Description
Race condition in the (1) load_elf_library and (2) binfmt_aout function calls for uselib in Linux kernel 2.4 through 2.429-rc2 and 2.6 through 2.6.10 allows local users to execute arbitrary code by manipulating the VMA descriptor.
Affected products
Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.
n/a n/a
n/aaffected
References
- http://secunia.com/advisories/20163 ↗
- http://www.debian.org/security/2006/dsa-1082 ↗
- http://www.mandriva.com/security/advisories?name=MDKSA-2005:022 ↗
- http://www.redhat.com/support/errata/RHSA-2005-017.html ↗
- https://bugzilla.fedora.us/show_bug.cgi?id=2336 ↗
- http://www.securityfocus.com/advisories/7804 ↗
- http://isec.pl/vulnerabilities/isec-0021-uselib.txt ↗
- http://www.debian.org/security/2006/dsa-1070 ↗
- http://www.redhat.com/support/errata/RHSA-2005-016.html ↗
- http://secunia.com/advisories/20162 ↗
- http://www.redhat.com/support/errata/RHSA-2005-043.html ↗
- http://www.trustix.org/errata/2005/0001/ ↗
- http://www.redhat.com/support/errata/RHSA-2005-092.html ↗
- http://www.debian.org/security/2006/dsa-1067 ↗
- http://www.securityfocus.com/advisories/7805 ↗
- http://www.debian.org/security/2006/dsa-1069 ↗
- http://distro.conectiva.com.br/atualizacoes/index.php?id=a&anuncio=000930 ↗
- http://www.novell.com/linux/security/advisories/2005_01_sr.html ↗
- http://www.securityfocus.com/bid/12190 ↗
- https://exchange.xforce.ibmcloud.com/vulnerabilities/18800 ↗
- http://marc.info/?l=bugtraq&m=110512575901427&w=2 ↗
- https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A9567 ↗
- http://www.securityfocus.com/advisories/7806 ↗
- http://secunia.com/advisories/20202 ↗
- http://secunia.com/advisories/20338 ↗