linux-kernel-2.4.17-ia64 - several vulnerabilities

Fixed packages 1

Vulnerabilities 12

• Unscored —
  CVE-2003-0001 Public exploit EPSS 73%

  Multiple ethernet Network Interface Card (NIC) device drivers do not pad frames with null bytes, which allows remote at…

  Jan 8, 2003
• Unscored —
  CVE-2003-0018

  Linux kernel 2.4.10 through 2.4.21-pre4 does not properly handle the O_DIRECT feature, which allows local attackers wit…

  Sep 1, 2004
• Unscored —
  CVE-2003-0127 Public exploit

  The kernel module loader in Linux kernel 2.2.x before 2.2.25, and 2.4.x before 2.4.21, allows local users to gain root …

  Mar 18, 2003
• Unscored —
  CVE-2003-0461

  /proc/tty/driver/serial in Linux 2.4.x reveals the exact number of characters used in serial links, which could allow l…

  Jul 25, 2003
• Unscored —
  CVE-2003-0462 Public exploit

  A race condition in the way env_start and env_end pointers are initialized in the execve system call and used in fs/pro…

  Jul 25, 2003
• Unscored —
  CVE-2003-0476

  The execve system call in Linux 2.4.x records the file descriptor of the executable process in the file table of the ca…

  Jun 28, 2003
• Unscored —
  CVE-2003-0501 Public exploit

  The /proc filesystem in Linux allows local users to obtain sensitive information by opening various entries in /proc/se…

  Jul 4, 2003
• Unscored —
  CVE-2003-0550

  The STP protocol, as enabled in Linux 2.4.x, does not provide sufficient security by design, which allows attackers to …

  Jul 25, 2003
• Unscored —
  CVE-2003-0551

  The STP protocol implementation in Linux 2.4.x does not properly verify certain lengths, which could allow attackers to…

  Jul 25, 2003
• Unscored —
  CVE-2003-0552

  Linux 2.4.x allows remote attackers to spoof the bridge Forwarding table via forged packets whose source addresses are …

  Jul 25, 2003
• Unscored —
  CVE-2003-0961 Public exploit

  Integer overflow in the do_brk function for the brk system call in Linux kernel 2.4.22 and earlier allows local users t…

  Dec 2, 2003
• Unscored —
  CVE-2003-0985 Public exploit

  The mremap system call (do_mremap) in Linux kernel 2.4.x before 2.4.21, and possibly other versions before 2.4.24, does…

  Sep 1, 2004