CVE-2003-0986 — Kernel vulnerability

4 documents4 sources
Severity
1.7LOWNVD
EPSS
0.1%
top 82.79%
CISA KEV
Not in KEV
Exploit
No known exploits
Affected products
2
Linux KernelRedhat Enterprise Linux
Timeline
PublishedDec 31
Latest updateApr 29

Description

Various routines for the ppc64 architecture on Linux kernel 2.6 prior to 2.6.2 and 2.4 prior to 2.4.24 do not use the copy_from_user function when copying data from userspace to kernelspace, which crosses security boundaries and allows local users to cause a denial of service.

CVSS vector

AV:L/AC:L/C:N/I:N/A:PExploitability: 3.1 | Impact: 2.9

Affected Packages1 packages

▶NVDlinux/linux_kernel12 versions+11

Also affects: Enterprise Linux 3.0

Patches

Patch: www.redhat.com ↗Patch: www.redhat.com ↗

🔴Vulnerability Details

1
GHSA
GHSA-5pfr-4q63-hjgj: Various routines for the ppc64 architecture on Linux kernel 2↗2022-04-29
▶

📋Vendor Advisories

1
Red Hat
security flaw↗2003-12-15
▶

💬Community

1
Bugzilla
CVE-2003-0986 security flaw↗2018-08-16
▶