Action not permitted
Modal body text goes here.
Modal Title
Modal Body
CVE-2003-0248 (GCVE-0-2003-0248)
Vulnerability from cvelistv5 – Published: 2003-06-05 04:00 – Updated: 2024-08-08 01:50
VLAI?
EPSS
Summary
The mxcsr code in Linux kernel 2.4 allows attackers to modify CPU state registers via a malformed address.
Severity ?
No CVSS data available.
CWE
- n/a
Assigner
References
11 references
| URL | Tags |
|---|---|
| http://www.redhat.com/support/errata/RHSA-2003-187.html | vendor-advisoryx_refsource_REDHAT |
| http://www.turbolinux.com/security/TLSA-2003-41.txt | vendor-advisoryx_refsource_TURBO |
| http://www.redhat.com/support/errata/RHSA-2003-195.html | vendor-advisoryx_refsource_REDHAT |
| http://www.mandriva.com/security/advisories?name=… | vendor-advisoryx_refsource_MANDRAKE |
| http://www.debian.org/security/2003/dsa-336 | vendor-advisoryx_refsource_DEBIAN |
| http://www.mandriva.com/security/advisories?name=… | vendor-advisoryx_refsource_MANDRAKE |
| https://oval.cisecurity.org/repository/search/def… | vdb-entrysignaturex_refsource_OVAL |
| http://www.debian.org/security/2003/dsa-311 | vendor-advisoryx_refsource_DEBIAN |
| http://www.debian.org/security/2003/dsa-332 | vendor-advisoryx_refsource_DEBIAN |
| http://www.debian.org/security/2003/dsa-312 | vendor-advisoryx_refsource_DEBIAN |
| http://www.debian.org/security/2004/dsa-442 | vendor-advisoryx_refsource_DEBIAN |
Date Public ?
2003-06-03 00:00
{
"containers": {
"adp": [
{
"providerMetadata": {
"dateUpdated": "2024-08-08T01:50:46.841Z",
"orgId": "af854a3a-2127-422b-91ae-364da2661108",
"shortName": "CVE"
},
"references": [
{
"name": "RHSA-2003:187",
"tags": [
"vendor-advisory",
"x_refsource_REDHAT",
"x_transferred"
],
"url": "http://www.redhat.com/support/errata/RHSA-2003-187.html"
},
{
"name": "TLSA-2003-41",
"tags": [
"vendor-advisory",
"x_refsource_TURBO",
"x_transferred"
],
"url": "http://www.turbolinux.com/security/TLSA-2003-41.txt"
},
{
"name": "RHSA-2003:195",
"tags": [
"vendor-advisory",
"x_refsource_REDHAT",
"x_transferred"
],
"url": "http://www.redhat.com/support/errata/RHSA-2003-195.html"
},
{
"name": "MDKSA-2003:074",
"tags": [
"vendor-advisory",
"x_refsource_MANDRAKE",
"x_transferred"
],
"url": "http://www.mandriva.com/security/advisories?name=MDKSA-2003:074"
},
{
"name": "DSA-336",
"tags": [
"vendor-advisory",
"x_refsource_DEBIAN",
"x_transferred"
],
"url": "http://www.debian.org/security/2003/dsa-336"
},
{
"name": "MDKSA-2003:066",
"tags": [
"vendor-advisory",
"x_refsource_MANDRAKE",
"x_transferred"
],
"url": "http://www.mandriva.com/security/advisories?name=MDKSA-2003:066"
},
{
"name": "oval:org.mitre.oval:def:292",
"tags": [
"vdb-entry",
"signature",
"x_refsource_OVAL",
"x_transferred"
],
"url": "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A292"
},
{
"name": "DSA-311",
"tags": [
"vendor-advisory",
"x_refsource_DEBIAN",
"x_transferred"
],
"url": "http://www.debian.org/security/2003/dsa-311"
},
{
"name": "DSA-332",
"tags": [
"vendor-advisory",
"x_refsource_DEBIAN",
"x_transferred"
],
"url": "http://www.debian.org/security/2003/dsa-332"
},
{
"name": "DSA-312",
"tags": [
"vendor-advisory",
"x_refsource_DEBIAN",
"x_transferred"
],
"url": "http://www.debian.org/security/2003/dsa-312"
},
{
"name": "DSA-442",
"tags": [
"vendor-advisory",
"x_refsource_DEBIAN",
"x_transferred"
],
"url": "http://www.debian.org/security/2004/dsa-442"
}
],
"title": "CVE Program Container"
}
],
"cna": {
"affected": [
{
"product": "n/a",
"vendor": "n/a",
"versions": [
{
"status": "affected",
"version": "n/a"
}
]
}
],
"datePublic": "2003-06-03T00:00:00.000Z",
"descriptions": [
{
"lang": "en",
"value": "The mxcsr code in Linux kernel 2.4 allows attackers to modify CPU state registers via a malformed address."
}
],
"problemTypes": [
{
"descriptions": [
{
"description": "n/a",
"lang": "en",
"type": "text"
}
]
}
],
"providerMetadata": {
"dateUpdated": "2017-10-10T00:57:01.000Z",
"orgId": "8254265b-2729-46b6-b9e3-3dfca2d5bfca",
"shortName": "mitre"
},
"references": [
{
"name": "RHSA-2003:187",
"tags": [
"vendor-advisory",
"x_refsource_REDHAT"
],
"url": "http://www.redhat.com/support/errata/RHSA-2003-187.html"
},
{
"name": "TLSA-2003-41",
"tags": [
"vendor-advisory",
"x_refsource_TURBO"
],
"url": "http://www.turbolinux.com/security/TLSA-2003-41.txt"
},
{
"name": "RHSA-2003:195",
"tags": [
"vendor-advisory",
"x_refsource_REDHAT"
],
"url": "http://www.redhat.com/support/errata/RHSA-2003-195.html"
},
{
"name": "MDKSA-2003:074",
"tags": [
"vendor-advisory",
"x_refsource_MANDRAKE"
],
"url": "http://www.mandriva.com/security/advisories?name=MDKSA-2003:074"
},
{
"name": "DSA-336",
"tags": [
"vendor-advisory",
"x_refsource_DEBIAN"
],
"url": "http://www.debian.org/security/2003/dsa-336"
},
{
"name": "MDKSA-2003:066",
"tags": [
"vendor-advisory",
"x_refsource_MANDRAKE"
],
"url": "http://www.mandriva.com/security/advisories?name=MDKSA-2003:066"
},
{
"name": "oval:org.mitre.oval:def:292",
"tags": [
"vdb-entry",
"signature",
"x_refsource_OVAL"
],
"url": "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A292"
},
{
"name": "DSA-311",
"tags": [
"vendor-advisory",
"x_refsource_DEBIAN"
],
"url": "http://www.debian.org/security/2003/dsa-311"
},
{
"name": "DSA-332",
"tags": [
"vendor-advisory",
"x_refsource_DEBIAN"
],
"url": "http://www.debian.org/security/2003/dsa-332"
},
{
"name": "DSA-312",
"tags": [
"vendor-advisory",
"x_refsource_DEBIAN"
],
"url": "http://www.debian.org/security/2003/dsa-312"
},
{
"name": "DSA-442",
"tags": [
"vendor-advisory",
"x_refsource_DEBIAN"
],
"url": "http://www.debian.org/security/2004/dsa-442"
}
],
"x_legacyV4Record": {
"CVE_data_meta": {
"ASSIGNER": "cve@mitre.org",
"ID": "CVE-2003-0248",
"STATE": "PUBLIC"
},
"affects": {
"vendor": {
"vendor_data": [
{
"product": {
"product_data": [
{
"product_name": "n/a",
"version": {
"version_data": [
{
"version_value": "n/a"
}
]
}
}
]
},
"vendor_name": "n/a"
}
]
}
},
"data_format": "MITRE",
"data_type": "CVE",
"data_version": "4.0",
"description": {
"description_data": [
{
"lang": "eng",
"value": "The mxcsr code in Linux kernel 2.4 allows attackers to modify CPU state registers via a malformed address."
}
]
},
"problemtype": {
"problemtype_data": [
{
"description": [
{
"lang": "eng",
"value": "n/a"
}
]
}
]
},
"references": {
"reference_data": [
{
"name": "RHSA-2003:187",
"refsource": "REDHAT",
"url": "http://www.redhat.com/support/errata/RHSA-2003-187.html"
},
{
"name": "TLSA-2003-41",
"refsource": "TURBO",
"url": "http://www.turbolinux.com/security/TLSA-2003-41.txt"
},
{
"name": "RHSA-2003:195",
"refsource": "REDHAT",
"url": "http://www.redhat.com/support/errata/RHSA-2003-195.html"
},
{
"name": "MDKSA-2003:074",
"refsource": "MANDRAKE",
"url": "http://www.mandriva.com/security/advisories?name=MDKSA-2003:074"
},
{
"name": "DSA-336",
"refsource": "DEBIAN",
"url": "http://www.debian.org/security/2003/dsa-336"
},
{
"name": "MDKSA-2003:066",
"refsource": "MANDRAKE",
"url": "http://www.mandriva.com/security/advisories?name=MDKSA-2003:066"
},
{
"name": "oval:org.mitre.oval:def:292",
"refsource": "OVAL",
"url": "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A292"
},
{
"name": "DSA-311",
"refsource": "DEBIAN",
"url": "http://www.debian.org/security/2003/dsa-311"
},
{
"name": "DSA-332",
"refsource": "DEBIAN",
"url": "http://www.debian.org/security/2003/dsa-332"
},
{
"name": "DSA-312",
"refsource": "DEBIAN",
"url": "http://www.debian.org/security/2003/dsa-312"
},
{
"name": "DSA-442",
"refsource": "DEBIAN",
"url": "http://www.debian.org/security/2004/dsa-442"
}
]
}
}
}
},
"cveMetadata": {
"assignerOrgId": "8254265b-2729-46b6-b9e3-3dfca2d5bfca",
"assignerShortName": "mitre",
"cveId": "CVE-2003-0248",
"datePublished": "2003-06-05T04:00:00.000Z",
"dateReserved": "2003-05-06T00:00:00.000Z",
"dateUpdated": "2024-08-08T01:50:46.841Z",
"state": "PUBLISHED"
},
"dataType": "CVE_RECORD",
"dataVersion": "5.1",
"vulnerability-lookup:meta": {
"epss": {
"cve": "CVE-2003-0248",
"date": "2026-05-25",
"epss": "0.01435",
"percentile": "0.80931"
},
"fkie_nvd": {
"configurations": "[{\"nodes\": [{\"operator\": \"OR\", \"negate\": false, \"cpeMatch\": [{\"vulnerable\": true, \"criteria\": \"cpe:2.3:o:redhat:linux:7.1:*:*:*:*:*:*:*\", \"matchCriteriaId\": \"1D46E093-1C68-43BB-B281-12117EC8DE0F\"}, {\"vulnerable\": true, \"criteria\": \"cpe:2.3:o:redhat:linux:7.2:*:*:*:*:*:*:*\", \"matchCriteriaId\": \"E562907F-D915-4030-847A-3C6834A80D4E\"}, {\"vulnerable\": true, \"criteria\": \"cpe:2.3:o:redhat:linux:7.3:*:*:*:*:*:*:*\", \"matchCriteriaId\": \"138985E6-5107-4E8B-A801-C3D5FE075227\"}, {\"vulnerable\": true, \"criteria\": \"cpe:2.3:o:redhat:linux:8.0:*:*:*:*:*:*:*\", \"matchCriteriaId\": \"038FEDE7-986F-4CA5-9003-BA68352B87D4\"}, {\"vulnerable\": true, \"criteria\": \"cpe:2.3:o:redhat:linux:9.0:*:i386:*:*:*:*:*\", \"matchCriteriaId\": \"F3FDE8C4-5FFD-4CC2-9F35-7C32043966D1\"}]}]}]",
"descriptions": "[{\"lang\": \"en\", \"value\": \"The mxcsr code in Linux kernel 2.4 allows attackers to modify CPU state registers via a malformed address.\"}, {\"lang\": \"es\", \"value\": \"El c\\u00f3digo mxcsr en el kernel de Linux 2.4 permite que atacantes modifiquen el estado de los registros de la CPU mediante una direcci\\u00f3n mal construida.\"}]",
"id": "CVE-2003-0248",
"lastModified": "2024-11-20T23:44:18.547",
"metrics": "{\"cvssMetricV2\": [{\"source\": \"nvd@nist.gov\", \"type\": \"Primary\", \"cvssData\": {\"version\": \"2.0\", \"vectorString\": \"AV:N/AC:L/Au:N/C:C/I:C/A:C\", \"baseScore\": 10.0, \"accessVector\": \"NETWORK\", \"accessComplexity\": \"LOW\", \"authentication\": \"NONE\", \"confidentialityImpact\": \"COMPLETE\", \"integrityImpact\": \"COMPLETE\", \"availabilityImpact\": \"COMPLETE\"}, \"baseSeverity\": \"HIGH\", \"exploitabilityScore\": 10.0, \"impactScore\": 10.0, \"acInsufInfo\": false, \"obtainAllPrivilege\": false, \"obtainUserPrivilege\": false, \"obtainOtherPrivilege\": false, \"userInteractionRequired\": false}]}",
"published": "2003-06-16T04:00:00.000",
