CVE-2004-0077

The do_mremap function for the mremap system call in Linux 2.2 to 2.2.25, 2.4 to 2.4.24, and 2.6 to 2.6.2, does not properly check the return value from the do_munmap function when the maximum number of VMA descriptors is exceeded, which allows local users to gain root privileges, a different vulnerability than CAN-2003-0985.
References
Link Resource
http://archives.neohapsis.com/archives/vulnwatch/2004-q1/0040.html
http://distro.conectiva.com.br/atualizacoes/?id=a&anuncio=000820
http://fedoranews.org/updates/FEDORA-2004-079.shtml
http://frontal2.mandriva.com/security/advisories?name=MDKSA-2004:015
http://isec.pl/vulnerabilities/isec-0014-mremap-unmap.txt
http://marc.info/?l=bugtraq&m=107711762014175&w=2
http://marc.info/?l=bugtraq&m=107712137732553&w=2
http://marc.info/?l=bugtraq&m=107755871932680&w=2
http://security.gentoo.org/glsa/glsa-200403-02.xml Patch Vendor Advisory
http://www.ciac.org/ciac/bulletins/o-082.shtml
http://www.debian.org/security/2004/dsa-438
http://www.debian.org/security/2004/dsa-439 Patch Vendor Advisory
http://www.debian.org/security/2004/dsa-440
http://www.debian.org/security/2004/dsa-441
http://www.debian.org/security/2004/dsa-442
http://www.debian.org/security/2004/dsa-444
http://www.debian.org/security/2004/dsa-450
http://www.debian.org/security/2004/dsa-453
http://www.debian.org/security/2004/dsa-454
http://www.debian.org/security/2004/dsa-456
http://www.debian.org/security/2004/dsa-466
http://www.debian.org/security/2004/dsa-470
http://www.debian.org/security/2004/dsa-475
http://www.debian.org/security/2004/dsa-514
http://www.kb.cert.org/vuls/id/981222 US Government Resource
http://www.novell.com/linux/security/advisories/2004_05_linux_kernel.html
http://www.osvdb.org/3986
http://www.redhat.com/support/errata/RHSA-2004-065.html
http://www.redhat.com/support/errata/RHSA-2004-066.html
http://www.redhat.com/support/errata/RHSA-2004-069.html
http://www.redhat.com/support/errata/RHSA-2004-106.html
http://www.securityfocus.com/bid/9686 Exploit Patch Vendor Advisory
http://www.slackware.com/security/viewer.php?l=slackware-security&y=2004&m=slackware-security.404734
https://exchange.xforce.ibmcloud.com/vulnerabilities/15244
https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A825
https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A837
http://archives.neohapsis.com/archives/vulnwatch/2004-q1/0040.html
http://distro.conectiva.com.br/atualizacoes/?id=a&anuncio=000820
http://fedoranews.org/updates/FEDORA-2004-079.shtml
http://frontal2.mandriva.com/security/advisories?name=MDKSA-2004:015
http://isec.pl/vulnerabilities/isec-0014-mremap-unmap.txt
http://marc.info/?l=bugtraq&m=107711762014175&w=2
http://marc.info/?l=bugtraq&m=107712137732553&w=2
http://marc.info/?l=bugtraq&m=107755871932680&w=2
http://security.gentoo.org/glsa/glsa-200403-02.xml Patch Vendor Advisory
http://www.ciac.org/ciac/bulletins/o-082.shtml
http://www.debian.org/security/2004/dsa-438
http://www.debian.org/security/2004/dsa-439 Patch Vendor Advisory
http://www.debian.org/security/2004/dsa-440
http://www.debian.org/security/2004/dsa-441
http://www.debian.org/security/2004/dsa-442
http://www.debian.org/security/2004/dsa-444
http://www.debian.org/security/2004/dsa-450
http://www.debian.org/security/2004/dsa-453
http://www.debian.org/security/2004/dsa-454
http://www.debian.org/security/2004/dsa-456
http://www.debian.org/security/2004/dsa-466
http://www.debian.org/security/2004/dsa-470
http://www.debian.org/security/2004/dsa-475
http://www.debian.org/security/2004/dsa-514
http://www.kb.cert.org/vuls/id/981222 US Government Resource
http://www.novell.com/linux/security/advisories/2004_05_linux_kernel.html
http://www.osvdb.org/3986
http://www.redhat.com/support/errata/RHSA-2004-065.html
http://www.redhat.com/support/errata/RHSA-2004-066.html
http://www.redhat.com/support/errata/RHSA-2004-069.html
http://www.redhat.com/support/errata/RHSA-2004-106.html
http://www.securityfocus.com/bid/9686 Exploit Patch Vendor Advisory
http://www.slackware.com/security/viewer.php?l=slackware-security&y=2004&m=slackware-security.404734
https://exchange.xforce.ibmcloud.com/vulnerabilities/15244
https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A825
https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A837
Configurations

