Bug 432244

Summary: Linux Kernel Multiple Prior to 2.6.24.1 Multiple Memory Access Vulnerabilities
Product: [Fedora] Fedora Reporter: Pavel Šefránek <pavel>
Component: kernelAssignee: Kernel Maintainer List <kernel-maint>
Status: CLOSED DUPLICATE QA Contact: Fedora Extras Quality Assurance <extras-qa>
Severity: urgent Docs Contact:
Priority: low    
Version: 8CC: james
Target Milestone: ---   
Target Release: ---   
Hardware: All   
OS: Linux   
URL: http://www.securityfocus.com/bid/27704/
Whiteboard:
Fixed In Version: Doc Type: Bug Fix
Doc Text:
Story Points: ---
Clone Of: Environment:
Last Closed: 2008-02-10 12:10:52 UTC Type: ---
Regression: --- Mount Type: ---
Documentation: --- CRM:
Verified Versions: Category: ---
oVirt Team: --- RHEL 7.3 requirements from Atomic Host:
Cloudforms Team: --- Target Upstream Version:
Embargoed:

Description Pavel Šefránek 2008-02-10 12:07:12 UTC
Description:
The Linux kernel is prone to multiple memory access vulnerabilities, including:
        - A vulnerability that allows unauthorized users to read
        arbitrary
        memory locations. 
        - A vulnerability that allows unauthorized users to write to
        arbitrary
        memory locations.
        
        An attacker can exploit these issues to read and write to
        arbitrary
        memory locations on the affected computer.
        
        This issue affects Linux kernel versions prior to 2.6.24.1.
---        
Tested on current Fedora kernel (2.6.23.14-115.fc8) and it give me root! Posted
also to fedora-kernel-list. See
https://www.redhat.com/archives/fedora-kernel-list/2008-February/msg00026.html
        
More informations and patches can be found at
http://www.securityfocus.com/bid/27704/ (patches provided)

Comment 1 Pavel Šefránek 2008-02-10 12:10:52 UTC

*** This bug has been marked as a duplicate of 432229 ***