"references": "[{\"url\": \"http://www.debian.org/security/2003/dsa-311\", \"source\": \"cve@mitre.org\", \"tags\": [\"Patch\", \"Vendor Advisory\"]}, {\"url\": \"http://www.debian.org/security/2003/dsa-312\", \"source\": \"cve@mitre.org\"}, {\"url\": \"http://www.debian.org/security/2003/dsa-332\", \"source\": \"cve@mitre.org\"}, {\"url\": \"http://www.debian.org/security/2003/dsa-336\", \"source\": \"cve@mitre.org\"}, {\"url\": \"http://www.debian.org/security/2004/dsa-442\", \"source\": \"cve@mitre.org\"}, {\"url\": \"http://www.mandriva.com/security/advisories?name=MDKSA-2003:066\", \"source\": \"cve@mitre.org\"}, {\"url\": \"http://www.mandriva.com/security/advisories?name=MDKSA-2003:074\", \"source\": \"cve@mitre.org\"}, {\"url\": \"http://www.redhat.com/support/errata/RHSA-2003-187.html\", \"source\": \"cve@mitre.org\", \"tags\": [\"Patch\", \"Vendor Advisory\"]}, {\"url\": \"http://www.redhat.com/support/errata/RHSA-2003-195.html\", \"source\": \"cve@mitre.org\"}, {\"url\": \"http://www.turbolinux.com/security/TLSA-2003-41.txt\", \"source\": \"cve@mitre.org\"}, {\"url\": \"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A292\", \"source\": \"cve@mitre.org\"}, {\"url\": \"http://www.debian.org/security/2003/dsa-311\", \"source\": \"af854a3a-2127-422b-91ae-364da2661108\", \"tags\": [\"Patch\", \"Vendor Advisory\"]}, {\"url\": \"http://www.debian.org/security/2003/dsa-312\", \"source\": \"af854a3a-2127-422b-91ae-364da2661108\"}, {\"url\": \"http://www.debian.org/security/2003/dsa-332\", \"source\": \"af854a3a-2127-422b-91ae-364da2661108\"}, {\"url\": \"http://www.debian.org/security/2003/dsa-336\", \"source\": \"af854a3a-2127-422b-91ae-364da2661108\"}, {\"url\": \"http://www.debian.org/security/2004/dsa-442\", \"source\": \"af854a3a-2127-422b-91ae-364da2661108\"}, {\"url\": \"http://www.mandriva.com/security/advisories?name=MDKSA-2003:066\", \"source\": \"af854a3a-2127-422b-91ae-364da2661108\"}, {\"url\": \"http://www.mandriva.com/security/advisories?name=MDKSA-2003:074\", \"source\": \"af854a3a-2127-422b-91ae-364da2661108\"}, {\"url\": \"http://www.redhat.com/support/errata/RHSA-2003-187.html\", \"source\": \"af854a3a-2127-422b-91ae-364da2661108\", \"tags\": [\"Patch\", \"Vendor Advisory\"]}, {\"url\": \"http://www.redhat.com/support/errata/RHSA-2003-195.html\", \"source\": \"af854a3a-2127-422b-91ae-364da2661108\"}, {\"url\": \"http://www.turbolinux.com/security/TLSA-2003-41.txt\", \"source\": \"af854a3a-2127-422b-91ae-364da2661108\"}, {\"url\": \"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A292\", \"source\": \"af854a3a-2127-422b-91ae-364da2661108\"}]",
"sourceIdentifier": "cve@mitre.org",
"vulnStatus": "Modified",
"weaknesses": "[{\"source\": \"nvd@nist.gov\", \"type\": \"Primary\", \"description\": [{\"lang\": \"en\", \"value\": \"NVD-CWE-Other\"}]}]"
},
"nvd": "{\"cve\":{\"id\":\"CVE-2003-0248\",\"sourceIdentifier\":\"cve@mitre.org\",\"published\":\"2003-06-16T04:00:00.000\",\"lastModified\":\"2026-04-16T00:27:16.627\",\"vulnStatus\":\"Modified\",\"cveTags\":[],\"descriptions\":[{\"lang\":\"en\",\"value\":\"The mxcsr code in Linux kernel 2.4 allows attackers to modify CPU state registers via a malformed address.\"},{\"lang\":\"es\",\"value\":\"El c\u00f3digo mxcsr en el kernel de Linux 2.4 permite que atacantes modifiquen el estado de los registros de la CPU mediante una direcci\u00f3n mal construida.\"}],\"metrics\":{\"cvssMetricV2\":[{\"source\":\"nvd@nist.gov\",\"type\":\"Primary\",\"cvssData\":{\"version\":\"2.0\",\"vectorString\":\"AV:N/AC:L/Au:N/C:C/I:C/A:C\",\"baseScore\":10.0,\"accessVector\":\"NETWORK\",\"accessComplexity\":\"LOW\",\"authentication\":\"NONE\",\"confidentialityImpact\":\"COMPLETE\",\"integrityImpact\":\"COMPLETE\",\"availabilityImpact\":\"COMPLETE\"},\"baseSeverity\":\"HIGH\",\"exploitabilityScore\":10.0,\"impactScore\":10.0,\"acInsufInfo\":false,\"obtainAllPrivilege\":false,\"obtainUserPrivilege\":false,\"obtainOtherPrivilege\":false,\"userInteractionRequired\":false}]},\"weaknesses\":[{\"source\":\"nvd@nist.gov\",\"type\":\"Primary\",\"description\":[{\"lang\":\"en\",\"value\":\"NVD-CWE-Other\"}]}],\"configurations\":[{\"nodes\":[{\"operator\":\"OR\",\"negate\":false,\"cpeMatch\":[{\"vulnerable\":true,\"criteria\":\"cpe:2.3:o:redhat:linux:7.1:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"1D46E093-1C68-43BB-B281-12117EC8DE0F\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:o:redhat:linux:7.2:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"E562907F-D915-4030-847A-3C6834A80D4E\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:o:redhat:linux:7.3:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"138985E6-5107-4E8B-A801-C3D5FE075227\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:o:redhat:linux:8.0:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"038FEDE7-986F-4CA5-9003-BA68352B87D4\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:o:redhat:linux:9.0:*:i386:*:*:*:*:*\",\"matchCriteriaId\":\"F3FDE8C4-5FFD-4CC2-9F35-7C32043966D1\"}]}]}],\"references\":[{\"url\":\"http://www.debian.org/security/2003/dsa-311\",\"source\":\"cve@mitre.org\",\"tags\":[\"Patch\",\"Vendor Advisory\"]},{\"url\":\"http://www.debian.org/security/2003/dsa-312\",\"source\":\"cve@mitre.org\"},{\"url\":\"http://www.debian.org/security/2003/dsa-332\",\"source\":\"cve@mitre.org\"},{\"url\":\"http://www.debian.org/security/2003/dsa-336\",\"source\":\"cve@mitre.org\"},{\"url\":\"http://www.debian.org/security/2004/dsa-442\",\"source\":\"cve@mitre.org\"},{\"url\":\"http://www.mandriva.com/security/advisories?name=MDKSA-2003:066\",\"source\":\"cve@mitre.org\"},{\"url\":\"http://www.mandriva.com/security/advisories?name=MDKSA-2003:074\",\"source\":\"cve@mitre.org\"},{\"url\":\"http://www.redhat.com/support/errata/RHSA-2003-187.html\",\"source\":\"cve@mitre.org\",\"tags\":[\"Patch\",\"Vendor Advisory\"]},{\"url\":\"http://www.redhat.com/support/errata/RHSA-2003-195.html\",\"source\":\"cve@mitre.org\"},{\"url\":\"http://www.turbolinux.com/security/TLSA-2003-41.txt\",\"source\":\"cve@mitre.org\"},{\"url\":\"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A292\",\"source\":\"cve@mitre.org\"},{\"url\":\"http://www.debian.org/security/2003/dsa-311\",\"source\":\"af854a3a-2127-422b-91ae-364da2661108\",\"tags\":[\"Patch\",\"Vendor Advisory\"]},{\"url\":\"http://www.debian.org/security/2003/dsa-312\",\"source\":\"af854a3a-2127-422b-91ae-364da2661108\"},{\"url\":\"http://www.debian.org/security/2003/dsa-332\",\"source\":\"af854a3a-2127-422b-91ae-364da2661108\"},{\"url\":\"http://www.debian.org/security/2003/dsa-336\",\"source\":\"af854a3a-2127-422b-91ae-364da2661108\"},{\"url\":\"http://www.debian.org/security/2004/dsa-442\",\"source\":\"af854a3a-2127-422b-91ae-364da2661108\"},{\"url\":\"http://www.mandriva.com/security/advisories?name=MDKSA-2003:066\",\"source\":\"af854a3a-2127-422b-91ae-364da2661108\"},{\"url\":\"http://www.mandriva.com/security/advisories?name=MDKSA-2003:074\",\"source\":\"af854a3a-2127-422b-91ae-364da2661108\"},{\"url\":\"http://www.redhat.com/support/errata/RHSA-2003-187.html\",\"source\":\"af854a3a-2127-422b-91ae-364da2661108\",\"tags\":[\"Patch\",\"Vendor Advisory\"]},{\"url\":\"http://www.redhat.com/support/errata/RHSA-2003-195.html\",\"source\":\"af854a3a-2127-422b-91ae-364da2661108\"},{\"url\":\"http://www.turbolinux.com/security/TLSA-2003-41.txt\",\"source\":\"af854a3a-2127-422b-91ae-364da2661108\"},{\"url\":\"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A292\",\"source\":\"af854a3a-2127-422b-91ae-364da2661108\"}]}}"
}
}
FKIE_CVE-2003-0248
Vulnerability from fkie_nvd - Published: 2003-06-16 04:00 - Updated: 2026-04-16 00:27
Severity ?
Summary
The mxcsr code in Linux kernel 2.4 allows attackers to modify CPU state registers via a malformed address.
References
{
"configurations": [
{
"nodes": [
{
"cpeMatch": [
{
"criteria": "cpe:2.3:o:redhat:linux:7.1:*:*:*:*:*:*:*",
"matchCriteriaId": "1D46E093-1C68-43BB-B281-12117EC8DE0F",
"vulnerable": true
},
{
"criteria": "cpe:2.3:o:redhat:linux:7.2:*:*:*:*:*:*:*",
"matchCriteriaId": "E562907F-D915-4030-847A-3C6834A80D4E",
"vulnerable": true
},
{
"criteria": "cpe:2.3:o:redhat:linux:7.3:*:*:*:*:*:*:*",
"matchCriteriaId": "138985E6-5107-4E8B-A801-C3D5FE075227",
"vulnerable": true
},
{
"criteria": "cpe:2.3:o:redhat:linux:8.0:*:*:*:*:*:*:*",
"matchCriteriaId": "038FEDE7-986F-4CA5-9003-BA68352B87D4",
"vulnerable": true
},
{
"criteria": "cpe:2.3:o:redhat:linux:9.0:*:i386:*:*:*:*:*",
"matchCriteriaId": "F3FDE8C4-5FFD-4CC2-9F35-7C32043966D1",
"vulnerable": true
}
],
"negate": false,
"operator": "OR"
}
]
}
],
"cveTags": [],
"descriptions": [
{
"lang": "en",
"value": "The mxcsr code in Linux kernel 2.4 allows attackers to modify CPU state registers via a malformed address."
},
{
"lang": "es",
"value": "El c\u00f3digo mxcsr en el kernel de Linux 2.4 permite que atacantes modifiquen el estado de los registros de la CPU mediante una direcci\u00f3n mal construida."
}
],
"id": "CVE-2003-0248",
"lastModified": "2026-04-16T00:27:16.627",
"metrics": {
"cvssMetricV2": [
{
"acInsufInfo": false,
"baseSeverity": "HIGH",
"cvssData": {
"accessComplexity": "LOW",
"accessVector": "NETWORK",
"authentication": "NONE",
"availabilityImpact": "COMPLETE",
"baseScore": 10.0,
"confidentialityImpact": "COMPLETE",
"integrityImpact": "COMPLETE",
"vectorString": "AV:N/AC:L/Au:N/C:C/I:C/A:C",
"version": "2.0"
},
"exploitabilityScore": 10.0,
"impactScore": 10.0,
"obtainAllPrivilege": false,
"obtainOtherPrivilege": false,
"obtainUserPrivilege": false,
"source": "nvd@nist.gov",
"type": "Primary",
"userInteractionRequired": false
}
]
},
"published": "2003-06-16T04:00:00.000",
"references": [
{
"source": "cve@mitre.org",
"tags": [
"Patch",
"Vendor Advisory"
],
"url": "http://www.debian.org/security/2003/dsa-311"
},
{
"source": "cve@mitre.org",
"url": "http://www.debian.org/security/2003/dsa-312"
},
{
"source": "cve@mitre.org",
"url": "http://www.debian.org/security/2003/dsa-332"
},
{
"source": "cve@mitre.org",
"url": "http://www.debian.org/security/2003/dsa-336"
},
{
"source": "cve@mitre.org",
"url": "http://www.debian.org/security/2004/dsa-442"
},
{
"source": "cve@mitre.org",
"url": "http://www.mandriva.com/security/advisories?name=MDKSA-2003:066"
},
{
"source": "cve@mitre.org",
"url": "http://www.mandriva.com/security/advisories?name=MDKSA-2003:074"
},
{
"source": "cve@mitre.org",
"tags": [
"Patch",
"Vendor Advisory"
],
"url": "http://www.redhat.com/support/errata/RHSA-2003-187.html"
},
{
"source": "cve@mitre.org",
"url": "http://www.redhat.com/support/errata/RHSA-2003-195.html"
},
{
"source": "cve@mitre.org",
"url": "http://www.turbolinux.com/security/TLSA-2003-41.txt"
},
{
"source": "cve@mitre.org",
"url": "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A292"
},
{
"source": "af854a3a-2127-422b-91ae-364da2661108",
"tags": [
"Patch",
"Vendor Advisory"
],
"url": "http://www.debian.org/security/2003/dsa-311"
},
{
"source": "af854a3a-2127-422b-91ae-364da2661108",
"url": "http://www.debian.org/security/2003/dsa-312"
},
{
"source": "af854a3a-2127-422b-91ae-364da2661108",
"url": "http://www.debian.org/security/2003/dsa-332"
},
{
"source": "af854a3a-2127-422b-91ae-364da2661108",
"url": "http://www.debian.org/security/2003/dsa-336"
},
{
"source": "af854a3a-2127-422b-91ae-364da2661108",
"url": "http://www.debian.org/security/2004/dsa-442"
},
{
"source": "af854a3a-2127-422b-91ae-364da2661108",
"url": "http://www.mandriva.com/security/advisories?name=MDKSA-2003:066"
},
{
"source": "af854a3a-2127-422b-91ae-364da2661108",
"url": "http://www.mandriva.com/security/advisories?name=MDKSA-2003:074"
},
{
"source": "af854a3a-2127-422b-91ae-364da2661108",
"tags": [
"Patch",
"Vendor Advisory"
],
"url": "http://www.redhat.com/support/errata/RHSA-2003-187.html"
},
{
"source": "af854a3a-2127-422b-91ae-364da2661108",
"url": "http://www.redhat.com/support/errata/RHSA-2003-195.html"
},
{
"source": "af854a3a-2127-422b-91ae-364da2661108",
"url": "http://www.turbolinux.com/security/TLSA-2003-41.txt"
},
{
"source": "af854a3a-2127-422b-91ae-364da2661108",
"url": "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A292"
}
],
"sourceIdentifier": "cve@mitre.org",
"vulnStatus": "Modified",
"weaknesses": [
{
"description": [
{
"lang": "en",
"value": "NVD-CWE-Other"
}
],
"source": "nvd@nist.gov",
"type": "Primary"
}
]
}
GHSA-6X45-MJFW-J5F4
Vulnerability from github – Published: 2022-04-29 01:26 – Updated: 2022-04-29 01:26
VLAI?
