|
Bugzilla – Full Text Bug Listing |
| Summary: | VUL-0: CVE-2005-1767: kernel: 2.4 only local stack overflow segment dos on x86-64 | ||
|---|---|---|---|
| Product: | [Novell Products] SUSE Security Incidents | Reporter: | Andreas Kleen <ak> |
| Component: | Incidents | Assignee: | Security Team bot <security-team> |
| Status: | RESOLVED FIXED | QA Contact: | Security Team bot <security-team> |
| Severity: | Normal | ||
| Priority: | P5 - None | CC: | security-team |
| Version: | unspecified | ||
| Target Milestone: | --- | ||
| Hardware: | x86-64 | ||
| OS: | All | ||
| Whiteboard: | CVE-2005-1767: CVSS v2 Base Score: 2.1 (AV:L/AC:L/Au:N/C:N/I:N/A:P) | ||
| Found By: | Other | Services Priority: | |
| Business Priority: | Blocker: | --- | |
| Marketing QA Status: | --- | IT Deployment: | --- |
| Attachments: | Don't use exception stack for stack segment | ||
*** Bug 88492 has been marked as a duplicate of this bug. *** Is this public, so I can add it to all 2.4 based trees? I would like to avoid security bugs piling up again :/ No, it's not public. I don't know when RH will, however since it is only a local dos i hope they won't take too long. ping andi? is it public now? Ah no. I actually forgot about that one. I will do a patch for Marcelo now. hubert, please also add to SLES 8 kernel. Fix has been committed to all 2.4 based trees. Is this fully public now? The mitre site doesn't list the can number yet and are about to release the kernels. updates released CVE-2005-1767: CVSS v2 Base Score: 2.1 (AV:L/AC:L/Au:N/C:N/I:N/A:P) |
Created attachment 39008 [details] Don't use exception stack for stack segment Untested patch for 2.4.31.