CVE-2007-4573 (GCVE-0-2007-4573)

Vulnerability from cvelistv5 – Published: 2007-09-24 22:00 – Updated: 2024-08-07 15:01
VLAI
Summary
The IA32 system call emulation functionality in Linux kernel 2.4.x and 2.6.x before 2.6.22.7, when running on the x86_64 architecture, does not zero extend the eax register after the 32bit entry path to ptrace is used, which might allow local users to gain privileges by triggering an out-of-bounds access to the system call table using the %RAX register.
Severity
No CVSS data available.
CWE
  • n/a
Assigner
References
URL Tags
http://www.redhat.com/support/errata/RHSA-2007-09… vendor-advisoryx_refsource_REDHAT
http://secunia.com/advisories/27212 third-party-advisoryx_refsource_SECUNIA
http://secunia.com/advisories/27227 third-party-advisoryx_refsource_SECUNIA
http://www.redhat.com/support/errata/RHSA-2007-09… vendor-advisoryx_refsource_REDHAT
http://www.novell.com/linux/security/advisories/2… vendor-advisoryx_refsource_SUSE
http://securitytracker.com/id?1018748 vdb-entryx_refsource_SECTRACK
http://secunia.com/advisories/26953 third-party-advisoryx_refsource_SECUNIA
http://fedoranews.org/updates/FEDORA-2007-229.shtml vendor-advisoryx_refsource_FEDORA
http://www.securityfocus.com/archive/1/480451/100… mailing-listx_refsource_BUGTRAQ
http://secunia.com/advisories/26978 third-party-advisoryx_refsource_SECUNIA
http://lkml.org/lkml/2007/9/21/512 mailing-listx_refsource_MLIST
http://secunia.com/advisories/26934 third-party-advisoryx_refsource_SECUNIA
http://secunia.com/advisories/26994 third-party-advisoryx_refsource_SECUNIA
http://secunia.com/advisories/26995 third-party-advisoryx_refsource_SECUNIA
http://www.debian.org/security/2008/dsa-1504 vendor-advisoryx_refsource_DEBIAN
http://www.securityfocus.com/bid/25774 vdb-entryx_refsource_BID
http://www.mandriva.com/security/advisories?name=… vendor-advisoryx_refsource_MANDRIVA
http://secunia.com/advisories/26919 third-party-advisoryx_refsource_SECUNIA
http://secunia.com/advisories/27912 third-party-advisoryx_refsource_SECUNIA
http://www.ubuntu.com/usn/usn-518-1 vendor-advisoryx_refsource_UBUNTU
http://www.vupen.com/english/advisories/2007/3246 vdb-entryx_refsource_VUPEN
http://lkml.org/lkml/2007/9/21/513 mailing-listx_refsource_MLIST
http://www.securityfocus.com/archive/1/480705/100… mailing-listx_refsource_BUGTRAQ
http://www.kernel.org/pub/linux/kernel/v2.6/Chang… x_refsource_CONFIRM
https://oval.cisecurity.org/repository/search/def… vdb-entrysignaturex_refsource_OVAL
https://www.redhat.com/archives/fedora-package-an… vendor-advisoryx_refsource_FEDORA
http://www.debian.org/security/2007/dsa-1381 vendor-advisoryx_refsource_DEBIAN
http://marc.info/?l=full-disclosure&m=11906258740… mailing-listx_refsource_FULLDISC
http://kernel.org/pub/linux/kernel/v2.4/ChangeLog… x_refsource_CONFIRM
http://www.mandriva.com/security/advisories?name=… vendor-advisoryx_refsource_MANDRIVA
http://www.mandriva.com/security/advisories?name=… vendor-advisoryx_refsource_MANDRIVA
http://lists.opensuse.org/opensuse-security-annou… vendor-advisoryx_refsource_SUSE
http://www.redhat.com/support/errata/RHSA-2007-09… vendor-advisoryx_refsource_REDHAT
http://secunia.com/advisories/26955 third-party-advisoryx_refsource_SECUNIA
http://secunia.com/advisories/29058 third-party-advisoryx_refsource_SECUNIA
https://issues.rpath.com/browse/RPL-1754 x_refsource_CONFIRM
http://secunia.com/advisories/26917 third-party-advisoryx_refsource_SECUNIA
http://www.debian.org/security/2007/dsa-1378 vendor-advisoryx_refsource_DEBIAN
http://www.mandriva.com/security/advisories?name=… vendor-advisoryx_refsource_MANDRIVA
Date Public
2007-09-21 00:00
Show details on NVD website
To clipboard 

{
  "containers": {
    "adp": [
      {
        "providerMetadata": {
          "dateUpdated": "2024-08-07T15:01:09.784Z",
          "orgId": "af854a3a-2127-422b-91ae-364da2661108",
          "shortName": "CVE"
        },
        "references": [
          {
            "name": "RHSA-2007:0937",
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT",
              "x_transferred"
            ],
            "url": "http://www.redhat.com/support/errata/RHSA-2007-0937.html"
          },
          {
            "name": "27212",
            "tags": [
              "third-party-advisory",
              "x_refsource_SECUNIA",
              "x_transferred"
            ],
            "url": "http://secunia.com/advisories/27212"
          },
          {
            "name": "27227",
            "tags": [
              "third-party-advisory",
              "x_refsource_SECUNIA",
              "x_transferred"
            ],
            "url": "http://secunia.com/advisories/27227"
          },
          {
            "name": "RHSA-2007:0938",
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT",
              "x_transferred"
            ],
            "url": "http://www.redhat.com/support/errata/RHSA-2007-0938.html"
          },
          {
            "name": "SUSE-SA:2007:053",
            "tags": [
              "vendor-advisory",
