CVE-2004-0554 Linux kernel 2.4.x and 2.6.x for x86 allows local users to cause a denial of service (system crash), possibly via an infinite loop that triggers a signal handler with a certain sequence of fsave and f...
LowCVSS 2.1
EPSS 0.87%
PoC
- Published
- Updated
- Exploit status
- Proof-of-concept only
Description
Linux kernel 2.4.x and 2.6.x for x86 allows local users to cause a denial of service (system crash), possibly via an infinite loop that triggers a signal handler with a certain sequence of fsave and frstor instructions, as originally demonstrated using a "crash.c" program.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| avaya converged communications server | = 2.0 | No fix listed |
| avaya modular messaging message storage server | = s3400 | No fix listed |
| gentoo linux | = 1.4 | No fix listed |
| Linux kernel | = 2.4.18 | No fix listed |
| Linux kernel | = 2.4.19 | No fix listed |
| Linux kernel | = 2.4.21 | No fix listed |
| Linux kernel | = 2.4.22 | No fix listed |
| Linux kernel | = 2.4.23 | No fix listed |
| Linux kernel | = 2.4.24 | No fix listed |
| Linux kernel | = 2.4.25 | No fix listed |
| Linux kernel | = 2.4.26 | No fix listed |
| Linux kernel | = 2.6.0 | No fix listed |
| Linux kernel | = 2.6.1 | No fix listed |
| Linux kernel | = 2.6.1-rc1 | No fix listed |
| Linux kernel | = 2.6.1-rc2 | No fix listed |
| Linux kernel | = 2.6.2 | No fix listed |
| Linux kernel | = 2.6.3 | No fix listed |
| Linux kernel | = 2.6.4 | No fix listed |
| Linux kernel | = 2.6.5 | No fix listed |
| Linux kernel | = 2.6.6 | No fix listed |
| Linux kernel | = 2.6.6-rc1 | No fix listed |
| Linux kernel | = 2.6.7 | No fix listed |
| Linux kernel | = 2.6.7-rc1 | No fix listed |
| redhat enterprise linux | = 2.1 | No fix listed |
| redhat enterprise linux | = 3.0 | No fix listed |
Show 24 more
| Product | Affected versions | Fixed in |
|---|---|---|
| suse linux | = 7 | No fix listed |
| suse linux | = 8 | No fix listed |
| suse linux | = 8.0 | No fix listed |
| suse linux | = 8.1 | No fix listed |
| suse linux | = 8.2 | No fix listed |
| suse linux | = 9.0 | No fix listed |
| suse linux | = 9.1 | No fix listed |
| avaya intuity audix | All versions | No fix listed |
| suse email server | = 3.1 | No fix listed |
| suse email server | = iii | No fix listed |
| suse linux admin-cd for firewall | All versions | No fix listed |
| suse linux connectivity server | All versions | No fix listed |
| suse linux database server | All versions | No fix listed |
| suse linux firewall cd | All versions | No fix listed |
| suse linux office server | All versions | No fix listed |
| suse office server | All versions | No fix listed |
| avaya s8300 | = r2.0.0 | No fix listed |
| avaya s8300 | = r2.0.1 | No fix listed |
| avaya s8500 | = r2.0.0 | No fix listed |
| avaya s8500 | = r2.0.1 | No fix listed |
| avaya s8700 | = r2.0.0 | No fix listed |
| avaya s8700 | = r2.0.1 | No fix listed |
| conectiva linux | = 8.0 | No fix listed |
| conectiva linux | = 9.0 | No fix listed |
References
- CLA-2004:845 vendor-advisory
- gcc.gnu.org
- linuxreviews.org
- FEDORA-2004-186 vendor-advisory
- 20040620 TSSA-2004-011 - kernel mailing-list
- ESA-20040621-005 vendor-advisory
- [linux-kernel] 20040609 timer + fpu stuff locks my console race mailing-list
- 20162 third-party-advisory
- 20163 third-party-advisory
- 20202 third-party-advisory
- 20338 third-party-advisory
- GLSA-200407-02 vendor-advisory
- DSA-1067 vendor-advisory
- DSA-1069 vendor-advisory
- DSA-1070 vendor-advisory
- DSA-1082 vendor-advisory
- VU#973654 third-party-advisory us-government-resource
- MDKSA-2004:062 vendor-advisory
- SuSE-SA:2004:017 vendor-advisory
- RHSA-2004:255 vendor-advisory
- RHSA-2004:260 vendor-advisory
- 10538 vdb-entry
- 2004-0034 vendor-advisory
- linux-dos(16412) vdb-entry
- oval:org.mitre.oval:def:2915 signature vdb-entry
- oval:org.mitre.oval:def:9426 signature vdb-entry