CVE-2005-0757

Description

The xattr file system code, as backported in Red Hat Enterprise Linux 3 on 64-bit systems, does not properly handle certain offsets, which allows local users to cause a denial of service (system crash) via certain actions on an ext3 file system with extended attributes enabled.

Fixed in Linux distributions

Distributions backport fixes, so the version that fixes this vulnerability differs per release — upgrade to at least the version shown. From the distributions' security trackers and advisories.

Debian

Security tracker ↗

Release	Package	Fixed in	Advisory
Debian 3.1	kernel-image-2.4.27-arm +1	2.4.27-2sarge1	DSA-921-1
Debian 3.1	kernel-image-2.4.27-m68k	2.4.27-3sarge1	DSA-921-1
Debian 3.1	kernel-image-2.4.27-sparc	2.4.27-9sarge1	DSA-921-1
Debian 3.1	kernel-image-2.6.8-hppa	2.6.8-6sarge1	DSA-922-1
Debian 3.1	kernel-image-2.6.8-ia64	2.6.8-14sarge1	DSA-922-1
Debian 3.1	kernel-image-2.6.8-m68k	2.6.8-4sarge1	DSA-922-1
Debian 3.1	kernel-image-2.6.8-s390	2.6.8-5sarge1	DSA-922-1
Debian 3.1	kernel-image-2.6.8-sparc	2.6.8-15sarge1	DSA-922-1
Debian 3.1	kernel-patch-2.4.27-arm	2.4.27-1sarge1	DSA-921-1
Debian 3.1	kernel-patch-2.4.27-mips	2.4.27-10.sarge1.040815-1	DSA-921-1
Debian 3.1	kernel-patch-powerpc-2.6.8	2.6.8-12sarge1	DSA-922-1
Debian 3.1	kernel-source-2.4.27 +4	2.4.27-10sarge1	DSA-921-1
Debian 3.1	kernel-source-2.6.8 +3	2.6.8-16sarge1	DSA-922-1

Red Hat