              "x_refsource_SUSE",
              "x_transferred"
            ],
            "url": "http://www.novell.com/linux/security/advisories/2007_53_kernel.html"
          },
          {
            "name": "1018748",
            "tags": [
              "vdb-entry",
              "x_refsource_SECTRACK",
              "x_transferred"
            ],
            "url": "http://securitytracker.com/id?1018748"
          },
          {
            "name": "26953",
            "tags": [
              "third-party-advisory",
              "x_refsource_SECUNIA",
              "x_transferred"
            ],
            "url": "http://secunia.com/advisories/26953"
          },
          {
            "name": "FEDORA-2007-2298",
            "tags": [
              "vendor-advisory",
              "x_refsource_FEDORA",
              "x_transferred"
            ],
            "url": "http://fedoranews.org/updates/FEDORA-2007-229.shtml"
          },
          {
            "name": "20070924 COSEINC Linux Advisory #2: IA32 System Call Emulation Vulnerability",
            "tags": [
              "mailing-list",
              "x_refsource_BUGTRAQ",
              "x_transferred"
            ],
            "url": "http://www.securityfocus.com/archive/1/480451/100/0/threaded"
          },
          {
            "name": "26978",
            "tags": [
              "third-party-advisory",
              "x_refsource_SECUNIA",
              "x_transferred"
            ],
            "url": "http://secunia.com/advisories/26978"
          },
          {
            "name": "[linux-kernel] 20070921 Linux 2.6.22.7",
            "tags": [
              "mailing-list",
              "x_refsource_MLIST",
              "x_transferred"
            ],
            "url": "http://lkml.org/lkml/2007/9/21/512"
          },
          {
            "name": "26934",
            "tags": [
              "third-party-advisory",
              "x_refsource_SECUNIA",
              "x_transferred"
            ],
            "url": "http://secunia.com/advisories/26934"
          },
          {
            "name": "26994",
            "tags": [
              "third-party-advisory",
              "x_refsource_SECUNIA",
              "x_transferred"
            ],
            "url": "http://secunia.com/advisories/26994"
          },
          {
            "name": "26995",
            "tags": [
              "third-party-advisory",
              "x_refsource_SECUNIA",
              "x_transferred"
            ],
            "url": "http://secunia.com/advisories/26995"
          },
          {
            "name": "DSA-1504",
            "tags": [
              "vendor-advisory",
              "x_refsource_DEBIAN",
              "x_transferred"
            ],
            "url": "http://www.debian.org/security/2008/dsa-1504"
          },
          {
            "name": "25774",
            "tags": [
              "vdb-entry",
              "x_refsource_BID",
              "x_transferred"
            ],
            "url": "http://www.securityfocus.com/bid/25774"
          },
          {
            "name": "MDVSA-2008:008",
            "tags": [
              "vendor-advisory",
              "x_refsource_MANDRIVA",
              "x_transferred"
            ],
            "url": "http://www.mandriva.com/security/advisories?name=MDVSA-2008:008"
          },
          {
            "name": "26919",
            "tags": [
              "third-party-advisory",
              "x_refsource_SECUNIA",
              "x_transferred"
            ],
            "url": "http://secunia.com/advisories/26919"
          },
          {
            "name": "27912",
            "tags": [
              "third-party-advisory",
              "x_refsource_SECUNIA",
              "x_transferred"
            ],
            "url": "http://secunia.com/advisories/27912"
          },
          {
            "name": "USN-518-1",
            "tags": [
              "vendor-advisory",
              "x_refsource_UBUNTU",
              "x_transferred"
            ],
            "url": "http://www.ubuntu.com/usn/usn-518-1"
          },
          {
            "name": "ADV-2007-3246",
            "tags": [
              "vdb-entry",
              "x_refsource_VUPEN",
              "x_transferred"
            ],
            "url": "http://www.vupen.com/english/advisories/2007/3246"
          },
          {
            "name": "[linux-kernel] 20070921 Re: Linux 2.6.22.7",
            "tags": [
              "mailing-list",
              "x_refsource_MLIST",
              "x_transferred"
            ],
            "url": "http://lkml.org/lkml/2007/9/21/513"
          },
          {
            "name": "20070926 Re: COSEINC Linux Advisory #2: IA32 System CallEmulation Vulnerability",
            "tags": [
              "mailing-list",
              "x_refsource_BUGTRAQ",
              "x_transferred"
            ],
            "url": "http://www.securityfocus.com/archive/1/480705/100/0/threaded"
          },
          {