Details
The mxcsr code in Linux kernel 2.4 allows attackers to modify CPU state registers via a malformed address.
{
"affected": [],
"aliases": [
"CVE-2003-0248"
],
"database_specific": {
"cwe_ids": [],
"github_reviewed": false,
"github_reviewed_at": null,
"nvd_published_at": "2003-06-16T04:00:00Z",
"severity": "HIGH"
},
"details": "The mxcsr code in Linux kernel 2.4 allows attackers to modify CPU state registers via a malformed address.",
"id": "GHSA-6x45-mjfw-j5f4",
"modified": "2022-04-29T01:26:06Z",
"published": "2022-04-29T01:26:06Z",
"references": [
{
"type": "ADVISORY",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2003-0248"
},
{
"type": "WEB",
"url": "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A292"
},
{
"type": "WEB",
"url": "http://www.debian.org/security/2003/dsa-311"
},
{
"type": "WEB",
"url": "http://www.debian.org/security/2003/dsa-312"
},
{
"type": "WEB",
"url": "http://www.debian.org/security/2003/dsa-332"
},
{
"type": "WEB",
"url": "http://www.debian.org/security/2003/dsa-336"
},
{
"type": "WEB",
"url": "http://www.debian.org/security/2004/dsa-442"
},
{
"type": "WEB",
"url": "http://www.mandriva.com/security/advisories?name=MDKSA-2003:066"
},
{
"type": "WEB",
"url": "http://www.mandriva.com/security/advisories?name=MDKSA-2003:074"
},
{
"type": "WEB",
"url": "http://www.redhat.com/support/errata/RHSA-2003-187.html"
},
{
"type": "WEB",
"url": "http://www.redhat.com/support/errata/RHSA-2003-195.html"
},
{
"type": "WEB",
"url": "http://www.turbolinux.com/security/TLSA-2003-41.txt"
}
],
"schema_version": "1.4.0",
"severity": []
}
GSD-2003-0248
Vulnerability from gsd - Updated: 2023-12-13 01:22Details
The mxcsr code in Linux kernel 2.4 allows attackers to modify CPU state registers via a malformed address.
Aliases
Aliases
{
"GSD": {
"alias": "CVE-2003-0248",
"description": "The mxcsr code in Linux kernel 2.4 allows attackers to modify CPU state registers via a malformed address.",
"id": "GSD-2003-0248",
"references": [
"https://www.debian.org/security/2004/dsa-442",
"https://www.debian.org/security/2003/dsa-336",
"https://www.debian.org/security/2003/dsa-332",
"https://www.debian.org/security/2003/dsa-312",
"https://www.debian.org/security/2003/dsa-311",
"https://access.redhat.com/errata/RHSA-2003:195",
"https://access.redhat.com/errata/RHSA-2003:187"
]
},
"gsd": {
"metadata": {
"exploitCode": "unknown",
"remediation": "unknown",
"reportConfidence": "confirmed",
"type": "vulnerability"
},
"osvSchema": {
"aliases": [
"CVE-2003-0248"
],
"details": "The mxcsr code in Linux kernel 2.4 allows attackers to modify CPU state registers via a malformed address.",
"id": "GSD-2003-0248",
"modified": "2023-12-13T01:22:12.936181Z",
"schema_version": "1.4.0"
}
},
"namespaces": {
"cve.org": {
"CVE_data_meta": {
"ASSIGNER": "cve@mitre.org",
"ID": "CVE-2003-0248",
"STATE": "PUBLIC"
},
"affects": {
"vendor": {
"vendor_data": [
{
"product": {
"product_data": [
{
"product_name": "n/a",
"version": {
"version_data": [
{
"version_value": "n/a"
}
]
}
}
]
},
"vendor_name": "n/a"
}
]
}
},
"data_format": "MITRE",
"data_type": "CVE",
"data_version": "4.0",
"description": {
"description_data": [
{
"lang": "eng",
"value": "The mxcsr code in Linux kernel 2.4 allows attackers to modify CPU state registers via a malformed address."
}
]
},
"problemtype": {
"problemtype_data": [
{
"description": [
{
"lang": "eng",
"value": "n/a"
}
]
}
]
},
"references": {
"reference_data": [
{
"name": "RHSA-2003:187",
"refsource": "REDHAT",
"url": "http://www.redhat.com/support/errata/RHSA-2003-187.html"
},
{
"name": "TLSA-2003-41",
"refsource": "TURBO",
"url": "http://www.turbolinux.com/security/TLSA-2003-41.txt"
},
{
"name": "RHSA-2003:195",
"refsource": "REDHAT",
"url": "http://www.redhat.com/support/errata/RHSA-2003-195.html"
},
{
"name": "MDKSA-2003:074",
"refsource": "MANDRAKE",
"url": "http://www.mandriva.com/security/advisories?name=MDKSA-2003:074"
},
{
"name": "DSA-336",
"refsource": "DEBIAN",
"url": "http://www.debian.org/security/2003/dsa-336"
},
{
"name": "MDKSA-2003:066",
"refsource": "MANDRAKE",
"url": "http://www.mandriva.com/security/advisories?name=MDKSA-2003:066"
},
{
"name": "oval:org.mitre.oval:def:292",
"refsource": "OVAL",
"url": "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A292"
},
{
"name": "DSA-311",
"refsource": "DEBIAN",
"url": "http://www.debian.org/security/2003/dsa-311"
},
{
"name": "DSA-332",
"refsource": "DEBIAN",
"url": "http://www.debian.org/security/2003/dsa-332"
},
{
"name": "DSA-312",
"refsource": "DEBIAN",
"url": "http://www.debian.org/security/2003/dsa-312"
},
{
"name": "DSA-442",
"refsource": "DEBIAN",
"url": "http://www.debian.org/security/2004/dsa-442"
}
]
}
},
"nvd.nist.gov": {
"configurations": {
"CVE_data_version": "4.0",
"nodes": [
{
"children": [],
"cpe_match": [
{
"cpe23Uri": "cpe:2.3:o:redhat:linux:7.3:*:*:*:*:*:*:*",
"cpe_name": [],
"vulnerable": true
},
{
"cpe23Uri": "cpe:2.3:o:redhat:linux:8.0:*:*:*:*:*:*:*",
"cpe_name": [],
"vulnerable": true
},
{
"cpe23Uri": "cpe:2.3:o:redhat:linux:9.0:*:i386:*:*:*:*:*",
"cpe_name": [],
"vulnerable": true
},
{
"cpe23Uri": "cpe:2.3:o:redhat:linux:7.1:*:*:*:*:*:*:*",
"cpe_name": [],
"vulnerable": true
},
{
"cpe23Uri": "cpe:2.3:o:redhat:linux:7.2:*:*:*:*:*:*:*",
"cpe_name": [],
"vulnerable": true
}
],
"operator": "OR"
}
]
},
"cve": {
"CVE_data_meta": {
"ASSIGNER": "cve@mitre.org",
"ID": "CVE-2003-0248"
},
"data_format": "MITRE",
"data_type": "CVE",
"data_version": "4.0",
"description": {
"description_data": [
{
"lang": "en",
"value": "The mxcsr code in Linux kernel 2.4 allows attackers to modify CPU state registers via a malformed address."
}
]
},
"problemtype": {
"problemtype_data": [
{
"description": [
{
"lang": "en",
"value": "NVD-CWE-Other"
}
]
}
]
},
"references": {
"reference_data": [
{
"name": "RHSA-2003:187",
"refsource": "REDHAT",
"tags": [
"Patch",
"Vendor Advisory"
],
"url": "http://www.redhat.com/support/errata/RHSA-2003-187.html"
},
{
"name": "DSA-311",
"refsource": "DEBIAN",
"tags": [
"Patch",
"Vendor Advisory"
],
"url": "http://www.debian.org/security/2003/dsa-311"
},
{
"name": "RHSA-2003:195",
"refsource": "REDHAT",
"tags": [],
"url": "http://www.redhat.com/support/errata/RHSA-2003-195.html"
},
{
"name": "DSA-312",
"refsource": "DEBIAN",
"tags": [],
"url": "http://www.debian.org/security/2003/dsa-312"
},
{
"name": "DSA-332",
"refsource": "DEBIAN",
"tags": [],
"url": "http://www.debian.org/security/2003/dsa-332"
},
{
"name": "DSA-336",
"refsource": "DEBIAN",
"tags": [],
"url": "http://www.debian.org/security/2003/dsa-336"
},
{
"name": "DSA-442",
"refsource": "DEBIAN",
"tags": [],
"url": "http://www.debian.org/security/2004/dsa-442"
},
{
"name": "TLSA-2003-41",
"refsource": "TURBO",
"tags": [],
"url": "http://www.turbolinux.com/security/TLSA-2003-41.txt"
},
{
"name": "MDKSA-2003:066",
"refsource": "MANDRAKE",
"tags": [],
"url": "http://www.mandriva.com/security/advisories?name=MDKSA-2003:066"
},
{
"name": "MDKSA-2003:074",
"refsource": "MANDRAKE",
"tags": [],
"url": "http://www.mandriva.com/security/advisories?name=MDKSA-2003:074"
},
{
"name": "oval:org.mitre.oval:def:292",
"refsource": "OVAL",
"tags": [],
"url": "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A292"
}
]
}
},
"impact": {
"baseMetricV2": {
"cvssV2": {
"accessComplexity": "LOW",
"accessVector": "NETWORK",
"authentication": "NONE",
"availabilityImpact": "COMPLETE",
"baseScore": 10.0,
"confidentialityImpact": "COMPLETE",
"integrityImpact": "COMPLETE",
"vectorString": "AV:N/AC:L/Au:N/C:C/I:C/A:C",
"version": "2.0"
},
"exploitabilityScore": 10.0,
"impactScore": 10.0,
"obtainAllPrivilege": false,
"obtainOtherPrivilege": false,
"obtainUserPrivilege": false,
"severity": "HIGH",
"userInteractionRequired": false
}
},
"lastModifiedDate": "2017-10-11T01:29Z",
"publishedDate": "2003-06-16T04:00Z"
}
}
}
RHSA-2003:187
Vulnerability from csaf_redhat - Published: 2003-06-03 10:40 - Updated: 2025-11-21 17:26Summary
Red Hat Security Advisory: : Updated 2.4 kernel fixes vulnerabilities and driver bugs
Severity
Important
Notes
Topic: Updated kernel packages are now available that contain fixes for security
vulnerabilities as well as fixes for bugs in the audigy, cmd640 IDE, and USB
drivers.
Details: The Linux kernel handles the basic functions of the operating system.
Several security issues have been found that affect the Linux kernel:
Al Viro found a security issue in the tty layer whereby any user could
cause a kernel oops. The Common Vulnerabilities and Exposures project
(cve.mitre.org) has assigned the name CAN-2002-0247 to this issue.
Andrea Arcangeli found an issue in the low-level mxcsr code in which a
malformed address would leave garbage in cpu state registers. The Common
Vulnerabilities and Exposures project (cve.mitre.org) has assigned the name
CAN-2003-0248 to this issue.
The TCP/IP fragment reassembly handling allows remote attackers to cause
a denial of service (CPU consumption) via packets that cause a large number
of hash table collisions, a vulnerability similar to CAN-2003-0244. The
Common Vulnerabilities and Exposures project (cve.mitre.org) has assigned
the name CAN-2003-0364 to this issue.
It is recommended that users upgrade to these erratum kernels, which
contain patches to correct these vulnerabilities. In addition, these
kernels fix a number of bugs:
Driver bugs fixes are included for the Silicon Image IDE driver, the USB
ohci driver, the Audigy driver, and the driver for the Olympus Camedia
digital camera.
A fix written by Andrew Morton is included to address a system stall caused
by file I/O in rare cases.
An updated fix corrects some bugs in the ptrace security fix for Red Hat
Linux 7.1, 7.2, 7.3, and 8.0. Note that these bugs were functionality
limitations, not additional security vulnerabilities.
Updated fixes for the ioperm security issue are also included.
A potential data corruption scenario has been identified. This
scenario can occur under heavy, complex I/O loads. The scenario
only occurs while performing memory mapped file I/O, where the
file is simultaneously unlinked and the corresponding file blocks
reallocated. Furthermore, the memory mapped writes must be to a
partial page at the end of a file on an ext3 file system. As such,
Red Hat considers this an unlikely scenario.
Red Hat Linux kernel erratum RHSA-2003:172 exposed a bug in the quota
packages for Red Hat Linux 7.1, 7.2 and 7.3; a fixed quota package is also
included in this erratum.
Terms of Use: This content is licensed under the Creative Commons Attribution 4.0 International License (https://creativecommons.org/licenses/by/4.0/). If you distribute this content, or a modified version of it, you must provide attribution to Red Hat Inc. and provide a link to the original.
Unknown vulnerability in the TTY layer of the Linux kernel 2.4 allows attackers to cause a denial of service ("kernel oops").
Affected products
Fixed
5 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
|
Red Hat Linux 7.1
Red Hat / Red Hat Linux
|
cpe:/o:redhat:linux:7.1
|
— |
Vendor Fix
fix
|
|
Red Hat Linux 7.2
Red Hat / Red Hat Linux
|
cpe:/o:redhat:linux:7.2
|
— |
Vendor Fix
fix
|
|
Red Hat Linux 7.3
Red Hat / Red Hat Linux
|
cpe:/o:redhat:linux:7.3
|
— |
Vendor Fix
fix
|
|
Red Hat Linux 8.0
Red Hat / Red Hat Linux
|
cpe:/o:redhat:linux:8.0
|
— |
Vendor Fix
fix
|
|
Red Hat Linux 9
Red Hat / Red Hat Linux
|
cpe:/o:redhat:linux:9
|
— |
Vendor Fix
fix
|
Threats
Impact
Important
The mxcsr code in Linux kernel 2.4 allows attackers to modify CPU state registers via a malformed address.