Configuration 1 (hide)

OR cpe:2.3:a:redhat:bigmem_kernel:2.4.20-8:*:i686:*:*:*:*:*
cpe:2.3:a:redhat:kernel:2.4.20-8:*:athlon_smp:*:*:*:*:*
cpe:2.3:a:redhat:kernel:2.4.20-8:*:i386:*:*:*:*:*
cpe:2.3:a:redhat:kernel:2.4.20-8:*:i686_smp:*:*:*:*:*
cpe:2.3:a:redhat:kernel_doc:2.4.20-8:*:i386:*:*:*:*:*

Configuration 2 (hide)

AND
OR cpe:2.3:a:redhat:kernel_source:2.4.20-8:*:i386_src:*:*:*:*:*
cpe:2.3:o:linux:linux_kernel:2.2.0:*:*:*:*:*:*:*
cpe:2.3:o:linux:linux_kernel:2.2.1:*:*:*:*:*:*:*
cpe:2.3:o:linux:linux_kernel:2.2.2:*:*:*:*:*:*:*
cpe:2.3:o:linux:linux_kernel:2.2.3:*:*:*:*:*:*:*
cpe:2.3:o:linux:linux_kernel:2.2.4:*:*:*:*:*:*:*
cpe:2.3:o:linux:linux_kernel:2.2.5:*:*:*:*:*:*:*
cpe:2.3:o:linux:linux_kernel:2.2.6:*:*:*:*:*:*:*
cpe:2.3:o:linux:linux_kernel:2.2.7:*:*:*:*:*:*:*
cpe:2.3:o:linux:linux_kernel:2.2.8:*:*:*:*:*:*:*
cpe:2.3:o:linux:linux_kernel:2.2.9:*:*:*:*:*:*:*
cpe:2.3:o:linux:linux_kernel:2.2.10:*:*:*:*:*:*:*
cpe:2.3:o:linux:linux_kernel:2.2.11:*:*:*:*:*:*:*
cpe:2.3:o:linux:linux_kernel:2.2.12:*:*:*:*:*:*:*
cpe:2.3:o:linux:linux_kernel:2.2.13:*:*:*:*:*:*:*
cpe:2.3:o:linux:linux_kernel:2.2.14:*:*:*:*:*:*:*
cpe:2.3:o:linux:linux_kernel:2.2.15:*:*:*:*:*:*:*
cpe:2.3:o:linux:linux_kernel:2.2.15:pre16:*:*:*:*:*:*
cpe:2.3:o:linux:linux_kernel:2.2.15_pre20:*:*:*:*:*:*:*
cpe:2.3:o:linux:linux_kernel:2.2.16:*:*:*:*:*:*:*
cpe:2.3:o:linux:linux_kernel:2.2.16:pre6:*:*:*:*:*:*
cpe:2.3:o:linux:linux_kernel:2.2.17:*:*:*:*:*:*:*
cpe:2.3:o:linux:linux_kernel:2.2.18:*:*:*:*:*:*:*
cpe:2.3:o:linux:linux_kernel:2.2.19:*:*:*:*:*:*:*
cpe:2.3:o:linux:linux_kernel:2.2.20:*:*:*:*:*:*:*
cpe:2.3:o:linux:linux_kernel:2.2.21:*:*:*:*:*:*:*
cpe:2.3:o:linux:linux_kernel:2.2.22:*:*:*:*:*:*:*
cpe:2.3:o:linux:linux_kernel:2.2.23:*:*:*:*:*:*:*
cpe:2.3:o:linux:linux_kernel:2.2.24:*:*:*:*:*:*:*
cpe:2.3:o:linux:linux_kernel:2.4.0:*:*:*:*:*:*:*
cpe:2.3:o:linux:linux_kernel:2.4.0:test1:*:*:*:*:*:*
cpe:2.3:o:linux:linux_kernel:2.4.0:test10:*:*:*:*:*:*