            "tags": [
              "x_refsource_CONFIRM",
              "x_transferred"
            ],
            "url": "http://www.kernel.org/pub/linux/kernel/v2.6/ChangeLog-2.6.22.7"
          },
          {
            "name": "oval:org.mitre.oval:def:9735",
            "tags": [
              "vdb-entry",
              "signature",
              "x_refsource_OVAL",
              "x_transferred"
            ],
            "url": "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A9735"
          },
          {
            "name": "FEDORA-2007-712",
            "tags": [
              "vendor-advisory",
              "x_refsource_FEDORA",
              "x_transferred"
            ],
            "url": "https://www.redhat.com/archives/fedora-package-announce/2007-September/msg00355.html"
          },
          {
            "name": "DSA-1381",
            "tags": [
              "vendor-advisory",
              "x_refsource_DEBIAN",
              "x_transferred"
            ],
            "url": "http://www.debian.org/security/2007/dsa-1381"
          },
          {
            "name": "20070924 COSEINC Linux Advisory #2: IA32 System Call",
            "tags": [
              "mailing-list",
              "x_refsource_FULLDISC",
              "x_transferred"
            ],
            "url": "http://marc.info/?l=full-disclosure\u0026m=119062587407908\u0026w=2"
          },
          {
            "tags": [
              "x_refsource_CONFIRM",
              "x_transferred"
            ],
            "url": "http://kernel.org/pub/linux/kernel/v2.4/ChangeLog-2.4.35.3"
          },
          {
            "name": "MDKSA-2007:196",
            "tags": [
              "vendor-advisory",
              "x_refsource_MANDRIVA",
              "x_transferred"
            ],
            "url": "http://www.mandriva.com/security/advisories?name=MDKSA-2007:196"
          },
          {
            "name": "MDVSA-2008:105",
            "tags": [
              "vendor-advisory",
              "x_refsource_MANDRIVA",
              "x_transferred"
            ],
            "url": "http://www.mandriva.com/security/advisories?name=MDVSA-2008:105"
          },
          {
            "name": "SUSE-SA:2007:064",
            "tags": [
              "vendor-advisory",
              "x_refsource_SUSE",
              "x_transferred"
            ],
            "url": "http://lists.opensuse.org/opensuse-security-announce/2007-12/msg00001.html"
          },
          {
            "name": "RHSA-2007:0936",
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT",
              "x_transferred"
            ],
            "url": "http://www.redhat.com/support/errata/RHSA-2007-0936.html"
          },
          {
            "name": "26955",
            "tags": [
              "third-party-advisory",
              "x_refsource_SECUNIA",
              "x_transferred"
            ],
            "url": "http://secunia.com/advisories/26955"
          },
          {
            "name": "29058",
            "tags": [
              "third-party-advisory",
              "x_refsource_SECUNIA",
              "x_transferred"
            ],
            "url": "http://secunia.com/advisories/29058"
          },
          {
            "tags": [
              "x_refsource_CONFIRM",
              "x_transferred"
            ],
            "url": "https://issues.rpath.com/browse/RPL-1754"
          },
          {
            "name": "26917",
            "tags": [
              "third-party-advisory",
              "x_refsource_SECUNIA",
              "x_transferred"
            ],
            "url": "http://secunia.com/advisories/26917"
          },
          {
            "name": "DSA-1378",
            "tags": [
              "vendor-advisory",
              "x_refsource_DEBIAN",
              "x_transferred"
            ],
            "url": "http://www.debian.org/security/2007/dsa-1378"
          },
          {
            "name": "MDKSA-2007:195",
            "tags": [
              "vendor-advisory",
              "x_refsource_MANDRIVA",
              "x_transferred"
            ],
            "url": "http://www.mandriva.com/security/advisories?name=MDKSA-2007:195"
          }
        ],
        "title": "CVE Program Container"
      }
    ],
    "cna": {
      "affected": [
        {
          "product": "n/a",
          "vendor": "n/a",
          "versions": [
            {
              "status": "affected",
              "version": "n/a"
            }
          ]
        }
      ],
      "datePublic": "2007-09-21T00:00:00.000Z",
      "descriptions": [
        {
          "lang": "en",
          "value": "The IA32 system call emulation functionality in Linux kernel 2.4.x and 2.6.x before 2.6.22.7, when running on the x86_64 architecture, does not zero extend the eax register after the 32bit entry path to ptrace is used, which might allow local users to gain privileges by triggering an out-of-bounds access to the system call table using the %RAX register."