Affected products
Fixed
5 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
|
Red Hat Linux 7.1
Red Hat / Red Hat Linux
|
cpe:/o:redhat:linux:7.1
|
— |
Vendor Fix
fix
|
|
Red Hat Linux 7.2
Red Hat / Red Hat Linux
|
cpe:/o:redhat:linux:7.2
|
— |
Vendor Fix
fix
|
|
Red Hat Linux 7.3
Red Hat / Red Hat Linux
|
cpe:/o:redhat:linux:7.3
|
— |
Vendor Fix
fix
|
|
Red Hat Linux 8.0
Red Hat / Red Hat Linux
|
cpe:/o:redhat:linux:8.0
|
— |
Vendor Fix
fix
|
|
Red Hat Linux 9
Red Hat / Red Hat Linux
|
cpe:/o:redhat:linux:9
|
— |
Vendor Fix
fix
|
Threats
Impact
Moderate
The TCP/IP fragment reassembly handling in the Linux kernel 2.4 allows remote attackers to cause a denial of service (CPU consumption) via certain packets that cause a large number of hash table collisions.
Affected products
Fixed
5 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
|
Red Hat Linux 7.1
Red Hat / Red Hat Linux
|
cpe:/o:redhat:linux:7.1
|
— |
Vendor Fix
fix
|
|
Red Hat Linux 7.2
Red Hat / Red Hat Linux
|
cpe:/o:redhat:linux:7.2
|
— |
Vendor Fix
fix
|
|
Red Hat Linux 7.3
Red Hat / Red Hat Linux
|
cpe:/o:redhat:linux:7.3
|
— |
Vendor Fix
fix
|
|
Red Hat Linux 8.0
Red Hat / Red Hat Linux
|
cpe:/o:redhat:linux:8.0
|
— |
Vendor Fix
fix
|
|
Red Hat Linux 9
Red Hat / Red Hat Linux
|
cpe:/o:redhat:linux:9
|
— |
Vendor Fix
fix
|
Threats
Impact
Important
References
32 references
{
"document": {
"aggregate_severity": {
"namespace": "https://access.redhat.com/security/updates/classification/",
"text": "Important"
},
"category": "csaf_security_advisory",
"csaf_version": "2.0",
"distribution": {
"text": "Copyright \u00a9 Red Hat, Inc. All rights reserved.",
"tlp": {
"label": "WHITE",
"url": "https://www.first.org/tlp/"
}
},
"lang": "en",
"notes": [
{
"category": "summary",
"text": "Updated kernel packages are now available that contain fixes for security\nvulnerabilities as well as fixes for bugs in the audigy, cmd640 IDE, and USB\ndrivers.",
"title": "Topic"
},
{
"category": "general",
"text": "The Linux kernel handles the basic functions of the operating system.\n\nSeveral security issues have been found that affect the Linux kernel:\n\nAl Viro found a security issue in the tty layer whereby any user could\ncause a kernel oops. The Common Vulnerabilities and Exposures project\n(cve.mitre.org) has assigned the name CAN-2002-0247 to this issue.\n\nAndrea Arcangeli found an issue in the low-level mxcsr code in which a\nmalformed address would leave garbage in cpu state registers. The Common\nVulnerabilities and Exposures project (cve.mitre.org) has assigned the name\nCAN-2003-0248 to this issue.\n\nThe TCP/IP fragment reassembly handling allows remote attackers to cause\na denial of service (CPU consumption) via packets that cause a large number\nof hash table collisions, a vulnerability similar to CAN-2003-0244. The\nCommon Vulnerabilities and Exposures project (cve.mitre.org) has assigned\nthe name CAN-2003-0364 to this issue.\n\nIt is recommended that users upgrade to these erratum kernels, which\ncontain patches to correct these vulnerabilities. In addition, these\nkernels fix a number of bugs:\n\nDriver bugs fixes are included for the Silicon Image IDE driver, the USB\nohci driver, the Audigy driver, and the driver for the Olympus Camedia\ndigital camera.\n\nA fix written by Andrew Morton is included to address a system stall caused\nby file I/O in rare cases.\n\nAn updated fix corrects some bugs in the ptrace security fix for Red Hat\nLinux 7.1, 7.2, 7.3, and 8.0. Note that these bugs were functionality\nlimitations, not additional security vulnerabilities.\n\nUpdated fixes for the ioperm security issue are also included.\n\nA potential data corruption scenario has been identified. This\nscenario can occur under heavy, complex I/O loads. The scenario\nonly occurs while performing memory mapped file I/O, where the\nfile is simultaneously unlinked and the corresponding file blocks\nreallocated. Furthermore, the memory mapped writes must be to a\npartial page at the end of a file on an ext3 file system. As such,\nRed Hat considers this an unlikely scenario.\n\nRed Hat Linux kernel erratum RHSA-2003:172 exposed a bug in the quota\npackages for Red Hat Linux 7.1, 7.2 and 7.3; a fixed quota package is also\nincluded in this erratum.",
"title": "Details"
},
{
"category": "legal_disclaimer",
"text": "This content is licensed under the Creative Commons Attribution 4.0 International License (https://creativecommons.org/licenses/by/4.0/). If you distribute this content, or a modified version of it, you must provide attribution to Red Hat Inc. and provide a link to the original.",
"title": "Terms of Use"
}
],
"publisher": {
"category": "vendor",
"contact_details": "https://access.redhat.com/security/team/contact/",
"issuing_authority": "Red Hat Product Security is responsible for vulnerability handling across all Red Hat products and services.",
"name": "Red Hat Product Security",
"namespace": "https://www.redhat.com"
},
"references": [
{
"category": "self",
"summary": "https://access.redhat.com/errata/RHSA-2003:187",
"url": "https://access.redhat.com/errata/RHSA-2003:187"
},
{
"category": "external",
"summary": "72604",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=72604"
},
{
"category": "external",
"summary": "90890",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=90890"
},
{
"category": "external",
"summary": "90920",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=90920"
},
{
"category": "external",
"summary": "90922",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=90922"
},
{
"category": "external",
"summary": "90936",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=90936"
},
{
"category": "external",
"summary": "90939",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=90939"
},
{
"category": "external",
"summary": "90979",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=90979"
},
{
"category": "external",
"summary": "90982",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=90982"
},
{
"category": "external",
"summary": "90985",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=90985"
},
{
"category": "external",
"summary": "91099",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=91099"
},
{
"category": "external",
"summary": "91112",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=91112"
},
{
"category": "external",
"summary": "91248",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=91248"
},
{
"category": "external",
"summary": "91432",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=91432"
},
{
"category": "external",
"summary": "91489",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=91489"
},
{
"category": "external",
"summary": "91561",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=91561"
},
{
"category": "external",
"summary": "91580",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=91580"
},
{
"category": "external",
"summary": "91585",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=91585"
},
{
"category": "external",
"summary": "91650",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=91650"
},
{
"category": "self",
"summary": "Canonical URL",
"url": "https://security.access.redhat.com/data/csaf/v2/advisories/2003/rhsa-2003_187.json"
}
],
"title": "Red Hat Security Advisory: : Updated 2.4 kernel fixes vulnerabilities and driver bugs",
"tracking": {
"current_release_date": "2025-11-21T17:26:07+00:00",
"generator": {
"date": "2025-11-21T17:26:07+00:00",
"engine": {
"name": "Red Hat SDEngine",
"version": "4.6.12"
}
},
"id": "RHSA-2003:187",
"initial_release_date": "2003-06-03T10:40:00+00:00",
"revision_history": [
{
"date": "2003-06-03T10:40:00+00:00",
"number": "1",
"summary": "Initial version"
},
{
"date": "2003-05-22T00:00:00+00:00",
"number": "2",
"summary": "Last updated version"
},
{
"date": "2025-11-21T17:26:07+00:00",
"number": "3",
"summary": "Last generated version"
}
],
"status": "final",
"version": "3"
}
},
"product_tree": {
"branches": [
{
"branches": [
{
"branches": [
{
"category": "product_name",
"name": "Red Hat Linux 7.1",
"product": {
"name": "Red Hat Linux 7.1",
"product_id": "Red Hat Linux 7.1",
"product_identification_helper": {
"cpe": "cpe:/o:redhat:linux:7.1"
}
}
},
{
"category": "product_name",
"name": "Red Hat Linux 7.2",
"product": {
"name": "Red Hat Linux 7.2",
"product_id": "Red Hat Linux 7.2",
"product_identification_helper": {
"cpe": "cpe:/o:redhat:linux:7.2"
}
}
},
{
"category": "product_name",
"name": "Red Hat Linux 7.3",
"product": {
"name": "Red Hat Linux 7.3",
"product_id": "Red Hat Linux 7.3",
"product_identification_helper": {
"cpe": "cpe:/o:redhat:linux:7.3"
}
}
},
{
"category": "product_name",
"name": "Red Hat Linux 8.0",
"product": {
"name": "Red Hat Linux 8.0",
"product_id": "Red Hat Linux 8.0",
"product_identification_helper": {
"cpe": "cpe:/o:redhat:linux:8.0"
}
}
},
{
"category": "product_name",
"name": "Red Hat Linux 9",
"product": {
"name": "Red Hat Linux 9",
"product_id": "Red Hat Linux 9",
"product_identification_helper": {
"cpe": "cpe:/o:redhat:linux:9"
}
}
}
],
"category": "product_family",
"name": "Red Hat Linux"
}
],
"category": "vendor",
"name": "Red Hat"
}
]
},
"vulnerabilities": [
{
"cve": "CVE-2003-0247",
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "1617008"
}
],
"notes": [
{
"category": "description",
"text": "Unknown vulnerability in the TTY layer of the Linux kernel 2.4 allows attackers to cause a denial of service (\"kernel oops\").",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "security flaw",
"title": "Vulnerability summary"
}
],
"product_status": {
"fixed": [
"Red Hat Linux 7.1",
"Red Hat Linux 7.2",
"Red Hat Linux 7.3",
"Red Hat Linux 8.0",
"Red Hat Linux 9"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2003-0247"
},
{
"category": "external",
"summary": "RHBZ#1617008",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=1617008"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2003-0247",
"url": "https://www.cve.org/CVERecord?id=CVE-2003-0247"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2003-0247",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2003-0247"
}
],
"release_date": "2003-06-03T00:00:00+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2003-06-03T10:40:00+00:00",
"details": "Before applying this update, make sure all previously released errata\nrelevant to your system have been applied.\n\nTo use Red Hat Network to upgrade the kernel, launch the Red Hat Update\nAgent with the following command:\n\nup2date\n\nThis will start an interactive process that will result in the appropriate\nRPMs being upgraded on your system. Note that you need to select the\nkernel explicitly if you are using the default configuration of up2date.\n\nTo install kernel packages manually, use \"rpm -ivh \u003cpackage\u003e\" and\nmodify system settings to boot the kernel you have installed. To\ndo this, edit /boot/grub/grub.conf and change the default entry to\n\"default=0\" (or, if you have chosen to use LILO as your boot loader,\nedit /etc/lilo.conf and run lilo)\n\nDo not use \"rpm -Uvh\" as that will remove your running kernel binaries\nfrom your system. You may use \"rpm -e\" to remove old kernels after\ndetermining that the new kernel functions properly on your system.",
"product_ids": [
"Red Hat Linux 7.1",
"Red Hat Linux 7.2",
"Red Hat Linux 7.3",
"Red Hat Linux 8.0",
"Red Hat Linux 9"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2003:187"
}
],
"threats": [
{
"category": "impact",
"details": "Important"
}
],
"title": "security flaw"
},
{
"cve": "CVE-2003-0248",
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "1617009"
}
],
"notes": [
{
"category": "description",
"text": "The mxcsr code in Linux kernel 2.4 allows attackers to modify CPU state registers via a malformed address.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "security flaw",
"title": "Vulnerability summary"
}
],
"product_status": {
"fixed": [
"Red Hat Linux 7.1",
"Red Hat Linux 7.2",
"Red Hat Linux 7.3",
"Red Hat Linux 8.0",
"Red Hat Linux 9"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2003-0248"
},
{
"category": "external",
"summary": "RHBZ#1617009",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=1617009"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2003-0248",
"url": "https://www.cve.org/CVERecord?id=CVE-2003-0248"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2003-0248",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2003-0248"
}
],
"release_date": "2003-06-03T00:00:00+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2003-06-03T10:40:00+00:00",
"details": "Before applying this update, make sure all previously released errata\nrelevant to your system have been applied.\n\nTo use Red Hat Network to upgrade the kernel, launch the Red Hat Update\nAgent with the following command:\n\nup2date\n\nThis will start an interactive process that will result in the appropriate\nRPMs being upgraded on your system. Note that you need to select the\nkernel explicitly if you are using the default configuration of up2date.\n\nTo install kernel packages manually, use \"rpm -ivh \u003cpackage\u003e\" and\nmodify system settings to boot the kernel you have installed. To\ndo this, edit /boot/grub/grub.conf and change the default entry to\n\"default=0\" (or, if you have chosen to use LILO as your boot loader,\nedit /etc/lilo.conf and run lilo)\n\nDo not use \"rpm -Uvh\" as that will remove your running kernel binaries\nfrom your system. You may use \"rpm -e\" to remove old kernels after\ndetermining that the new kernel functions properly on your system.",
"product_ids": [
"Red Hat Linux 7.1",
"Red Hat Linux 7.2",
"Red Hat Linux 7.3",
"Red Hat Linux 8.0",
"Red Hat Linux 9"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2003:187"
}
],
"threats": [
{
"category": "impact",
"details": "Moderate"
}
],
"title": "security flaw"
},
{
"cve": "CVE-2003-0364",
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "1617022"
}
],
"notes": [
{
"category": "description",
"text": "The TCP/IP fragment reassembly handling in the Linux kernel 2.4 allows remote attackers to cause a denial of service (CPU consumption) via certain packets that cause a large number of hash table collisions.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "security flaw",
"title": "Vulnerability summary"
}
],
"product_status": {
"fixed": [
"Red Hat Linux 7.1",
"Red Hat Linux 7.2",
"Red Hat Linux 7.3",
"Red Hat Linux 8.0",
"Red Hat Linux 9"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2003-0364"
},
{
"category": "external",
"summary": "RHBZ#1617022",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=1617022"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2003-0364",
"url": "https://www.cve.org/CVERecord?id=CVE-2003-0364"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2003-0364",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2003-0364"
}
],
"release_date": "2003-06-03T00:00:00+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2003-06-03T10:40:00+00:00",
"details": "Before applying this update, make sure all previously released errata\nrelevant to your system have been applied.\n\nTo use Red Hat Network to upgrade the kernel, launch the Red Hat Update\nAgent with the following command:\n\nup2date\n\nThis will start an interactive process that will result in the appropriate\nRPMs being upgraded on your system. Note that you need to select the\nkernel explicitly if you are using the default configuration of up2date.\n\nTo install kernel packages manually, use \"rpm -ivh \u003cpackage\u003e\" and\nmodify system settings to boot the kernel you have installed. To\ndo this, edit /boot/grub/grub.conf and change the default entry to\n\"default=0\" (or, if you have chosen to use LILO as your boot loader,\nedit /etc/lilo.conf and run lilo)\n\nDo not use \"rpm -Uvh\" as that will remove your running kernel binaries\nfrom your system. You may use \"rpm -e\" to remove old kernels after\ndetermining that the new kernel functions properly on your system.",
"product_ids": [
"Red Hat Linux 7.1",
"Red Hat Linux 7.2",
"Red Hat Linux 7.3",
"Red Hat Linux 8.0",
"Red Hat Linux 9"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2003:187"
}
],
"threats": [
{
"category": "impact",
"details": "Important"
}
],
"title": "security flaw"
}
]
}
RHSA-2003:195
Vulnerability from csaf_redhat - Published: 2003-06-19 13:55 - Updated: 2026-01-13 20:57Summary
Red Hat Security Advisory: kernel security update
Severity
Important
Notes
Topic: Updated kernel packages for Red Hat Enterprise Linux are now available
which address several security vulnerabilities.