cpe:2.3:o:linux:linux_kernel:2.4.0:test11:*:*:*:*:*:*
cpe:2.3:o:linux:linux_kernel:2.4.0:test12:*:*:*:*:*:*
cpe:2.3:o:linux:linux_kernel:2.4.0:test2:*:*:*:*:*:*
cpe:2.3:o:linux:linux_kernel:2.4.0:test3:*:*:*:*:*:*
cpe:2.3:o:linux:linux_kernel:2.4.0:test4:*:*:*:*:*:*
cpe:2.3:o:linux:linux_kernel:2.4.0:test5:*:*:*:*:*:*
cpe:2.3:o:linux:linux_kernel:2.4.0:test6:*:*:*:*:*:*
cpe:2.3:o:linux:linux_kernel:2.4.0:test7:*:*:*:*:*:*
cpe:2.3:o:linux:linux_kernel:2.4.0:test8:*:*:*:*:*:*
cpe:2.3:o:linux:linux_kernel:2.4.0:test9:*:*:*:*:*:*
cpe:2.3:o:linux:linux_kernel:2.4.1:*:*:*:*:*:*:*
cpe:2.3:o:linux:linux_kernel:2.4.2:*:*:*:*:*:*:*
cpe:2.3:o:linux:linux_kernel:2.4.3:*:*:*:*:*:*:*
cpe:2.3:o:linux:linux_kernel:2.4.4:*:*:*:*:*:*:*
cpe:2.3:o:linux:linux_kernel:2.4.5:*:*:*:*:*:*:*
cpe:2.3:o:linux:linux_kernel:2.4.6:*:*:*:*:*:*:*
cpe:2.3:o:linux:linux_kernel:2.4.7:*:*:*:*:*:*:*
cpe:2.3:o:linux:linux_kernel:2.4.8:*:*:*:*:*:*:*
cpe:2.3:o:linux:linux_kernel:2.4.9:*:*:*:*:*:*:*
cpe:2.3:o:linux:linux_kernel:2.4.10:*:*:*:*:*:*:*
cpe:2.3:o:linux:linux_kernel:2.4.11:*:*:*:*:*:*:*
cpe:2.3:o:linux:linux_kernel:2.4.12:*:*:*:*:*:*:*
cpe:2.3:o:linux:linux_kernel:2.4.13:*:*:*:*:*:*:*
cpe:2.3:o:linux:linux_kernel:2.4.14:*:*:*:*:*:*:*
cpe:2.3:o:linux:linux_kernel:2.4.15:*:*:*:*:*:*:*
cpe:2.3:o:linux:linux_kernel:2.4.16:*:*:*:*:*:*:*
cpe:2.3:o:linux:linux_kernel:2.4.17:*:*:*:*:*:*:*
cpe:2.3:o:linux:linux_kernel:2.4.18:*:*:*:*:*:*:*
cpe:2.3:o:linux:linux_kernel:2.4.18:*:x86:*:*:*:*:*
cpe:2.3:o:linux:linux_kernel:2.4.18:pre1:*:*:*:*:*:*
cpe:2.3:o:linux:linux_kernel:2.4.18:pre2:*:*:*:*:*:*
cpe:2.3:o:linux:linux_kernel:2.4.18:pre3:*:*:*:*:*:*
cpe:2.3:o:linux:linux_kernel:2.4.18:pre4:*:*:*:*:*:*
cpe:2.3:o:linux:linux_kernel:2.4.18:pre5:*:*:*:*:*:*
cpe:2.3:o:linux:linux_kernel:2.4.18:pre6:*:*:*:*:*:*
cpe:2.3:o:linux:linux_kernel:2.4.18:pre7:*:*:*:*:*:*
cpe:2.3:o:linux:linux_kernel:2.4.18:pre8:*:*:*:*:*:*
cpe:2.3:o:linux:linux_kernel:2.4.19:*:*:*:*:*:*:*
cpe:2.3:o:linux:linux_kernel:2.4.19:pre1:*:*:*:*:*:*
cpe:2.3:o:linux:linux_kernel:2.4.19:pre2:*:*:*:*:*:*
cpe:2.3:o:linux:linux_kernel:2.4.19:pre3:*:*:*:*:*:*
cpe:2.3:o:linux:linux_kernel:2.4.19:pre4:*:*:*:*:*:*
cpe:2.3:o:linux:linux_kernel:2.4.19:pre5:*:*:*:*:*:*
cpe:2.3:o:linux:linux_kernel:2.4.19:pre6:*:*:*:*:*:*
cpe:2.3:o:linux:linux_kernel:2.4.20:*:*:*:*:*:*:*
cpe:2.3:o:linux:linux_kernel:2.4.21:*:*:*:*:*:*:*
cpe:2.3:o:linux:linux_kernel:2.4.21:pre1:*:*:*:*:*:*
cpe:2.3:o:linux:linux_kernel:2.4.21:pre4:*:*:*:*:*:*
cpe:2.3:o:linux:linux_kernel:2.4.21:pre7:*:*:*:*:*:*
cpe:2.3:o:linux:linux_kernel:2.4.22:*:*:*:*:*:*:*
cpe:2.3:o:linux:linux_kernel:2.4.23:*:*:*:*:*:*:*
cpe:2.3:o:linux:linux_kernel:2.4.23:pre9:*:*:*:*:*:*
cpe:2.3:o:linux:linux_kernel:2.4.24:*:*:*:*:*:*:*
cpe:2.3:o:linux:linux_kernel:2.6.0:*:*:*:*:*:*:*
cpe:2.3:o:linux:linux_kernel:2.6.0:test1:*:*:*:*:*:*
cpe:2.3:o:linux:linux_kernel:2.6.0:test10:*:*:*:*:*:*
cpe:2.3:o:linux:linux_kernel:2.6.0:test11:*:*:*:*:*:*
cpe:2.3:o:linux:linux_kernel:2.6.0:test2:*:*:*:*:*:*
cpe:2.3:o:linux:linux_kernel:2.6.0:test3:*:*:*:*:*:*
cpe:2.3:o:linux:linux_kernel:2.6.0:test4:*:*:*:*:*:*
cpe:2.3:o:linux:linux_kernel:2.6.0:test5:*:*:*:*:*:*
cpe:2.3:o:linux:linux_kernel:2.6.0:test6:*:*:*:*:*:*
cpe:2.3:o:linux:linux_kernel:2.6.0:test7:*:*:*:*:*:*
cpe:2.3:o:linux:linux_kernel:2.6.0:test8:*:*:*:*:*:*
cpe:2.3:o:linux:linux_kernel:2.6.0:test9:*:*:*:*:*:*
cpe:2.3:o:linux:linux_kernel:2.6.1:rc1:*:*:*:*:*:*
cpe:2.3:o:linux:linux_kernel:2.6.1:rc2:*:*:*:*:*:*
cpe:2.3:o:linux:linux_kernel:2.6.2:*:*:*:*:*:*:*
cpe:2.3:o:linux:linux_kernel:2.6_test9_cvs:*:*:*:*:*:*:*
cpe:2.3:o:netwosix:netwosix_linux:1.0:*:*:*:*:*:*:*
cpe:2.3:o:trustix:secure_linux:1.5:*:*:*:*:*:*:*
cpe:2.3:o:trustix:secure_linux:2.0:*:*:*:*:*:*:*
OR cpe:2.3:a:redhat:kernel:2.4.20-8:*:athlon:*:*:*:*:*
cpe:2.3:a:redhat:kernel:2.4.20-8:*:i386:*:*:*:*:*
cpe:2.3:a:redhat:kernel:2.4.20-8:*:i686:*:*:*:*:*