        }
      ],
      "problemTypes": [
        {
          "descriptions": [
            {
              "description": "n/a",
              "lang": "en",
              "type": "text"
            }
          ]
        }
      ],
      "providerMetadata": {
        "dateUpdated": "2018-10-15T20:57:01.000Z",
        "orgId": "53f830b8-0a3f-465b-8143-3b8a9948e749",
        "shortName": "redhat"
      },
      "references": [
        {
          "name": "RHSA-2007:0937",
          "tags": [
            "vendor-advisory",
            "x_refsource_REDHAT"
          ],
          "url": "http://www.redhat.com/support/errata/RHSA-2007-0937.html"
        },
        {
          "name": "27212",
          "tags": [
            "third-party-advisory",
            "x_refsource_SECUNIA"
          ],
          "url": "http://secunia.com/advisories/27212"
        },
        {
          "name": "27227",
          "tags": [
            "third-party-advisory",
            "x_refsource_SECUNIA"
          ],
          "url": "http://secunia.com/advisories/27227"
        },
        {
          "name": "RHSA-2007:0938",
          "tags": [
            "vendor-advisory",
            "x_refsource_REDHAT"
          ],
          "url": "http://www.redhat.com/support/errata/RHSA-2007-0938.html"
        },
        {
          "name": "SUSE-SA:2007:053",
          "tags": [
            "vendor-advisory",
            "x_refsource_SUSE"
          ],
          "url": "http://www.novell.com/linux/security/advisories/2007_53_kernel.html"
        },
        {
          "name": "1018748",
          "tags": [
            "vdb-entry",
            "x_refsource_SECTRACK"
          ],
          "url": "http://securitytracker.com/id?1018748"
        },
        {
          "name": "26953",
          "tags": [
            "third-party-advisory",
            "x_refsource_SECUNIA"
          ],
          "url": "http://secunia.com/advisories/26953"
        },
        {
          "name": "FEDORA-2007-2298",
          "tags": [
            "vendor-advisory",
            "x_refsource_FEDORA"
          ],
          "url": "http://fedoranews.org/updates/FEDORA-2007-229.shtml"
        },
        {
          "name": "20070924 COSEINC Linux Advisory #2: IA32 System Call Emulation Vulnerability",
          "tags": [
            "mailing-list",
            "x_refsource_BUGTRAQ"
          ],
          "url": "http://www.securityfocus.com/archive/1/480451/100/0/threaded"
        },
        {
          "name": "26978",
          "tags": [
            "third-party-advisory",
            "x_refsource_SECUNIA"
          ],
          "url": "http://secunia.com/advisories/26978"
        },
        {
          "name": "[linux-kernel] 20070921 Linux 2.6.22.7",
          "tags": [
            "mailing-list",
            "x_refsource_MLIST"
          ],
          "url": "http://lkml.org/lkml/2007/9/21/512"
        },
        {
          "name": "26934",
          "tags": [
            "third-party-advisory",
            "x_refsource_SECUNIA"
          ],
          "url": "http://secunia.com/advisories/26934"
        },
        {
          "name": "26994",
          "tags": [
            "third-party-advisory",
            "x_refsource_SECUNIA"
          ],
          "url": "http://secunia.com/advisories/26994"
        },
        {
          "name": "26995",
          "tags": [
            "third-party-advisory",
            "x_refsource_SECUNIA"
          ],
          "url": "http://secunia.com/advisories/26995"
        },
        {
          "name": "DSA-1504",
          "tags": [
            "vendor-advisory",
            "x_refsource_DEBIAN"
          ],
          "url": "http://www.debian.org/security/2008/dsa-1504"
        },
        {
          "name": "25774",
          "tags": [
            "vdb-entry",
            "x_refsource_BID"
          ],
          "url": "http://www.securityfocus.com/bid/25774"
        },
        {
          "name": "MDVSA-2008:008",
          "tags": [
            "vendor-advisory",
            "x_refsource_MANDRIVA"
          ],
          "url": "http://www.mandriva.com/security/advisories?name=MDVSA-2008:008"
        },
        {
          "name": "26919",
          "tags": [
            "third-party-advisory",
            "x_refsource_SECUNIA"
          ],
          "url": "http://secunia.com/advisories/26919"
        },
        {
          "name": "27912",
          "tags": [
            "third-party-advisory",
            "x_refsource_SECUNIA"
          ],
          "url": "http://secunia.com/advisories/27912"
        },
        {
          "name": "USN-518-1",
          "tags": [
            "vendor-advisory",
            "x_refsource_UBUNTU"
          ],
          "url": "http://www.ubuntu.com/usn/usn-518-1"
        },
        {
          "name": "ADV-2007-3246",
          "tags": [
            "vdb-entry",
            "x_refsource_VUPEN"
          ],
          "url": "http://www.vupen.com/english/advisories/2007/3246"
        },
        {
          "name": "[linux-kernel] 20070921 Re: Linux 2.6.22.7",
          "tags": [
            "mailing-list",
            "x_refsource_MLIST"
          ],
          "url": "http://lkml.org/lkml/2007/9/21/513"
        },
        {
          "name": "20070926 Re: COSEINC Linux Advisory #2: IA32 System CallEmulation Vulnerability",
          "tags": [
            "mailing-list",
            "x_refsource_BUGTRAQ"
          ],
          "url": "http://www.securityfocus.com/archive/1/480705/100/0/threaded"
        },
        {
          "tags": [
            "x_refsource_CONFIRM"
          ],
          "url": "http://www.kernel.org/pub/linux/kernel/v2.6/ChangeLog-2.6.22.7"
        },
        {
          "name": "oval:org.mitre.oval:def:9735",
          "tags": [
            "vdb-entry",
            "signature",
            "x_refsource_OVAL"
          ],
          "url": "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A9735"
        },
        {
          "name": "FEDORA-2007-712",
          "tags": [
            "vendor-advisory",
            "x_refsource_FEDORA"
          ],
          "url": "https://www.redhat.com/archives/fedora-package-announce/2007-September/msg00355.html"
        },
        {
          "name": "DSA-1381",
          "tags": [
            "vendor-advisory",
            "x_refsource_DEBIAN"
          ],
          "url": "http://www.debian.org/security/2007/dsa-1381"
        },
        {
          "name": "20070924 COSEINC Linux Advisory #2: IA32 System Call",
          "tags": [
            "mailing-list",
            "x_refsource_FULLDISC"
          ],
          "url": "http://marc.info/?l=full-disclosure\u0026m=119062587407908\u0026w=2"
        },
        {
          "tags": [
            "x_refsource_CONFIRM"
          ],
          "url": "http://kernel.org/pub/linux/kernel/v2.4/ChangeLog-2.4.35.3"
        },
        {
          "name": "MDKSA-2007:196",
          "tags": [
            "vendor-advisory",
            "x_refsource_MANDRIVA"
          ],
          "url": "http://www.mandriva.com/security/advisories?name=MDKSA-2007:196"
        },
        {
          "name": "MDVSA-2008:105",
          "tags": [
            "vendor-advisory",
            "x_refsource_MANDRIVA"
          ],
          "url": "http://www.mandriva.com/security/advisories?name=MDVSA-2008:105"
        },
        {
          "name": "SUSE-SA:2007:064",
          "tags": [
            "vendor-advisory",
            "x_refsource_SUSE"
          ],
          "url": "http://lists.opensuse.org/opensuse-security-announce/2007-12/msg00001.html"
        },
        {
          "name": "RHSA-2007:0936",
          "tags": [
            "vendor-advisory",
            "x_refsource_REDHAT"
          ],
          "url": "http://www.redhat.com/support/errata/RHSA-2007-0936.html"
        },
        {
          "name": "26955",
          "tags": [
            "third-party-advisory",
            "x_refsource_SECUNIA"
          ],
          "url": "http://secunia.com/advisories/26955"
        },
        {
          "name": "29058",
          "tags": [
            "third-party-advisory",
            "x_refsource_SECUNIA"
          ],
          "url": "http://secunia.com/advisories/29058"
        },
        {
          "tags": [
            "x_refsource_CONFIRM"
          ],
          "url": "https://issues.rpath.com/browse/RPL-1754"
        },
        {
          "name": "26917",
          "tags": [
            "third-party-advisory",
            "x_refsource_SECUNIA"
          ],
          "url": "http://secunia.com/advisories/26917"
        },
        {
          "name": "DSA-1378",
          "tags": [
            "vendor-advisory",
            "x_refsource_DEBIAN"
          ],
          "url": "http://www.debian.org/security/2007/dsa-1378"
        },
        {
          "name": "MDKSA-2007:195",
          "tags": [
            "vendor-advisory",
            "x_refsource_MANDRIVA"
          ],
          "url": "http://www.mandriva.com/security/advisories?name=MDKSA-2007:195"
        }
      ]
    }
  },
  "cveMetadata": {
    "assignerOrgId": "53f830b8-0a3f-465b-8143-3b8a9948e749",
    "assignerShortName": "redhat",
    "cveId": "CVE-2007-4573",
    "datePublished": "2007-09-24T22:00:00.000Z",
    "dateReserved": "2007-08-28T00:00:00.000Z",
    "dateUpdated": "2024-08-07T15:01:09.784Z",
    "state": "PUBLISHED"
  },
  "dataType": "CVE_RECORD",
  "dataVersion": "5.1",
  "vulnerability-lookup:meta": {
    "epss": {
      "cve": "CVE-2007-4573",
      "date": "2026-09-21",
      "epss": "0.0082",
      "percentile": "0.55284"
    },
    "fkie_nvd": {
      "configurations": [
        {
          "nodes": [
            {
              "cpeMatch": [
                {
                  "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:x86_64:*:*:*:*:*",
                  "matchCriteriaId": "58EF3270-25F7-44A1-806E-680B6D406B1F",
                  "versionEndIncluding": "2.4.35",
                  "vulnerable": true
                },
                {
                  "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:x86_64:*:*:*:*:*",
                  "matchCriteriaId": "C6C3F3CA-3C63-40C1-9BE1-27489B5AC24F",
                  "versionEndIncluding": "2.6.22.6",
                  "vulnerable": true
                }
              ],
              "negate": false,
              "operator": "OR"
            }
          ]
        }
      ],
      "descriptions": [
        {
          "lang": "en",
          "value": "The IA32 system call emulation functionality in Linux kernel 2.4.x and 2.6.x before 2.6.22.7, when running on the x86_64 architecture, does not zero extend the eax register after the 32bit entry path to ptrace is used, which might allow local users to gain privileges by triggering an out-of-bounds access to the system call table using the %RAX register."
        },
        {
          "lang": "es",
          "value": "La funcionalidad de emulaci\u00f3n de llamada del sistema IA32 en Linux kernel 2.4.x y 2.6.x versiones anteriores a 2.6.22.7, cuando se ejecuta en arquitecturas x86_64, no extiende a cero el registro eax despu\u00e9s de ser usada una ruta de entrada 32bit en ptrace, lo cual podr\u00eda permitir a usuarios locales, obtener privilegios al disparar un acceso fuera de l\u00edmites en la tabla de llamadas del sistema utilizando el registro %RAX."
        }
      ],
      "id": "CVE-2007-4573",
      "lastModified": "2024-11-21T00:35:55.607",
      "metrics": {
        "cvssMetricV2": [
          {
            "acInsufInfo": false,
            "baseSeverity": "HIGH",
            "cvssData": {
              "accessComplexity": "LOW",
              "accessVector": "LOCAL",
              "authentication": "NONE",
              "availabilityImpact": "COMPLETE",
              "baseScore": 7.2,
              "confidentialityImpact": "COMPLETE",
              "integrityImpact": "COMPLETE",
              "vectorString": "AV:L/AC:L/Au:N/C:C/I:C/A:C",
              "version": "2.0"
            },
            "exploitabilityScore": 3.9,
            "impactScore": 10.0,
            "obtainAllPrivilege": true,
            "obtainOtherPrivilege": false,
            "obtainUserPrivilege": false,
            "source": "nvd@nist.gov",
            "type": "Primary",
            "userInteractionRequired": false
          }
        ]
      },
      "published": "2007-09-24T22:17:00.000",
      "references": [
        {
          "source": "secalert@redhat.com",
          "url": "http://fedoranews.org/updates/FEDORA-2007-229.shtml"
        },
        {
          "source": "secalert@redhat.com",
          "url": "http://kernel.org/pub/linux/kernel/v2.4/ChangeLog-2.4.35.3"
        },
        {
          "source": "secalert@redhat.com",
          "url": "http://lists.opensuse.org/opensuse-security-announce/2007-12/msg00001.html"
        },
        {
          "source": "secalert@redhat.com",
          "tags": [
            "Patch"
          ],
          "url": "http://lkml.org/lkml/2007/9/21/512"
        },
        {
          "source": "secalert@redhat.com",
          "url": "http://lkml.org/lkml/2007/9/21/513"
        },
        {
          "source": "secalert@redhat.com",
          "url": "http://marc.info/?l=full-disclosure\u0026m=119062587407908\u0026w=2"
        },
        {
          "source": "secalert@redhat.com",
          "url": "http://secunia.com/advisories/26917"
        },
        {
          "source": "secalert@redhat.com",
          "url": "http://secunia.com/advisories/26919"
        },
        {
          "source": "secalert@redhat.com",
          "url": "http://secunia.com/advisories/26934"
        },
        {
          "source": "secalert@redhat.com",
          "url": "http://secunia.com/advisories/26953"
        },
        {
          "source": "secalert@redhat.com",
          "url": "http://secunia.com/advisories/26955"
        },
        {
          "source": "secalert@redhat.com",
          "url": "http://secunia.com/advisories/26978"
        },
        {
          "source": "secalert@redhat.com",
          "url": "http://secunia.com/advisories/26994"
        },
        {
          "source": "secalert@redhat.com",
          "url": "http://secunia.com/advisories/26995"
        },
        {
          "source": "secalert@redhat.com",
          "url": "http://secunia.com/advisories/27212"
        },
        {
          "source": "secalert@redhat.com",
          "url": "http://secunia.com/advisories/27227"
        },
        {
          "source": "secalert@redhat.com",
          "url": "http://secunia.com/advisories/27912"
        },
        {
          "source": "secalert@redhat.com",
          "url": "http://secunia.com/advisories/29058"
        },
        {
          "source": "secalert@redhat.com",
          "url": "http://securitytracker.com/id?1018748"
        },
        {
          "source": "secalert@redhat.com",
          "url": "http://www.debian.org/security/2007/dsa-1378"
        },
        {
          "source": "secalert@redhat.com",
          "url": "http://www.debian.org/security/2007/dsa-1381"
        },
        {
          "source": "secalert@redhat.com",
          "url": "http://www.debian.org/security/2008/dsa-1504"
        },
        {
          "source": "secalert@redhat.com",
          "url": "http://www.kernel.org/pub/linux/kernel/v2.6/ChangeLog-2.6.22.7"
        },
        {
          "source": "secalert@redhat.com",
          "url": "http://www.mandriva.com/security/advisories?name=MDKSA-2007:195"
        },
        {
          "source": "secalert@redhat.com",
          "url": "http://www.mandriva.com/security/advisories?name=MDKSA-2007:196"
        },
        {
          "source": "secalert@redhat.com",
          "url": "http://www.mandriva.com/security/advisories?name=MDVSA-2008:008"
        },
        {
          "source": "secalert@redhat.com",
          "url": "http://www.mandriva.com/security/advisories?name=MDVSA-2008:105"
        },
        {
          "source": "secalert@redhat.com",
          "url": "http://www.novell.com/linux/security/advisories/2007_53_kernel.html"
        },
        {
          "source": "secalert@redhat.com",
          "url": "http://www.redhat.com/support/errata/RHSA-2007-0936.html"
        },
        {
          "source": "secalert@redhat.com",
          "url": "http://www.redhat.com/support/errata/RHSA-2007-0937.html"
        },
        {
          "source": "secalert@redhat.com",
          "url": "http://www.redhat.com/support/errata/RHSA-2007-0938.html"
        },
        {
          "source": "secalert@redhat.com",
          "url": "http://www.securityfocus.com/archive/1/480451/100/0/threaded"
        },
        {
          "source": "secalert@redhat.com",
          "url": "http://www.securityfocus.com/archive/1/480705/100/0/threaded"
        },
        {
          "source": "secalert@redhat.com",
          "url": "http://www.securityfocus.com/bid/25774"
        },
        {
          "source": "secalert@redhat.com",
          "url": "http://www.ubuntu.com/usn/usn-518-1"
        },
        {
          "source": "secalert@redhat.com",
          "url": "http://www.vupen.com/english/advisories/2007/3246"
        },
        {
          "source": "secalert@redhat.com",
          "url": "https://issues.rpath.com/browse/RPL-1754"
        },
        {
          "source": "secalert@redhat.com",
          "url": "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A9735"
        },
        {
          "source": "secalert@redhat.com",
          "url": "https://www.redhat.com/archives/fedora-package-announce/2007-September/msg00355.html"
        },
        {
          "source": "af854a3a-2127-422b-91ae-364da2661108",
          "url": "http://fedoranews.org/updates/FEDORA-2007-229.shtml"
        },
        {
          "source": "af854a3a-2127-422b-91ae-364da2661108",
          "url": "http://kernel.org/pub/linux/kernel/v2.4/ChangeLog-2.4.35.3"
        },
        {
          "source": "af854a3a-2127-422b-91ae-364da2661108",
          "url": "http://lists.opensuse.org/opensuse-security-announce/2007-12/msg00001.html"
        },
        {
          "source": "af854a3a-2127-422b-91ae-364da2661108",
          "tags": [
            "Patch"
          ],
          "url": "http://lkml.org/lkml/2007/9/21/512"
        },
        {
          "source": "af854a3a-2127-422b-91ae-364da2661108",
          "url": "http://lkml.org/lkml/2007/9/21/513"
        },
        {
          "source": "af854a3a-2127-422b-91ae-364da2661108",
          "url": "http://marc.info/?l=full-disclosure\u0026m=119062587407908\u0026w=2"
        },
        {
          "source": "af854a3a-2127-422b-91ae-364da2661108",
          "url": "http://secunia.com/advisories/26917"
        },
        {
          "source": "af854a3a-2127-422b-91ae-364da2661108",
          "url": "http://secunia.com/advisories/26919"
        },
        {
          "source": "af854a3a-2127-422b-91ae-364da2661108",
          "url": "http://secunia.com/advisories/26934"
        },
        {
          "source": "af854a3a-2127-422b-91ae-364da2661108",
          "url": "http://secunia.com/advisories/26953"
        },
        {
          "source": "af854a3a-2127-422b-91ae-364da2661108",
          "url": "http://secunia.com/advisories/26955"
        },
        {
          "source": "af854a3a-2127-422b-91ae-364da2661108",
          "url": "http://secunia.com/advisories/26978"
        },
        {
          "source": "af854a3a-2127-422b-91ae-364da2661108",
          "url": "http://secunia.com/advisories/26994"
        },
        {
          "source": "af854a3a-2127-422b-91ae-364da2661108",
          "url": "http://secunia.com/advisories/26995"
        },
        {
          "source": "af854a3a-2127-422b-91ae-364da2661108",
          "url": "http://secunia.com/advisories/27212"
        },
        {
          "source": "af854a3a-2127-422b-91ae-364da2661108",
          "url": "http://secunia.com/advisories/27227"
        },
        {
          "source": "af854a3a-2127-422b-91ae-364da2661108",
          "url": "http://secunia.com/advisories/27912"
        },
        {
          "source": "af854a3a-2127-422b-91ae-364da2661108",
          "url": "http://secunia.com/advisories/29058"
        },
        {
          "source": "af854a3a-2127-422b-91ae-364da2661108",
          "url": "http://securitytracker.com/id?1018748"
        },
        {
          "source": "af854a3a-2127-422b-91ae-364da2661108",
          "url": "http://www.debian.org/security/2007/dsa-1378"
        },
        {
          "source": "af854a3a-2127-422b-91ae-364da2661108",
          "url": "http://www.debian.org/security/2007/dsa-1381"
        },
        {
          "source": "af854a3a-2127-422b-91ae-364da2661108",
          "url": "http://www.debian.org/security/2008/dsa-1504"
        },
        {
