CVE-2004-1072

security flaw

Published Dec 1, 2004 CVSS 2.0 · 7.2 High EPSS < 1% KEV · Not listed
Description
The binfmt_elf loader (binfmt_elf.c) in Linux kernel 2.4.x up to 2.4.27, and 2.6.x up to 2.6.8, may create an interpreter name string that is not NULL terminated, which could cause strings longer than PATH_MAX to be used, leading to buffer overflows that allow local users to cause a denial of service (hang) and possibly execute arbitrary code.

Remediation

No solution or workaround provided in the CVE record

Tracking

Sign in to view the affected projects.

Advisories

Source ID Title
Debian DSA Debian DSA DSA-1067-1 New Linux kernel 2.4.16 packages fix several vulnerabilities
Debian DSA Debian DSA DSA-1069-1 New Linux kernel 2.4.18 packages fix several vulnerabilities
Debian DSA Debian DSA DSA-1070-1 New Linux kernel 2.4.19 packages fix several vulnerabilities
Debian DSA Debian DSA DSA-1082-1 New Linux kernel 2.4.17 packages fix several vulnerabilities
EUVD EUVD EUVD-2004-1070 The binfmt_elf loader (binfmt_elf.c) in Linux kernel 2.4.x up to 2.4.27, and 2.6.x up to 2.6.8, may create an interpreter name string that is not NULL terminated, which could cause strings longer than PATH_MAX to be used, leading to buffer overflows that allow local users to cause a denial of service (hang) and possibly execute arbitrary code.
History

No history.