel 2.4.15 Linux kernel 2.4.14 Linux kernel 2.4.13 Linux kernel 2.4.12 Linux kernel 2.4.11 Linux kernel 2.4.10 Linux kernel 2.4.9 Linux kernel 2.4.8 Linux kernel 2.4.7 Linux kernel 2.4.6 Linux kernel 2.4.5 Linux kernel 2.4.4 Linux kernel 2.4.3 Linux kernel 2.4.2 Linux kernel 2.4.1 Linux kernel 2.4 .0-test9 Linux kernel 2.4 .0-test8 Linux kernel 2.4 .0-test7 Linux kernel 2.4 .0-test6 Linux kernel 2.4 .0-test5 Linux kernel 2.4 .0-test4 Linux kernel 2.4 .0-test3 Linux kernel 2.4 .0-test2 Linux kernel 2.4 .0-test12 Linux kernel 2.4 .0-test11 Linux kernel 2.4 .0-test10 Linux kernel 2.4 .0-test1 Linux kernel 2.4 |
| Not Vulnerable: | |
Discussion
Linux Kernel execve() Malformed ELF File Unspecified Local Denial Of Service Vulnerability
It has been reported that the linux kernel is prone to a local denial of service vulnerability due to an inability of the exceve() system function to handle exceptional conditions. The immediate consequences of this issue may allow an attacker to cause the Linux kernel to fail, denying service to legitimate users. This issue could be triggered with a malformed ELF (Executable Linking Format) binary.
It has been reported that the linux kernel is prone to a local denial of service vulnerability due to an inability of the exceve() system function to handle exceptional conditions. The immediate consequences of this issue may allow an attacker to cause the Linux kernel to fail, denying service to legitimate users. This issue could be triggered with a malformed ELF (Executable Linking Format) binary.
Exploit / POC
Linux Kernel execve() Malformed ELF File Unspecified Local Denial Of Service Vulnerability
Currently we are not aware of any exploits for this issue. If you feel we are in error or are aware of more recent information, please mail us at: [email protected] <mailto:[email protected]>.
Currently we are not aware of any exploits for this issue. If you feel we are in error or are aware of more recent information, please mail us at: [email protected] <mailto:[email protected]>.
Solution / Fix
Linux Kernel execve() Malformed ELF File Unspecified Local Denial Of Service Vulnerability
Solution:
SuSE has released advisory SA:2004:005 dealing with this issue. Please see the referenced advisory for more information.
Linux kernel 2.4.20
Linux kernel 2.4.21
Solution:
SuSE has released advisory SA:2004:005 dealing with this issue. Please see the referenced advisory for more information.
Linux kernel 2.4.20
-
SuSE k_athlon-2.4.20-105.i586.rpm
Intel i386 Platform
ftp://ftp.suse.com/pub/suse/i386/update/8.2/rpm/i586/k_athlon-2.4.20-1 05.i586.rpm -
SuSE k_deflt-2.4.20-105.i586.rpm
Intel i386 Platform
ftp://ftp.suse.com/pub/suse/i386/update/8.2/rpm/i586/k_deflt-2.4.20-10 5.i586.rpm -
SuSE k_psmp-2.4.20-105.i586.rpm
Intel i386 Platform
ftp://ftp.suse.com/pub/suse/i386/update/8.2/rpm/i586/k_psmp-2.4.20-105 .i586.rpm -
SuSE k_smp-2.4.20-105.i586.rpm
Intel i386 Platform
ftp://ftp.suse.com/pub/suse/i386/update/8.2/rpm/i586/k_smp-2.4.20-105. i586.rpm
Linux kernel 2.4.21
-
SuSE k_athlon-2.4.21-189.i586.rpm
Intel i386 Platform/SuSE 8.1
ftp://ftp.suse.com/pub/suse/i386/update/8.1/rpm/i586/k_athlon-2.4.21-1 89.i586.rpm -
SuSE k_athlon-2.4.21-192.i586.rpm
Intel i386 Platform
ftp://ftp.suse.com/pub/suse/i386/update/9.0/rpm/i586/k_athlon-2.4.21-1 92.i586.rpm -
SuSE k_deflt-2.4.21-189.i586.rpm
Intel i386 Platform/SuSE 8.1
ftp://ftp.suse.com/pub/suse/i386/update/8.1/rpm/i586/k_deflt-2.4.21-18 9.i586.rpm -
SuSE k_deflt-2.4.21-192.i586.rpm
Intel i386 Platform
ftp://ftp.suse.com/pub/suse/i386/update/9.0/rpm/i586/k_deflt-2.4.21-19 2.i586.rpm -
SuSE k_deflt-2.4.21-201.x86_64.rpm
x86_64/SuSE 9.0
ftp://ftp.suse.com/pub/suse/x86_64/update/9.0/rpm/x86_64/k_deflt-2.4.2 1-201.x86_64.rpm -
SuSE k_psmp-2.4.21-189.i586.rpm
Intel i386 Platform/SuSE 8.1
ftp://ftp.suse.com/pub/suse/i386/update/8.1/rpm/i586/k_psmp-2.4.21-189 .i586.rpm -
SuSE k_smp-2.4.21-189.i586.rpm
Intel i386 Platform/SuSE 8.1
ftp://ftp.suse.com/pub/suse/i386/update/8.1/rpm/i586/k_smp-2.4.21-189. i586.rpm -
SuSE k_smp-2.4.21-192.i586.rpm
Intel i386 Platform
ftp://ftp.suse.com/pub/suse/i386/update/9.0/rpm/i586/k_smp-2.4.21-192. i586.rpm -
SuSE k_smp-2.4.21-201.x86_64.rpm
x86_64/SuSE 9.0
ftp://ftp.suse.com/pub/suse/x86_64/update/9.0/rpm/x86_64/k_smp-2.4.21- 201.x86_64.rpm -
SuSE k_smp4G-2.4.21-192.i586.rpm
Intel i386 Platform
ftp://ftp.suse.com/pub/suse/i386/update/9.0/rpm/i586/k_smp4G-2.4.21-19 2.i586.rpm -
SuSE k_um-2.4.21-192.i586.rpm
Intel i386 Platform
ftp://ftp.suse.com/pub/suse/i386/update/9.0/rpm/i586/k_um-2.4.21-192.i 586.rpm
References
Linux Kernel execve() Malformed ELF File Unspecified Local Denial Of Service Vulnerability
References:
References: