Stack-based buffer overflow in the random number generator (RNG) implementation in the Linux kernel before 2.6.22 might allow local root users to cause a denial of service or gain privileges by setting the default wakeup threshold to a value greater than the output pool size, which triggers writing random numbers to the stack by the pool transfer function involving "bound check ordering". NOTE: this issue might only cross privilege boundaries in environments that have granular assignment of privileges for root.
References
Configurations
History
No history.
Information
Published : 2007-07-27 21:30
Updated : 2024-02-04 17:13
NVD link : CVE-2007-3105
Mitre link : CVE-2007-3105
CVE.ORG link : CVE-2007-3105
JSON object : View
Products Affected
linux
- linux_kernel
CWE
CWE-119
Improper Restriction of Operations within the Bounds of a Memory Buffer