Details: The Linux kernel handles the basic functions of the operating system.
Several security issues have been found that affect the Linux kernel:
Al Viro found a security issue in the tty layer whereby any user could
cause a kernel oops. The Common Vulnerabilities and Exposures project
(cve.mitre.org) has assigned the name CAN-2003-0247 to this issue.
Andrea Arcangeli found an issue in the low-level mxcsr code in which a
malformed address would leave garbage in cpu state registers. The Common
Vulnerabilities and Exposures project (cve.mitre.org) has assigned the
name CAN-2003-0248 to this issue.
The TCP/IP fragment reassembly handling allows remote attackers to cause a
denial of service (CPU consumption) via packets that cause a large number
of hash table collisions, a vulnerability similar to CAN-2003-0244. The
Common Vulnerabilities and Exposures project (cve.mitre.org) has assigned
the name CAN-2003-0364 to this issue.
These kernels also contain updated fixes for the ioperm security issue, as
well as fixes for a number of bugs.
It is recommended that users upgrade to these erratum kernels, which
contain patches to correct these vulnerabilities.
Terms of Use: This content is licensed under the Creative Commons Attribution 4.0 International License (https://creativecommons.org/licenses/by/4.0/). If you distribute this content, or a modified version of it, you must provide attribution to Red Hat Inc. and provide a link to the original.
The MAC module in Netfilter in Linux kernel 2.4.1 through 2.4.11, when configured to filter based on MAC addresses, allows remote attackers to bypass packet filters via small packets.
Affected products
Fixed
3 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
|
Red Hat Enterprise Linux AS (Advanced Server) version 2.1
Red Hat / Red Hat Enterprise Linux
|
cpe:/o:redhat:enterprise_linux:2.1::as
|
— |
Vendor Fix
fix
|
|
Red Hat Enterprise Linux ES version 2.1
Red Hat / Red Hat Enterprise Linux
|
cpe:/o:redhat:enterprise_linux:2.1::es
|
— |
Vendor Fix
fix
|
|
Red Hat Enterprise Linux WS version 2.1
Red Hat / Red Hat Enterprise Linux
|
cpe:/o:redhat:enterprise_linux:2.1::ws
|
— |
Vendor Fix
fix
|
Threats
Impact
Moderate
Unknown vulnerability in the TTY layer of the Linux kernel 2.4 allows attackers to cause a denial of service ("kernel oops").
Affected products
Fixed
3 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
|
Red Hat Enterprise Linux AS (Advanced Server) version 2.1
Red Hat / Red Hat Enterprise Linux
|
cpe:/o:redhat:enterprise_linux:2.1::as
|
— |
Vendor Fix
fix
|
|
Red Hat Enterprise Linux ES version 2.1
Red Hat / Red Hat Enterprise Linux
|
cpe:/o:redhat:enterprise_linux:2.1::es
|
— |
Vendor Fix
fix
|
|
Red Hat Enterprise Linux WS version 2.1
Red Hat / Red Hat Enterprise Linux
|
cpe:/o:redhat:enterprise_linux:2.1::ws
|
— |
Vendor Fix
fix
|
Threats
Impact
Important
The mxcsr code in Linux kernel 2.4 allows attackers to modify CPU state registers via a malformed address.
Affected products
Fixed
3 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
|
Red Hat Enterprise Linux AS (Advanced Server) version 2.1
Red Hat / Red Hat Enterprise Linux
|
cpe:/o:redhat:enterprise_linux:2.1::as
|
— |
Vendor Fix
fix
|
|
Red Hat Enterprise Linux ES version 2.1
Red Hat / Red Hat Enterprise Linux
|
cpe:/o:redhat:enterprise_linux:2.1::es
|
— |
Vendor Fix
fix
|
|
Red Hat Enterprise Linux WS version 2.1
Red Hat / Red Hat Enterprise Linux
|
cpe:/o:redhat:enterprise_linux:2.1::ws
|
— |
Vendor Fix
fix
|
Threats
Impact
Moderate
The TCP/IP fragment reassembly handling in the Linux kernel 2.4 allows remote attackers to cause a denial of service (CPU consumption) via certain packets that cause a large number of hash table collisions.
Affected products
Fixed
3 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
|
Red Hat Enterprise Linux AS (Advanced Server) version 2.1
Red Hat / Red Hat Enterprise Linux
|
cpe:/o:redhat:enterprise_linux:2.1::as
|
— |
Vendor Fix
fix
|
|
Red Hat Enterprise Linux ES version 2.1
Red Hat / Red Hat Enterprise Linux
|
cpe:/o:redhat:enterprise_linux:2.1::es
|
— |
Vendor Fix
fix
|
|
Red Hat Enterprise Linux WS version 2.1
Red Hat / Red Hat Enterprise Linux
|
cpe:/o:redhat:enterprise_linux:2.1::ws
|
— |
Vendor Fix
fix
|
Threats
Impact
Important
References
19 references
{
"document": {
"aggregate_severity": {
"namespace": "https://access.redhat.com/security/updates/classification/",
"text": "Important"
},
"category": "csaf_security_advisory",
"csaf_version": "2.0",
"distribution": {
"text": "Copyright \u00a9 Red Hat, Inc. All rights reserved.",
"tlp": {
"label": "WHITE",
"url": "https://www.first.org/tlp/"
}
},
"lang": "en",
"notes": [
{
"category": "summary",
"text": "Updated kernel packages for Red Hat Enterprise Linux are now available\nwhich address several security vulnerabilities.",
"title": "Topic"
},
{
"category": "general",
"text": "The Linux kernel handles the basic functions of the operating system. \n\nSeveral security issues have been found that affect the Linux kernel:\n\nAl Viro found a security issue in the tty layer whereby any user could\ncause a kernel oops. The Common Vulnerabilities and Exposures project\n(cve.mitre.org) has assigned the name CAN-2003-0247 to this issue.\n\nAndrea Arcangeli found an issue in the low-level mxcsr code in which a\nmalformed address would leave garbage in cpu state registers. The Common\nVulnerabilities and Exposures project (cve.mitre.org) has assigned the\nname CAN-2003-0248 to this issue.\n\nThe TCP/IP fragment reassembly handling allows remote attackers to cause a\ndenial of service (CPU consumption) via packets that cause a large number\nof hash table collisions, a vulnerability similar to CAN-2003-0244. The\nCommon Vulnerabilities and Exposures project (cve.mitre.org) has assigned\nthe name CAN-2003-0364 to this issue.\n\nThese kernels also contain updated fixes for the ioperm security issue, as\nwell as fixes for a number of bugs.\n\nIt is recommended that users upgrade to these erratum kernels, which\ncontain patches to correct these vulnerabilities.",
"title": "Details"
},
{
"category": "legal_disclaimer",
"text": "This content is licensed under the Creative Commons Attribution 4.0 International License (https://creativecommons.org/licenses/by/4.0/). If you distribute this content, or a modified version of it, you must provide attribution to Red Hat Inc. and provide a link to the original.",
"title": "Terms of Use"
}
],
"publisher": {
"category": "vendor",
"contact_details": "https://access.redhat.com/security/team/contact/",
"issuing_authority": "Red Hat Product Security is responsible for vulnerability handling across all Red Hat products and services.",
"name": "Red Hat Product Security",
"namespace": "https://www.redhat.com"
},
"references": [
{
"category": "self",
"summary": "https://access.redhat.com/errata/RHSA-2003:195",
"url": "https://access.redhat.com/errata/RHSA-2003:195"
},
{
"category": "external",
"summary": "https://access.redhat.com/security/updates/classification/#important",
"url": "https://access.redhat.com/security/updates/classification/#important"
},
{
"category": "self",
"summary": "Canonical URL",
"url": "https://security.access.redhat.com/data/csaf/v2/advisories/2003/rhsa-2003_195.json"
}
],
"title": "Red Hat Security Advisory: kernel security update",
"tracking": {
"current_release_date": "2026-01-13T20:57:17+00:00",
"generator": {
"date": "2026-01-13T20:57:17+00:00",
"engine": {
"name": "Red Hat SDEngine",
"version": "4.6.15"
}
},
"id": "RHSA-2003:195",
"initial_release_date": "2003-06-19T13:55:00+00:00",
"revision_history": [
{
"date": "2003-06-19T13:55:00+00:00",
"number": "1",
"summary": "Initial version"
},
{
"date": "2003-06-19T00:00:00+00:00",
"number": "2",
"summary": "Last updated version"
},
{
"date": "2026-01-13T20:57:17+00:00",
"number": "3",
"summary": "Last generated version"
}
],
"status": "final",
"version": "3"
}
},
"product_tree": {
"branches": [
{
"branches": [
{
"branches": [
{
"category": "product_name",
"name": "Red Hat Enterprise Linux AS (Advanced Server) version 2.1 ",
"product": {
"name": "Red Hat Enterprise Linux AS (Advanced Server) version 2.1 ",
"product_id": "Red Hat Enterprise Linux AS (Advanced Server) version 2.1 ",
"product_identification_helper": {
"cpe": "cpe:/o:redhat:enterprise_linux:2.1::as"
}
}
},
{
"category": "product_name",
"name": "Red Hat Enterprise Linux ES version 2.1",
"product": {
"name": "Red Hat Enterprise Linux ES version 2.1",
"product_id": "Red Hat Enterprise Linux ES version 2.1",
"product_identification_helper": {
"cpe": "cpe:/o:redhat:enterprise_linux:2.1::es"
}
}
},
{
"category": "product_name",
"name": "Red Hat Enterprise Linux WS version 2.1",
"product": {
"name": "Red Hat Enterprise Linux WS version 2.1",
"product_id": "Red Hat Enterprise Linux WS version 2.1",
"product_identification_helper": {
"cpe": "cpe:/o:redhat:enterprise_linux:2.1::ws"
}
}
}
],
"category": "product_family",
"name": "Red Hat Enterprise Linux"
}
],
"category": "vendor",
"name": "Red Hat"
}
]
},
"vulnerabilities": [
{
"cve": "CVE-2001-1572",
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "1616709"
}
],
"notes": [
{
"category": "description",
"text": "The MAC module in Netfilter in Linux kernel 2.4.1 through 2.4.11, when configured to filter based on MAC addresses, allows remote attackers to bypass packet filters via small packets.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "security flaw",
"title": "Vulnerability summary"
}
],
"product_status": {
"fixed": [
"Red Hat Enterprise Linux AS (Advanced Server) version 2.1 ",
"Red Hat Enterprise Linux ES version 2.1",
"Red Hat Enterprise Linux WS version 2.1"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2001-1572"
},
{
"category": "external",
"summary": "RHBZ#1616709",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=1616709"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2001-1572",
"url": "https://www.cve.org/CVERecord?id=CVE-2001-1572"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2001-1572",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2001-1572"
}
],
"release_date": "2002-08-27T00:00:00+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2003-06-19T13:55:00+00:00",
"details": "Release notes, driver notes, and driver disks for this update are available\nat the following URL:\n\nhttp://www.redhat.com/support/errata/rhel/\n\nBefore applying this update, make sure all previously released errata\nrelevant to your system have been applied.\n\nThe procedure for upgrading the kernel manually is documented at:\n\nhttp://www.redhat.com/support/docs/howto/kernel-upgrade/\n\nPlease read the directions for your architecture carefully before\nproceeding with the kernel upgrade.\n\nPlease note that this update is also available via Red Hat Network. Many\npeople find this to be an easier way to apply updates. To use Red Hat\nNetwork, launch the Red Hat Update Agent with the following command:\n\nup2date\n\nThis will start an interactive process that will result in the appropriate\nRPMs being upgraded on your system. Note that you need to select the kernel\nexplicitly on default configurations of up2date.",
"product_ids": [
"Red Hat Enterprise Linux AS (Advanced Server) version 2.1 ",
"Red Hat Enterprise Linux ES version 2.1",
"Red Hat Enterprise Linux WS version 2.1"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2003:195"
}
],
"threats": [
{
"category": "impact",
"details": "Moderate"
}
],
"title": "security flaw"
},
{
"cve": "CVE-2003-0247",
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "1617008"
}
],
"notes": [
{
"category": "description",
"text": "Unknown vulnerability in the TTY layer of the Linux kernel 2.4 allows attackers to cause a denial of service (\"kernel oops\").",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "security flaw",
"title": "Vulnerability summary"
}
],
"product_status": {
"fixed": [
"Red Hat Enterprise Linux AS (Advanced Server) version 2.1 ",
"Red Hat Enterprise Linux ES version 2.1",
"Red Hat Enterprise Linux WS version 2.1"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2003-0247"
},
{
"category": "external",
"summary": "RHBZ#1617008",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=1617008"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2003-0247",
"url": "https://www.cve.org/CVERecord?id=CVE-2003-0247"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2003-0247",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2003-0247"
}
],
"release_date": "2003-06-03T00:00:00+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2003-06-19T13:55:00+00:00",
"details": "Release notes, driver notes, and driver disks for this update are available\nat the following URL:\n\nhttp://www.redhat.com/support/errata/rhel/\n\nBefore applying this update, make sure all previously released errata\nrelevant to your system have been applied.\n\nThe procedure for upgrading the kernel manually is documented at:\n\nhttp://www.redhat.com/support/docs/howto/kernel-upgrade/\n\nPlease read the directions for your architecture carefully before\nproceeding with the kernel upgrade.\n\nPlease note that this update is also available via Red Hat Network. Many\npeople find this to be an easier way to apply updates. To use Red Hat\nNetwork, launch the Red Hat Update Agent with the following command:\n\nup2date\n\nThis will start an interactive process that will result in the appropriate\nRPMs being upgraded on your system. Note that you need to select the kernel\nexplicitly on default configurations of up2date.",
"product_ids": [
"Red Hat Enterprise Linux AS (Advanced Server) version 2.1 ",
"Red Hat Enterprise Linux ES version 2.1",
"Red Hat Enterprise Linux WS version 2.1"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2003:195"
}
],
"threats": [
{
"category": "impact",
"details": "Important"
}
],
"title": "security flaw"
},
{
"cve": "CVE-2003-0248",
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "1617009"
}
],
"notes": [
{
"category": "description",
"text": "The mxcsr code in Linux kernel 2.4 allows attackers to modify CPU state registers via a malformed address.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "security flaw",
"title": "Vulnerability summary"
}
],
"product_status": {
"fixed": [
"Red Hat Enterprise Linux AS (Advanced Server) version 2.1 ",
"Red Hat Enterprise Linux ES version 2.1",
"Red Hat Enterprise Linux WS version 2.1"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2003-0248"
},
{
"category": "external",
"summary": "RHBZ#1617009",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=1617009"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2003-0248",
"url": "https://www.cve.org/CVERecord?id=CVE-2003-0248"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2003-0248",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2003-0248"
}
],
"release_date": "2003-06-03T00:00:00+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2003-06-19T13:55:00+00:00",
"details": "Release notes, driver notes, and driver disks for this update are available\nat the following URL:\n\nhttp://www.redhat.com/support/errata/rhel/\n\nBefore applying this update, make sure all previously released errata\nrelevant to your system have been applied.\n\nThe procedure for upgrading the kernel manually is documented at:\n\nhttp://www.redhat.com/support/docs/howto/kernel-upgrade/\n\nPlease read the directions for your architecture carefully before\nproceeding with the kernel upgrade.\n\nPlease note that this update is also available via Red Hat Network. Many\npeople find this to be an easier way to apply updates. To use Red Hat\nNetwork, launch the Red Hat Update Agent with the following command:\n\nup2date\n\nThis will start an interactive process that will result in the appropriate\nRPMs being upgraded on your system. Note that you need to select the kernel\nexplicitly on default configurations of up2date.",
"product_ids": [
"Red Hat Enterprise Linux AS (Advanced Server) version 2.1 ",
"Red Hat Enterprise Linux ES version 2.1",
"Red Hat Enterprise Linux WS version 2.1"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2003:195"
}
],
"threats": [
{
"category": "impact",
"details": "Moderate"
}
],
"title": "security flaw"
},
{
"cve": "CVE-2003-0364",
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "1617022"
}
],
"notes": [
{
"category": "description",
"text": "The TCP/IP fragment reassembly handling in the Linux kernel 2.4 allows remote attackers to cause a denial of service (CPU consumption) via certain packets that cause a large number of hash table collisions.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "security flaw",
"title": "Vulnerability summary"
}
],
"product_status": {
"fixed": [
"Red Hat Enterprise Linux AS (Advanced Server) version 2.1 ",
"Red Hat Enterprise Linux ES version 2.1",
"Red Hat Enterprise Linux WS version 2.1"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2003-0364"
},
{
"category": "external",
"summary": "RHBZ#1617022",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=1617022"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2003-0364",
"url": "https://www.cve.org/CVERecord?id=CVE-2003-0364"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2003-0364",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2003-0364"
}
],
"release_date": "2003-06-03T00:00:00+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2003-06-19T13:55:00+00:00",
"details": "Release notes, driver notes, and driver disks for this update are available\nat the following URL:\n\nhttp://www.redhat.com/support/errata/rhel/\n\nBefore applying this update, make sure all previously released errata\nrelevant to your system have been applied.\n\nThe procedure for upgrading the kernel manually is documented at:\n\nhttp://www.redhat.com/support/docs/howto/kernel-upgrade/\n\nPlease read the directions for your architecture carefully before\nproceeding with the kernel upgrade.\n\nPlease note that this update is also available via Red Hat Network. Many\npeople find this to be an easier way to apply updates. To use Red Hat\nNetwork, launch the Red Hat Update Agent with the following command:\n\nup2date\n\nThis will start an interactive process that will result in the appropriate\nRPMs being upgraded on your system. Note that you need to select the kernel\nexplicitly on default configurations of up2date.",
"product_ids": [
"Red Hat Enterprise Linux AS (Advanced Server) version 2.1 ",
"Red Hat Enterprise Linux ES version 2.1",
"Red Hat Enterprise Linux WS version 2.1"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2003:195"
}
],
"threats": [
{
"category": "impact",
"details": "Important"
}
],
"title": "security flaw"
}
]
}
RHSA-2003_187
Vulnerability from csaf_redhat - Published: 2003-06-03 10:40 - Updated: 2024-11-21 22:47Summary
Red Hat Security Advisory: : Updated 2.4 kernel fixes vulnerabilities and driver bugs
Severity
Important
Notes
Topic: Updated kernel packages are now available that contain fixes for security
vulnerabilities as well as fixes for bugs in the audigy, cmd640 IDE, and USB
drivers.
Details: The Linux kernel handles the basic functions of the operating system.
Several security issues have been found that affect the Linux kernel:
Al Viro found a security issue in the tty layer whereby any user could
cause a kernel oops. The Common Vulnerabilities and Exposures project
(cve.mitre.org) has assigned the name CAN-2002-0247 to this issue.
Andrea Arcangeli found an issue in the low-level mxcsr code in which a
malformed address would leave garbage in cpu state registers. The Common
Vulnerabilities and Exposures project (cve.mitre.org) has assigned the name
CAN-2003-0248 to this issue.
The TCP/IP fragment reassembly handling allows remote attackers to cause
a denial of service (CPU consumption) via packets that cause a large number
of hash table collisions, a vulnerability similar to CAN-2003-0244. The
Common Vulnerabilities and Exposures project (cve.mitre.org) has assigned
the name CAN-2003-0364 to this issue.
It is recommended that users upgrade to these erratum kernels, which
contain patches to correct these vulnerabilities. In addition, these
kernels fix a number of bugs:
Driver bugs fixes are included for the Silicon Image IDE driver, the USB
ohci driver, the Audigy driver, and the driver for the Olympus Camedia
digital camera.
A fix written by Andrew Morton is included to address a system stall caused
by file I/O in rare cases.
An updated fix corrects some bugs in the ptrace security fix for Red Hat
Linux 7.1, 7.2, 7.3, and 8.0. Note that these bugs were functionality
limitations, not additional security vulnerabilities.
Updated fixes for the ioperm security issue are also included.
A potential data corruption scenario has been identified. This
scenario can occur under heavy, complex I/O loads. The scenario
only occurs while performing memory mapped file I/O, where the
file is simultaneously unlinked and the corresponding file blocks
reallocated. Furthermore, the memory mapped writes must be to a
partial page at the end of a file on an ext3 file system. As such,
Red Hat considers this an unlikely scenario.
Red Hat Linux kernel erratum RHSA-2003:172 exposed a bug in the quota
packages for Red Hat Linux 7.1, 7.2 and 7.3; a fixed quota package is also
included in this erratum.
Terms of Use: This content is licensed under the Creative Commons Attribution 4.0 International License (https://creativecommons.org/licenses/by/4.0/). If you distribute this content, or a modified version of it, you must provide attribution to Red Hat Inc. and provide a link to the original.
Unknown vulnerability in the TTY layer of the Linux kernel 2.4 allows attackers to cause a denial of service ("kernel oops").
Affected products
Fixed
5 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
|
Red Hat Linux 7.1
Red Hat / Red Hat Linux
|
cpe:/o:redhat:linux:7.1
|
— |
Vendor Fix
fix
|
|
Red Hat Linux 7.2
Red Hat / Red Hat Linux
|
cpe:/o:redhat:linux:7.2
|
— |
Vendor Fix
fix
|
|
Red Hat Linux 7.3
Red Hat / Red Hat Linux
|
cpe:/o:redhat:linux:7.3
|
— |
Vendor Fix
fix
|
|
Red Hat Linux 8.0
Red Hat / Red Hat Linux
|
cpe:/o:redhat:linux:8.0
|
— |
Vendor Fix
fix
|
|
Red Hat Linux 9
Red Hat / Red Hat Linux
|
cpe:/o:redhat:linux:9
|
— |
Vendor Fix
fix
|
Threats
Impact
Important
The mxcsr code in Linux kernel 2.4 allows attackers to modify CPU state registers via a malformed address.
Affected products
Fixed
5 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
|
Red Hat Linux 7.1
Red Hat / Red Hat Linux
|
cpe:/o:redhat:linux:7.1
|
— |
Vendor Fix
fix
|
|
Red Hat Linux 7.2
Red Hat / Red Hat Linux
|
cpe:/o:redhat:linux:7.2
|
— |
Vendor Fix
fix
|
|
Red Hat Linux 7.3
Red Hat / Red Hat Linux
|
cpe:/o:redhat:linux:7.3
|
— |
Vendor Fix
fix
|
|
Red Hat Linux 8.0
Red Hat / Red Hat Linux
|
cpe:/o:redhat:linux:8.0
|
— |
Vendor Fix
fix
|
|
Red Hat Linux 9
Red Hat / Red Hat Linux
|
cpe:/o:redhat:linux:9
|
— |
Vendor Fix
fix
|
Threats
Impact
Moderate
The TCP/IP fragment reassembly handling in the Linux kernel 2.4 allows remote attackers to cause a denial of service (CPU consumption) via certain packets that cause a large number of hash table collisions.
Affected products
Fixed
5 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
|
Red Hat Linux 7.1
Red Hat / Red Hat Linux
|
cpe:/o:redhat:linux:7.1
|
— |
Vendor Fix
fix
|
|
Red Hat Linux 7.2
Red Hat / Red Hat Linux
|
cpe:/o:redhat:linux:7.2
|
— |
Vendor Fix
fix
|
|
Red Hat Linux 7.3
Red Hat / Red Hat Linux
|
cpe:/o:redhat:linux:7.3
|
— |
Vendor Fix
fix
|
|
Red Hat Linux 8.0
Red Hat / Red Hat Linux
|
cpe:/o:redhat:linux:8.0
|
— |
Vendor Fix
fix
|
|
Red Hat Linux 9
Red Hat / Red Hat Linux
|
cpe:/o:redhat:linux:9
|
— |
Vendor Fix
fix
|
Threats
Impact
Important
References
32 references
{
"document": {
"aggregate_severity": {
"namespace": "https://access.redhat.com/security/updates/classification/",
"text": "Important"
},
"category": "csaf_security_advisory",
"csaf_version": "2.0",
"distribution": {
"text": "Copyright \u00a9 Red Hat, Inc. All rights reserved.",
"tlp": {
"label": "WHITE",
"url": "https://www.first.org/tlp/"
}
},
"lang": "en",
"notes": [
{
"category": "summary",
"text": "Updated kernel packages are now available that contain fixes for security\nvulnerabilities as well as fixes for bugs in the audigy, cmd640 IDE, and USB\ndrivers.",
"title": "Topic"
},
{
"category": "general",
"text": "The Linux kernel handles the basic functions of the operating system.\n\nSeveral security issues have been found that affect the Linux kernel:\n\nAl Viro found a security issue in the tty layer whereby any user could\ncause a kernel oops. The Common Vulnerabilities and Exposures project\n(cve.mitre.org) has assigned the name CAN-2002-0247 to this issue.\n\nAndrea Arcangeli found an issue in the low-level mxcsr code in which a\nmalformed address would leave garbage in cpu state registers. The Common\nVulnerabilities and Exposures project (cve.mitre.org) has assigned the name\nCAN-2003-0248 to this issue.\n\nThe TCP/IP fragment reassembly handling allows remote attackers to cause\na denial of service (CPU consumption) via packets that cause a large number\nof hash table collisions, a vulnerability similar to CAN-2003-0244. The\nCommon Vulnerabilities and Exposures project (cve.mitre.org) has assigned\nthe name CAN-2003-0364 to this issue.\n\nIt is recommended that users upgrade to these erratum kernels, which\ncontain patches to correct these vulnerabilities. In addition, these\nkernels fix a number of bugs:\n\nDriver bugs fixes are included for the Silicon Image IDE driver, the USB\nohci driver, the Audigy driver, and the driver for the Olympus Camedia\ndigital camera.\n\nA fix written by Andrew Morton is included to address a system stall caused\nby file I/O in rare cases.\n\nAn updated fix corrects some bugs in the ptrace security fix for Red Hat\nLinux 7.1, 7.2, 7.3, and 8.0. Note that these bugs were functionality\nlimitations, not additional security vulnerabilities.\n\nUpdated fixes for the ioperm security issue are also included.\n\nA potential data corruption scenario has been identified. This\nscenario can occur under heavy, complex I/O loads. The scenario\nonly occurs while performing memory mapped file I/O, where the\nfile is simultaneously unlinked and the corresponding file blocks\nreallocated. Furthermore, the memory mapped writes must be to a\npartial page at the end of a file on an ext3 file system. As such,\nRed Hat considers this an unlikely scenario.\n\nRed Hat Linux kernel erratum RHSA-2003:172 exposed a bug in the quota\npackages for Red Hat Linux 7.1, 7.2 and 7.3; a fixed quota package is also\nincluded in this erratum.",
"title": "Details"
},
{
"category": "legal_disclaimer",
"text": "This content is licensed under the Creative Commons Attribution 4.0 International License (https://creativecommons.org/licenses/by/4.0/). If you distribute this content, or a modified version of it, you must provide attribution to Red Hat Inc. and provide a link to the original.",
"title": "Terms of Use"
}
],
"publisher": {
"category": "vendor",
"contact_details": "https://access.redhat.com/security/team/contact/",
"issuing_authority": "Red Hat Product Security is responsible for vulnerability handling across all Red Hat products and services.",
"name": "Red Hat Product Security",
"namespace": "https://www.redhat.com"
},
"references": [
{
"category": "self",
"summary": "https://access.redhat.com/errata/RHSA-2003:187",
"url": "https://access.redhat.com/errata/RHSA-2003:187"
},
{
"category": "external",
"summary": "72604",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=72604"
},
{
"category": "external",
"summary": "90890",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=90890"
},
{
"category": "external",
"summary": "90920",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=90920"
},
{
"category": "external",
"summary": "90922",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=90922"
},
{
"category": "external",
"summary": "90936",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=90936"
},
{
"category": "external",
"summary": "90939",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=90939"
},
{
"category": "external",
"summary": "90979",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=90979"
},
{
"category": "external",
"summary": "90982",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=90982"
},
{
"category": "external",
"summary": "90985",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=90985"
},
{
"category": "external",
"summary": "91099",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=91099"
},
{
"category": "external",
"summary": "91112",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=91112"
},
{
"category": "external",
"summary": "91248",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=91248"
},
{
"category": "external",
"summary": "91432",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=91432"
},
{
"category": "external",
"summary": "91489",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=91489"
},
{
"category": "external",
"summary": "91561",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=91561"
},
{
"category": "external",
"summary": "91580",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=91580"
},
{
"category": "external",
"summary": "91585",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=91585"
},
{
"category": "external",
"summary": "91650",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=91650"
},
{
"category": "self",
"summary": "Canonical URL",
"url": "https://security.access.redhat.com/data/csaf/v2/advisories/2003/rhsa-2003_187.json"
}
],
"title": "Red Hat Security Advisory: : Updated 2.4 kernel fixes vulnerabilities and driver bugs",
"tracking": {
"current_release_date": "2024-11-21T22:47:08+00:00",
"generator": {
"date": "2024-11-21T22:47:08+00:00",
"engine": {
"name": "Red Hat SDEngine",
"version": "4.2.1"
}
},
"id": "RHSA-2003:187",
"initial_release_date": "2003-06-03T10:40:00+00:00",
"revision_history": [
{
"date": "2003-06-03T10:40:00+00:00",
"number": "1",
"summary": "Initial version"
},
{
"date": "2003-05-22T00:00:00+00:00",
"number": "2",
"summary": "Last updated version"
},
{
"date": "2024-11-21T22:47:08+00:00",
"number": "3",
"summary": "Last generated version"
}
],
"status": "final",
"version": "3"
}
},
"product_tree": {
"branches": [
{
"branches": [
{
"branches": [
{
"category": "product_name",
"name": "Red Hat Linux 7.1",
"product": {
"name": "Red Hat Linux 7.1",
"product_id": "Red Hat Linux 7.1",
"product_identification_helper": {
"cpe": "cpe:/o:redhat:linux:7.1"
}
}
},
{
"category": "product_name",
"name": "Red Hat Linux 7.2",
"product": {
"name": "Red Hat Linux 7.2",
"product_id": "Red Hat Linux 7.2",
"product_identification_helper": {
"cpe": "cpe:/o:redhat:linux:7.2"
}
}
},
{
"category": "product_name",
"name": "Red Hat Linux 7.3",
"product": {
"name": "Red Hat Linux 7.3",
"product_id": "Red Hat Linux 7.3",
"product_identification_helper": {
"cpe": "cpe:/o:redhat:linux:7.3"
}
}
},
{
"category": "product_name",
"name": "Red Hat Linux 8.0",
"product": {
"name": "Red Hat Linux 8.0",
"product_id": "Red Hat Linux 8.0",
"product_identification_helper": {
"cpe": "cpe:/o:redhat:linux:8.0"
}
}
},
{
"category": "product_name",
"name": "Red Hat Linux 9",
"product": {
"name": "Red Hat Linux 9",
"product_id": "Red Hat Linux 9",
"product_identification_helper": {
"cpe": "cpe:/o:redhat:linux:9"
}
}
}
],
"category": "product_family",
"name": "Red Hat Linux"
}
],
"category": "vendor",
"name": "Red Hat"
}
]
},
"vulnerabilities": [
{
"cve": "CVE-2003-0247",
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "1617008"
}
],
"notes": [
{
"category": "description",
"text": "Unknown vulnerability in the TTY layer of the Linux kernel 2.4 allows attackers to cause a denial of service (\"kernel oops\").",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "security flaw",
"title": "Vulnerability summary"
}
],
"product_status": {
"fixed": [
"Red Hat Linux 7.1",
"Red Hat Linux 7.2",
"Red Hat Linux 7.3",
"Red Hat Linux 8.0",
"Red Hat Linux 9"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2003-0247"
},
{
"category": "external",
"summary": "RHBZ#1617008",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=1617008"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2003-0247",
"url": "https://www.cve.org/CVERecord?id=CVE-2003-0247"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2003-0247",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2003-0247"
}
],
"release_date": "2003-06-03T00:00:00+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2003-06-03T10:40:00+00:00",
"details": "Before applying this update, make sure all previously released errata\nrelevant to your system have been applied.\n\nTo use Red Hat Network to upgrade the kernel, launch the Red Hat Update\nAgent with the following command:\n\nup2date\n\nThis will start an interactive process that will result in the appropriate\nRPMs being upgraded on your system. Note that you need to select the\nkernel explicitly if you are using the default configuration of up2date.\n\nTo install kernel packages manually, use \"rpm -ivh \u003cpackage\u003e\" and\nmodify system settings to boot the kernel you have installed. To\ndo this, edit /boot/grub/grub.conf and change the default entry to\n\"default=0\" (or, if you have chosen to use LILO as your boot loader,\nedit /etc/lilo.conf and run lilo)\n\nDo not use \"rpm -Uvh\" as that will remove your running kernel binaries\nfrom your system. You may use \"rpm -e\" to remove old kernels after\ndetermining that the new kernel functions properly on your system.",
"product_ids": [
"Red Hat Linux 7.1",
"Red Hat Linux 7.2",
"Red Hat Linux 7.3",
"Red Hat Linux 8.0",
"Red Hat Linux 9"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2003:187"
}
],
"threats": [
{
"category": "impact",
"details": "Important"
}
],
"title": "security flaw"
},
{
"cve": "CVE-2003-0248",
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "1617009"
}
],
"notes": [
{
"category": "description",
"text": "The mxcsr code in Linux kernel 2.4 allows attackers to modify CPU state registers via a malformed address.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "security flaw",
"title": "Vulnerability summary"
}
],
"product_status": {
"fixed": [
"Red Hat Linux 7.1",
"Red Hat Linux 7.2",
"Red Hat Linux 7.3",
"Red Hat Linux 8.0",
"Red Hat Linux 9"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2003-0248"
},
{
"category": "external",
"summary": "RHBZ#1617009",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=1617009"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2003-0248",
"url": "https://www.cve.org/CVERecord?id=CVE-2003-0248"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2003-0248",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2003-0248"
}
],
"release_date": "2003-06-03T00:00:00+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2003-06-03T10:40:00+00:00",
"details": "Before applying this update, make sure all previously released errata\nrelevant to your system have been applied.\n\nTo use Red Hat Network to upgrade the kernel, launch the Red Hat Update\nAgent with the following command:\n\nup2date\n\nThis will start an interactive process that will result in the appropriate\nRPMs being upgraded on your system. Note that you need to select the\nkernel explicitly if you are using the default configuration of up2date.\n\nTo install kernel packages manually, use \"rpm -ivh \u003cpackage\u003e\" and\nmodify system settings to boot the kernel you have installed. To\ndo this, edit /boot/grub/grub.conf and change the default entry to\n\"default=0\" (or, if you have chosen to use LILO as your boot loader,\nedit /etc/lilo.conf and run lilo)\n\nDo not use \"rpm -Uvh\" as that will remove your running kernel binaries\nfrom your system. You may use \"rpm -e\" to remove old kernels after\ndetermining that the new kernel functions properly on your system.",
"product_ids": [
"Red Hat Linux 7.1",
"Red Hat Linux 7.2",
"Red Hat Linux 7.3",
"Red Hat Linux 8.0",
"Red Hat Linux 9"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2003:187"
}
],
"threats": [
{
"category": "impact",
"details": "Moderate"
}
],
"title": "security flaw"
},
{
"cve": "CVE-2003-0364",
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "1617022"
}
],
"notes": [
{
"category": "description",
"text": "The TCP/IP fragment reassembly handling in the Linux kernel 2.4 allows remote attackers to cause a denial of service (CPU consumption) via certain packets that cause a large number of hash table collisions.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "security flaw",
"title": "Vulnerability summary"
}
],
"product_status": {
"fixed": [
"Red Hat Linux 7.1",
"Red Hat Linux 7.2",
"Red Hat Linux 7.3",
"Red Hat Linux 8.0",
"Red Hat Linux 9"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2003-0364"
},
{
"category": "external",
"summary": "RHBZ#1617022",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=1617022"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2003-0364",
"url": "https://www.cve.org/CVERecord?id=CVE-2003-0364"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2003-0364",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2003-0364"
}
],
"release_date": "2003-06-03T00:00:00+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2003-06-03T10:40:00+00:00",
"details": "Before applying this update, make sure all previously released errata\nrelevant to your system have been applied.\n\nTo use Red Hat Network to upgrade the kernel, launch the Red Hat Update\nAgent with the following command:\n\nup2date\n\nThis will start an interactive process that will result in the appropriate\nRPMs being upgraded on your system. Note that you need to select the\nkernel explicitly if you are using the default configuration of up2date.\n\nTo install kernel packages manually, use \"rpm -ivh \u003cpackage\u003e\" and\nmodify system settings to boot the kernel you have installed. To\ndo this, edit /boot/grub/grub.conf and change the default entry to\n\"default=0\" (or, if you have chosen to use LILO as your boot loader,\nedit /etc/lilo.conf and run lilo)\n\nDo not use \"rpm -Uvh\" as that will remove your running kernel binaries\nfrom your system. You may use \"rpm -e\" to remove old kernels after\ndetermining that the new kernel functions properly on your system.",
"product_ids": [
"Red Hat Linux 7.1",
"Red Hat Linux 7.2",
"Red Hat Linux 7.3",
"Red Hat Linux 8.0",
"Red Hat Linux 9"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2003:187"
}
],
"threats": [
{
"category": "impact",
"details": "Important"
}
],
"title": "security flaw"
}
]
}
RHSA-2003_195
Vulnerability from csaf_redhat - Published: 2003-06-19 13:55 - Updated: 2024-11-21 22:47Summary
Red Hat Security Advisory: kernel security update
Severity
Important
Notes
Topic: Updated kernel packages for Red Hat Enterprise Linux are now available
which address several security vulnerabilities.
Details: The Linux kernel handles the basic functions of the operating system.
Several security issues have been found that affect the Linux kernel:
Al Viro found a security issue in the tty layer whereby any user could
cause a kernel oops. The Common Vulnerabilities and Exposures project
(cve.mitre.org) has assigned the name CAN-2003-0247 to this issue.
Andrea Arcangeli found an issue in the low-level mxcsr code in which a
malformed address would leave garbage in cpu state registers. The Common
Vulnerabilities and Exposures project (cve.mitre.org) has assigned the
name CAN-2003-0248 to this issue.
The TCP/IP fragment reassembly handling allows remote attackers to cause a
denial of service (CPU consumption) via packets that cause a large number
of hash table collisions, a vulnerability similar to CAN-2003-0244. The
Common Vulnerabilities and Exposures project (cve.mitre.org) has assigned
the name CAN-2003-0364 to this issue.
These kernels also contain updated fixes for the ioperm security issue, as
well as fixes for a number of bugs.
It is recommended that users upgrade to these erratum kernels, which
contain patches to correct these vulnerabilities.
Terms of Use: This content is licensed under the Creative Commons Attribution 4.0 International License (https://creativecommons.org/licenses/by/4.0/). If you distribute this content, or a modified version of it, you must provide attribution to Red Hat Inc. and provide a link to the original.
The MAC module in Netfilter in Linux kernel 2.4.1 through 2.4.11, when configured to filter based on MAC addresses, allows remote attackers to bypass packet filters via small packets.
Affected products
Fixed
3 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
|
Red Hat Enterprise Linux AS (Advanced Server) version 2.1
Red Hat / Red Hat Enterprise Linux
|
cpe:/o:redhat:enterprise_linux:2.1::as
|
— |
Vendor Fix
fix
|
|
Red Hat Enterprise Linux ES version 2.1
Red Hat / Red Hat Enterprise Linux
|
cpe:/o:redhat:enterprise_linux:2.1::es
|
— |
Vendor Fix
fix
|
|
Red Hat Enterprise Linux WS version 2.1
Red Hat / Red Hat Enterprise Linux
|
cpe:/o:redhat:enterprise_linux:2.1::ws
|
— |
Vendor Fix
fix
|
Threats
Impact
Moderate
Unknown vulnerability in the TTY layer of the Linux kernel 2.4 allows attackers to cause a denial of service ("kernel oops").
Affected products
Fixed
3 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
|
Red Hat Enterprise Linux AS (Advanced Server) version 2.1
Red Hat / Red Hat Enterprise Linux
|
cpe:/o:redhat:enterprise_linux:2.1::as
|
— |
Vendor Fix
fix
|
|
Red Hat Enterprise Linux ES version 2.1
Red Hat / Red Hat Enterprise Linux
|
cpe:/o:redhat:enterprise_linux:2.1::es
|
— |
Vendor Fix
fix
|
|
Red Hat Enterprise Linux WS version 2.1
Red Hat / Red Hat Enterprise Linux
|
cpe:/o:redhat:enterprise_linux:2.1::ws
|
— |
Vendor Fix
fix
|
Threats
Impact
Important
The mxcsr code in Linux kernel 2.4 allows attackers to modify CPU state registers via a malformed address.
Affected products
Fixed
3 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
|
Red Hat Enterprise Linux AS (Advanced Server) version 2.1
Red Hat / Red Hat Enterprise Linux
|
cpe:/o:redhat:enterprise_linux:2.1::as
|
— |
Vendor Fix
fix
|
|
Red Hat Enterprise Linux ES version 2.1
Red Hat / Red Hat Enterprise Linux
|
cpe:/o:redhat:enterprise_linux:2.1::es
|
— |
Vendor Fix
fix
|
|
Red Hat Enterprise Linux WS version 2.1
Red Hat / Red Hat Enterprise Linux
|
cpe:/o:redhat:enterprise_linux:2.1::ws
|
— |
Vendor Fix
fix
|
Threats
Impact
Moderate
The TCP/IP fragment reassembly handling in the Linux kernel 2.4 allows remote attackers to cause a denial of service (CPU consumption) via certain packets that cause a large number of hash table collisions.
Affected products
Fixed
3 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
|
Red Hat Enterprise Linux AS (Advanced Server) version 2.1
Red Hat / Red Hat Enterprise Linux
|
cpe:/o:redhat:enterprise_linux:2.1::as
|
— |
Vendor Fix
fix
|
|
Red Hat Enterprise Linux ES version 2.1
Red Hat / Red Hat Enterprise Linux
|
cpe:/o:redhat:enterprise_linux:2.1::es
|
— |
Vendor Fix
fix
|
|
Red Hat Enterprise Linux WS version 2.1
Red Hat / Red Hat Enterprise Linux
|
cpe:/o:redhat:enterprise_linux:2.1::ws
|
— |
Vendor Fix
fix
|
Threats
Impact
Important
References
19 references
{
"document": {
"aggregate_severity": {
"namespace": "https://access.redhat.com/security/updates/classification/",
"text": "Important"
},
"category": "csaf_security_advisory",
"csaf_version": "2.0",
"distribution": {
"text": "Copyright \u00a9 Red Hat, Inc. All rights reserved.",
"tlp": {
"label": "WHITE",
"url": "https://www.first.org/tlp/"
}
},
"lang": "en",
"notes": [
{
"category": "summary",
"text": "Updated kernel packages for Red Hat Enterprise Linux are now available\nwhich address several security vulnerabilities.",
"title": "Topic"
},
{
"category": "general",
"text": "The Linux kernel handles the basic functions of the operating system. \n\nSeveral security issues have been found that affect the Linux kernel:\n\nAl Viro found a security issue in the tty layer whereby any user could\ncause a kernel oops. The Common Vulnerabilities and Exposures project\n(cve.mitre.org) has assigned the name CAN-2003-0247 to this issue.\n\nAndrea Arcangeli found an issue in the low-level mxcsr code in which a\nmalformed address would leave garbage in cpu state registers. The Common\nVulnerabilities and Exposures project (cve.mitre.org) has assigned the\nname CAN-2003-0248 to this issue.\n\nThe TCP/IP fragment reassembly handling allows remote attackers to cause a\ndenial of service (CPU consumption) via packets that cause a large number\nof hash table collisions, a vulnerability similar to CAN-2003-0244. The\nCommon Vulnerabilities and Exposures project (cve.mitre.org) has assigned\nthe name CAN-2003-0364 to this issue.\n\nThese kernels also contain updated fixes for the ioperm security issue, as\nwell as fixes for a number of bugs.\n\nIt is recommended that users upgrade to these erratum kernels, which\ncontain patches to correct these vulnerabilities.",
"title": "Details"
},
{
"category": "legal_disclaimer",
"text": "This content is licensed under the Creative Commons Attribution 4.0 International License (https://creativecommons.org/licenses/by/4.0/). If you distribute this content, or a modified version of it, you must provide attribution to Red Hat Inc. and provide a link to the original.",
"title": "Terms of Use"
}
],
"publisher": {
"category": "vendor",
"contact_details": "https://access.redhat.com/security/team/contact/",
"issuing_authority": "Red Hat Product Security is responsible for vulnerability handling across all Red Hat products and services.",
"name": "Red Hat Product Security",
"namespace": "https://www.redhat.com"
},
"references": [
{
"category": "self",
"summary": "https://access.redhat.com/errata/RHSA-2003:195",
"url": "https://access.redhat.com/errata/RHSA-2003:195"
},
{
"category": "external",
"summary": "https://access.redhat.com/security/updates/classification/#important",
"url": "https://access.redhat.com/security/updates/classification/#important"
},
{
"category": "self",
"summary": "Canonical URL",
"url": "https://security.access.redhat.com/data/csaf/v2/advisories/2003/rhsa-2003_195.json"
}
],
"title": "Red Hat Security Advisory: kernel security update",
"tracking": {
"current_release_date": "2024-11-21T22:47:15+00:00",
"generator": {
"date": "2024-11-21T22:47:15+00:00",
"engine": {
"name": "Red Hat SDEngine",
"version": "4.2.1"
}
},
"id": "RHSA-2003:195",
"initial_release_date": "2003-06-19T13:55:00+00:00",
"revision_history": [
{
"date": "2003-06-19T13:55:00+00:00",
"number": "1",
"summary": "Initial version"
},
{
"date": "2003-06-19T00:00:00+00:00",
"number": "2",
"summary": "Last updated version"
},
{
"date": "2024-11-21T22:47:15+00:00",
"number": "3",
"summary": "Last generated version"
}
],
"status": "final",
"version": "3"
}
},
"product_tree": {
"branches": [
{
"branches": [
{
"branches": [
{
"category": "product_name",
"name": "Red Hat Enterprise Linux AS (Advanced Server) version 2.1 ",
"product": {
"name": "Red Hat Enterprise Linux AS (Advanced Server) version 2.1 ",
"product_id": "Red Hat Enterprise Linux AS (Advanced Server) version 2.1 ",
"product_identification_helper": {
"cpe": "cpe:/o:redhat:enterprise_linux:2.1::as"
}
}
},
{
"category": "product_name",
"name": "Red Hat Enterprise Linux ES version 2.1",
"product": {
"name": "Red Hat Enterprise Linux ES version 2.1",
"product_id": "Red Hat Enterprise Linux ES version 2.1",
"product_identification_helper": {
"cpe": "cpe:/o:redhat:enterprise_linux:2.1::es"
}
}
},
{
"category": "product_name",
"name": "Red Hat Enterprise Linux WS version 2.1",
"product": {
"name": "Red Hat Enterprise Linux WS version 2.1",
"product_id": "Red Hat Enterprise Linux WS version 2.1",
"product_identification_helper": {
"cpe": "cpe:/o:redhat:enterprise_linux:2.1::ws"
}
}
}
],
"category": "product_family",
"name": "Red Hat Enterprise Linux"
}
],
"category": "vendor",
"name": "Red Hat"
}
]
},
"vulnerabilities": [
{
"cve": "CVE-2001-1572",
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "1616709"
}
],
"notes": [
{
"category": "description",
"text": "The MAC module in Netfilter in Linux kernel 2.4.1 through 2.4.11, when configured to filter based on MAC addresses, allows remote attackers to bypass packet filters via small packets.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "security flaw",
"title": "Vulnerability summary"
}
],
"product_status": {
"fixed": [
"Red Hat Enterprise Linux AS (Advanced Server) version 2.1 ",
"Red Hat Enterprise Linux ES version 2.1",
"Red Hat Enterprise Linux WS version 2.1"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2001-1572"
},
{
"category": "external",
"summary": "RHBZ#1616709",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=1616709"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2001-1572",
"url": "https://www.cve.org/CVERecord?id=CVE-2001-1572"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2001-1572",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2001-1572"
}
],
"release_date": "2002-08-27T00:00:00+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2003-06-19T13:55:00+00:00",
"details": "Release notes, driver notes, and driver disks for this update are available\nat the following URL:\n\nhttp://www.redhat.com/support/errata/rhel/\n\nBefore applying this update, make sure all previously released errata\nrelevant to your system have been applied.\n\nThe procedure for upgrading the kernel manually is documented at:\n\nhttp://www.redhat.com/support/docs/howto/kernel-upgrade/\n\nPlease read the directions for your architecture carefully before\nproceeding with the kernel upgrade.\n\nPlease note that this update is also available via Red Hat Network. Many\npeople find this to be an easier way to apply updates. To use Red Hat\nNetwork, launch the Red Hat Update Agent with the following command:\n\nup2date\n\nThis will start an interactive process that will result in the appropriate\nRPMs being upgraded on your system. Note that you need to select the kernel\nexplicitly on default configurations of up2date.",
"product_ids": [
"Red Hat Enterprise Linux AS (Advanced Server) version 2.1 ",
"Red Hat Enterprise Linux ES version 2.1",
"Red Hat Enterprise Linux WS version 2.1"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2003:195"
}
],
"threats": [
{
"category": "impact",
"details": "Moderate"
}
],
"title": "security flaw"
},
{
"cve": "CVE-2003-0247",
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "1617008"
}
],
"notes": [
{
"category": "description",
"text": "Unknown vulnerability in the TTY layer of the Linux kernel 2.4 allows attackers to cause a denial of service (\"kernel oops\").",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "security flaw",
"title": "Vulnerability summary"
}
],
"product_status": {
"fixed": [
"Red Hat Enterprise Linux AS (Advanced Server) version 2.1 ",
"Red Hat Enterprise Linux ES version 2.1",
"Red Hat Enterprise Linux WS version 2.1"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2003-0247"
},
{
"category": "external",
"summary": "RHBZ#1617008",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=1617008"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2003-0247",
"url": "https://www.cve.org/CVERecord?id=CVE-2003-0247"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2003-0247",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2003-0247"
}
],
"release_date": "2003-06-03T00:00:00+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2003-06-19T13:55:00+00:00",
"details": "Release notes, driver notes, and driver disks for this update are available\nat the following URL:\n\nhttp://www.redhat.com/support/errata/rhel/\n\nBefore applying this update, make sure all previously released errata\nrelevant to your system have been applied.\n\nThe procedure for upgrading the kernel manually is documented at:\n\nhttp://www.redhat.com/support/docs/howto/kernel-upgrade/\n\nPlease read the directions for your architecture carefully before\nproceeding with the kernel upgrade.\n\nPlease note that this update is also available via Red Hat Network. Many\npeople find this to be an easier way to apply updates. To use Red Hat\nNetwork, launch the Red Hat Update Agent with the following command:\n\nup2date\n\nThis will start an interactive process that will result in the appropriate\nRPMs being upgraded on your system. Note that you need to select the kernel\nexplicitly on default configurations of up2date.",
"product_ids": [
"Red Hat Enterprise Linux AS (Advanced Server) version 2.1 ",
"Red Hat Enterprise Linux ES version 2.1",
"Red Hat Enterprise Linux WS version 2.1"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2003:195"
}
],
"threats": [
{
"category": "impact",
"details": "Important"
}
],
"title": "security flaw"
},
{
"cve": "CVE-2003-0248",
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "1617009"
}
],
"notes": [
{
"category": "description",
"text": "The mxcsr code in Linux kernel 2.4 allows attackers to modify CPU state registers via a malformed address.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "security flaw",
"title": "Vulnerability summary"
}
],
"product_status": {
"fixed": [
"Red Hat Enterprise Linux AS (Advanced Server) version 2.1 ",
"Red Hat Enterprise Linux ES version 2.1",
"Red Hat Enterprise Linux WS version 2.1"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2003-0248"
},
{
"category": "external",
"summary": "RHBZ#1617009",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=1617009"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2003-0248",
"url": "https://www.cve.org/CVERecord?id=CVE-2003-0248"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2003-0248",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2003-0248"
}
],
"release_date": "2003-06-03T00:00:00+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2003-06-19T13:55:00+00:00",
"details": "Release notes, driver notes, and driver disks for this update are available\nat the following URL:\n\nhttp://www.redhat.com/support/errata/rhel/\n\nBefore applying this update, make sure all previously released errata\nrelevant to your system have been applied.\n\nThe procedure for upgrading the kernel manually is documented at:\n\nhttp://www.redhat.com/support/docs/howto/kernel-upgrade/\n\nPlease read the directions for your architecture carefully before\nproceeding with the kernel upgrade.\n\nPlease note that this update is also available via Red Hat Network. Many\npeople find this to be an easier way to apply updates. To use Red Hat\nNetwork, launch the Red Hat Update Agent with the following command:\n\nup2date\n\nThis will start an interactive process that will result in the appropriate\nRPMs being upgraded on your system. Note that you need to select the kernel\nexplicitly on default configurations of up2date.",
"product_ids": [
"Red Hat Enterprise Linux AS (Advanced Server) version 2.1 ",
"Red Hat Enterprise Linux ES version 2.1",
"Red Hat Enterprise Linux WS version 2.1"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2003:195"
}
],
"threats": [
{
"category": "impact",
"details": "Moderate"
}
],
"title": "security flaw"
},
{
"cve": "CVE-2003-0364",
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "1617022"
}
],
"notes": [
{
"category": "description",
"text": "The TCP/IP fragment reassembly handling in the Linux kernel 2.4 allows remote attackers to cause a denial of service (CPU consumption) via certain packets that cause a large number of hash table collisions.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "security flaw",
"title": "Vulnerability summary"
}
],
"product_status": {
"fixed": [
"Red Hat Enterprise Linux AS (Advanced Server) version 2.1 ",
"Red Hat Enterprise Linux ES version 2.1",
"Red Hat Enterprise Linux WS version 2.1"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2003-0364"
},
{
"category": "external",
"summary": "RHBZ#1617022",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=1617022"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2003-0364",
"url": "https://www.cve.org/CVERecord?id=CVE-2003-0364"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2003-0364",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2003-0364"
}
],
"release_date": "2003-06-03T00:00:00+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2003-06-19T13:55:00+00:00",
"details": "Release notes, driver notes, and driver disks for this update are available\nat the following URL:\n\nhttp://www.redhat.com/support/errata/rhel/\n\nBefore applying this update, make sure all previously released errata\nrelevant to your system have been applied.\n\nThe procedure for upgrading the kernel manually is documented at:\n\nhttp://www.redhat.com/support/docs/howto/kernel-upgrade/\n\nPlease read the directions for your architecture carefully before\nproceeding with the kernel upgrade.\n\nPlease note that this update is also available via Red Hat Network. Many\npeople find this to be an easier way to apply updates. To use Red Hat\nNetwork, launch the Red Hat Update Agent with the following command:\n\nup2date\n\nThis will start an interactive process that will result in the appropriate\nRPMs being upgraded on your system. Note that you need to select the kernel\nexplicitly on default configurations of up2date.",
"product_ids": [
"Red Hat Enterprise Linux AS (Advanced Server) version 2.1 ",
"Red Hat Enterprise Linux ES version 2.1",
"Red Hat Enterprise Linux WS version 2.1"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2003:195"
}
],
"threats": [
{
"category": "impact",
"details": "Important"
}
],
"title": "security flaw"
}
]
}
Loading…
Trend slope:
-
(linear fit over daily sighting counts)
Show additional events:
Loading…
Experimental. This forecast is provided for visualization only and may change without notice. Do not use it for operational decisions.
Forecast uses a logistic model when the trend is rising, or an exponential decay model when the trend is falling. Fitted via linearized least squares.
Sightings
| Author | Source | Type | Date | Other |
|---|
Nomenclature
- Seen: The vulnerability was mentioned, discussed, or observed by the user.
- Confirmed: The vulnerability has been validated from an analyst's perspective.
- Published Proof of Concept: A public proof of concept is available for this vulnerability.
- Exploited: The vulnerability was observed as exploited by the user who reported the sighting.
- Patched: The vulnerability was observed as successfully patched by the user who reported the sighting.
- Not exploited: The vulnerability was not observed as exploited by the user who reported the sighting.
- Not confirmed: The user expressed doubt about the validity of the vulnerability.
- Not patched: The vulnerability was not observed as successfully patched by the user who reported the sighting.
Loading…
Loading…