History

20 Nov 2024, 23:47

Type Values Removed Values Added
References () http://archives.neohapsis.com/archives/vulnwatch/2004-q1/0040.html - () http://archives.neohapsis.com/archives/vulnwatch/2004-q1/0040.html -
References () http://distro.conectiva.com.br/atualizacoes/?id=a&anuncio=000820 - () http://distro.conectiva.com.br/atualizacoes/?id=a&anuncio=000820 -
References () http://fedoranews.org/updates/FEDORA-2004-079.shtml - () http://fedoranews.org/updates/FEDORA-2004-079.shtml -
References () http://frontal2.mandriva.com/security/advisories?name=MDKSA-2004:015 - () http://frontal2.mandriva.com/security/advisories?name=MDKSA-2004:015 -
References () http://isec.pl/vulnerabilities/isec-0014-mremap-unmap.txt - () http://isec.pl/vulnerabilities/isec-0014-mremap-unmap.txt -
References () http://marc.info/?l=bugtraq&m=107711762014175&w=2 - () http://marc.info/?l=bugtraq&m=107711762014175&w=2 -
References () http://marc.info/?l=bugtraq&m=107712137732553&w=2 - () http://marc.info/?l=bugtraq&m=107712137732553&w=2 -
References () http://marc.info/?l=bugtraq&m=107755871932680&w=2 - () http://marc.info/?l=bugtraq&m=107755871932680&w=2 -
References () http://security.gentoo.org/glsa/glsa-200403-02.xml - Patch, Vendor Advisory () http://security.gentoo.org/glsa/glsa-200403-02.xml - Patch, Vendor Advisory
References () http://www.ciac.org/ciac/bulletins/o-082.shtml - () http://www.ciac.org/ciac/bulletins/o-082.shtml -
References () http://www.debian.org/security/2004/dsa-438 - () http://www.debian.org/security/2004/dsa-438 -
References () http://www.debian.org/security/2004/dsa-439 - Patch, Vendor Advisory () http://www.debian.org/security/2004/dsa-439 - Patch, Vendor Advisory
References () http://www.debian.org/security/2004/dsa-440 - () http://www.debian.org/security/2004/dsa-440 -
References () http://www.debian.org/security/2004/dsa-441 - () http://www.debian.org/security/2004/dsa-441 -
References () http://www.debian.org/security/2004/dsa-442 - () http://www.debian.org/security/2004/dsa-442 -
References () http://www.debian.org/security/2004/dsa-444 - () http://www.debian.org/security/2004/dsa-444 -
References () http://www.debian.org/security/2004/dsa-450 - () http://www.debian.org/security/2004/dsa-450 -
References () http://www.debian.org/security/2004/dsa-453 - () http://www.debian.org/security/2004/dsa-453 -
References () http://www.debian.org/security/2004/dsa-454 - () http://www.debian.org/security/2004/dsa-454 -
References () http://www.debian.org/security/2004/dsa-456 - () http://www.debian.org/security/2004/dsa-456 -
References () http://www.debian.org/security/2004/dsa-466 - () http://www.debian.org/security/2004/dsa-466 -
References () http://www.debian.org/security/2004/dsa-470 - () http://www.debian.org/security/2004/dsa-470 -
References () http://www.debian.org/security/2004/dsa-475 - () http://www.debian.org/security/2004/dsa-475 -
References () http://www.debian.org/security/2004/dsa-514 - () http://www.debian.org/security/2004/dsa-514 -
References () http://www.kb.cert.org/vuls/id/981222 - US Government Resource () http://www.kb.cert.org/vuls/id/981222 - US Government Resource
References () http://www.novell.com/linux/security/advisories/2004_05_linux_kernel.html - () http://www.novell.com/linux/security/advisories/2004_05_linux_kernel.html -
References () http://www.osvdb.org/3986 - () http://www.osvdb.org/3986 -
References () http://www.redhat.com/support/errata/RHSA-2004-065.html - () http://www.redhat.com/support/errata/RHSA-2004-065.html -
References () http://www.redhat.com/support/errata/RHSA-2004-066.html - () http://www.redhat.com/support/errata/RHSA-2004-066.html -
References () http://www.redhat.com/support/errata/RHSA-2004-069.html - () http://www.redhat.com/support/errata/RHSA-2004-069.html -
References () http://www.redhat.com/support/errata/RHSA-2004-106.html - () http://www.redhat.com/support/errata/RHSA-2004-106.html -
References () http://www.securityfocus.com/bid/9686 - Exploit, Patch, Vendor Advisory () http://www.securityfocus.com/bid/9686 - Exploit, Patch, Vendor Advisory
References () http://www.slackware.com/security/viewer.php?l=slackware-security&y=2004&m=slackware-security.404734 - () http://www.slackware.com/security/viewer.php?l=slackware-security&y=2004&m=slackware-security.404734 -
References () https://exchange.xforce.ibmcloud.com/vulnerabilities/15244 - () https://exchange.xforce.ibmcloud.com/vulnerabilities/15244 -
References () https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A825 - () https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A825 -
References () https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A837 - () https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A837 -

Information

Published : 2004-03-03 05:00

Updated : 2024-11-20 23:47


NVD link : CVE-2004-0077

Mitre link : CVE-2004-0077

CVE.ORG link : CVE-2004-0077


JSON object : View

Products Affected

redhat

  • kernel_doc
  • kernel
  • bigmem_kernel
  • kernel_source

linux

  • linux_kernel

trustix

  • secure_linux

netwosix

  • netwosix_linux