7.2

CVE-2004-0619

Integer overflow in the ubsec_keysetup function for Linux Broadcom 5820 cryptonet driver allows local users to cause a denial of service (crash) and possibly execute arbitrary code via a negative add_dsa_buf_bytes variable, which leads to a buffer overflow.
Daten sind bereitgestellt durch National Vulnerability Database (NVD)
Redhat ≫ Fedora Core Version core_1.0
Redhat ≫ Linux Version 8.0
Redhat ≫ Linux Version 8.0 Edition i386
Redhat ≫ Linux Version 8.0 Edition i686
Redhat ≫ Kernel Version 2.4.20-8 Edition athlon
Redhat ≫ Kernel Version 2.4.20-8 Edition athlon_smp
Redhat ≫ Kernel Version 2.4.20-8 Edition i386
Redhat ≫ Kernel Version 2.4.20-8 Edition i386_src
Redhat ≫ Kernel Version 2.4.20-8 Edition i586
Redhat ≫ Kernel Version 2.4.20-8 Edition i586_smp
Redhat ≫ Kernel Version 2.4.20-8 Edition i686
Redhat ≫ Kernel Version 2.4.20-8 Edition i686_smp
Zu dieser CVE wurde keine Warnung gefunden.
EPSS Metriken
Typ Quelle Score Percentile
EPSS FIRST.org 0.49% 0.383
CVSS Metriken
Quelle Base Score Exploit Score Impact Score Vector String
NIST 7.2 3.9 10
AV:L/AC:L/Au:N/C:C/I:C/A:C
Es wurden noch keine Informationen zu CWE veröffentlicht.
https://exchange.xforce.ibmcloud.com/vulnerabilities/16459
http://marc.info/?l=bugtraq&m=108802653409053&w=2
http://secunia.com/advisories/11936
http://www.ciac.org/ciac/bulletins/p-047.shtml
http://www.redhat.com/support/errata/RHSA-2004-549.html
Patch
Vendor Advisory
http://www.redhat.com/support/errata/RHSA-2005-283.html
http://www.securityfocus.com/bid/10599
Vendor Advisory
https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A9773