CVE-2003-0699
published 2003-08-27CVE-2003-0699: The C-Media PCI sound driver in Linux before 2.4.21 does not use the get_user function to access userspace, which crosses security boundaries and may…
PriorityP422high7.5CVSS 2.0
AVNACLAuNCPIPAP
EPSS
1.96%
78.1th percentile
The C-Media PCI sound driver in Linux before 2.4.21 does not use the get_user function to access userspace, which crosses security boundaries and may facilitate the exploitation of vulnerabilities, a different vulnerability than CVE-2003-0700.
Affected
3 ranges
| Vendor | Product | Version range | Fixed in |
|---|---|---|---|
| redhat | enterprise_linux | — | — |
| redhat | kernel | <= 2.4.21 | — |
| redhat | linux_advanced_workstation | — | — |
CVSS provenance
nvdv2.07.5HIGHAV:N/AC:L/Au:N/C:P/I:P/A:P
vendor_redhat7.5HIGH
Stop checking back — get the weekly exploitation signal.
Every Monday: what got weaponized or added to CISA KEV in the last seven days — each CVE cross-linked to its PoC, Nuclei template, and detection rule. Free, one email a week, unsubscribe in one click.
Red Hat
security flaw
vendor_redhat·2003-08-21·CVSS 7.5
CVE-2003-0699 [HIGH] security flaw
security flaw
The C-Media PCI sound driver in Linux before 2.4.21 does not use the get_user function to access userspace, which crosses security boundaries and may facilitate the exploitation of vulnerabilities, a different vulnerability than CVE-2003-0700.
Red Hat
security flaw
vendor_redhat·2003-07-21·CVSS 7.5
CVE-2003-0700 [HIGH] security flaw
security flaw
The C-Media PCI sound driver in Linux before 2.4.22 does not use the get_user function to access userspace in certain conditions, which crosses security boundaries and may facilitate the exploitation of vulnerabilities, a different vulnerability than CVE-2003-0699.
GHSA
GHSA-cjj3-f422-488c: The C-Media PCI sound driver in Linux before 2
ghsa_unreviewed·2022-04-29·CVSS 7.5
CVE-2003-0700 [HIGH] GHSA-cjj3-f422-488c: The C-Media PCI sound driver in Linux before 2
The C-Media PCI sound driver in Linux before 2.4.22 does not use the get_user function to access userspace in certain conditions, which crosses security boundaries and may facilitate the exploitation of vulnerabilities, a different vulnerability than CVE-2003-0699.
GHSA
GHSA-67h9-42f3-qjxh: The C-Media PCI sound driver in Linux before 2
ghsa_unreviewed·2022-04-29·CVSS 7.5
CVE-2003-0699 [HIGH] GHSA-67h9-42f3-qjxh: The C-Media PCI sound driver in Linux before 2
The C-Media PCI sound driver in Linux before 2.4.21 does not use the get_user function to access userspace, which crosses security boundaries and may facilitate the exploitation of vulnerabilities, a different vulnerability than CVE-2003-0700.
No detection rules found.
No public exploits indexed.
Bugzilla
CVE-2003-0700 security flaw
bugzilla·2018-08-16·CVSS 7.5
CVE-2003-0700 [HIGH] CVE-2003-0700 security flaw
CVE-2003-0700 security flaw
Flaw bug created to hold information about an old flaw we knew something about. For more details see the MITRE CVE description.
Discussion:
MITRE description:
The C-Media PCI sound driver in Linux before 2.4.22 does not use the get_user function to access userspace in certain conditions, which crosses security boundaries and may facilitate the exploitation of vulnerabilities, a different vulnerability than CVE-2003-0699.
Bugzilla
CVE-2003-0699 security flaw
bugzilla·2018-08-16·CVSS 7.5
CVE-2003-0699 [HIGH] CVE-2003-0699 security flaw
CVE-2003-0699 security flaw
Flaw bug created to hold information about an old flaw we knew something about. For more details see the MITRE CVE description.
Discussion:
MITRE description:
The C-Media PCI sound driver in Linux before 2.4.21 does not use the get_user function to access userspace, which crosses security boundaries and may facilitate the exploitation of vulnerabilities, a different vulnerability than CVE-2003-0700.
http://www.redhat.com/support/errata/RHSA-2003-198.htmlhttp://www.redhat.com/support/errata/RHSA-2003-238.htmlhttp://www.redhat.com/support/errata/RHSA-2003-239.htmlhttps://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A387http://www.redhat.com/support/errata/RHSA-2003-198.htmlhttp://www.redhat.com/support/errata/RHSA-2003-238.htmlhttp://www.redhat.com/support/errata/RHSA-2003-239.htmlhttps://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A387
2003-08-27
Published