          "source": "af854a3a-2127-422b-91ae-364da2661108",
          "url": "http://www.kernel.org/pub/linux/kernel/v2.6/ChangeLog-2.6.22.7"
        },
        {
          "source": "af854a3a-2127-422b-91ae-364da2661108",
          "url": "http://www.mandriva.com/security/advisories?name=MDKSA-2007:195"
        },
        {
          "source": "af854a3a-2127-422b-91ae-364da2661108",
          "url": "http://www.mandriva.com/security/advisories?name=MDKSA-2007:196"
        },
        {
          "source": "af854a3a-2127-422b-91ae-364da2661108",
          "url": "http://www.mandriva.com/security/advisories?name=MDVSA-2008:008"
        },
        {
          "source": "af854a3a-2127-422b-91ae-364da2661108",
          "url": "http://www.mandriva.com/security/advisories?name=MDVSA-2008:105"
        },
        {
          "source": "af854a3a-2127-422b-91ae-364da2661108",
          "url": "http://www.novell.com/linux/security/advisories/2007_53_kernel.html"
        },
        {
          "source": "af854a3a-2127-422b-91ae-364da2661108",
          "url": "http://www.redhat.com/support/errata/RHSA-2007-0936.html"
        },
        {
          "source": "af854a3a-2127-422b-91ae-364da2661108",
          "url": "http://www.redhat.com/support/errata/RHSA-2007-0937.html"
        },
        {
          "source": "af854a3a-2127-422b-91ae-364da2661108",
          "url": "http://www.redhat.com/support/errata/RHSA-2007-0938.html"
        },
        {
          "source": "af854a3a-2127-422b-91ae-364da2661108",
          "url": "http://www.securityfocus.com/archive/1/480451/100/0/threaded"
        },
        {
          "source": "af854a3a-2127-422b-91ae-364da2661108",
          "url": "http://www.securityfocus.com/archive/1/480705/100/0/threaded"
        },
        {
          "source": "af854a3a-2127-422b-91ae-364da2661108",
          "url": "http://www.securityfocus.com/bid/25774"
        },
        {
          "source": "af854a3a-2127-422b-91ae-364da2661108",
          "url": "http://www.ubuntu.com/usn/usn-518-1"
        },
        {
          "source": "af854a3a-2127-422b-91ae-364da2661108",
          "url": "http://www.vupen.com/english/advisories/2007/3246"
        },
        {
          "source": "af854a3a-2127-422b-91ae-364da2661108",
          "url": "https://issues.rpath.com/browse/RPL-1754"
        },
        {
          "source": "af854a3a-2127-422b-91ae-364da2661108",
          "url": "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A9735"
        },
        {
          "source": "af854a3a-2127-422b-91ae-364da2661108",
          "url": "https://www.redhat.com/archives/fedora-package-announce/2007-September/msg00355.html"
        }
      ],
      "sourceIdentifier": "secalert@redhat.com",
      "vendorComments": [
        {
          "comment": "This issue affected users who were running 64-bit versions of Red Hat Enterprise Linux 3, 4, or 5 on x86_64 architecture.  It did not affect users of Red Hat Enterprise Linux 2.1. \n\nUpdates are available for Red Hat Enterprise Linux 3, 4, and 5 to correct\nthis issue.  New kernel packages along with our advisory are available at\nthe URL below as well as via the Red Hat Network. http://rhn.redhat.com/errata/CVE-2007-4573.html\n",
          "lastModified": "2007-09-27T00:00:00",
          "organization": "Red Hat"
        }
      ],
      "vulnStatus": "Modified",
      "weaknesses": [
        {
          "description": [
            {
              "lang": "en",
              "value": "CWE-264"
            }
          ],
          "source": "nvd@nist.gov",
          "type": "Primary"
        }
      ]
    },
    "nvd": {
      "cve": {
        "configurations": [
          {
            "nodes": [
              {
                "cpeMatch": [
                  {
                    "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:x86_64:*:*:*:*:*",
                    "matchCriteriaId": "58EF3270-25F7-44A1-806E-680B6D406B1F",
                    "versionEndIncluding": "2.4.35",
                    "vulnerable": true
                  },
                  {
                    "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:x86_64:*:*:*:*:*",
                    "matchCriteriaId": "C6C3F3CA-3C63-40C1-9BE1-27489B5AC24F",
                    "versionEndIncluding": "2.6.22.6",
                    "vulnerable": true
                  }
                ],
                "negate": false,
                "operator": "OR"
              }
            ]
          }
        ],
        "cveTags": [],
        "descriptions": [
          {
            "lang": "en",
            "value": "The IA32 system call emulation functionality in Linux kernel 2.4.x and 2.6.x before 2.6.22.7, when running on the x86_64 architecture, does not zero extend the eax register after the 32bit entry path to ptrace is used, which might allow local users to gain privileges by triggering an out-of-bounds access to the system call table using the %RAX register."
          },
          {
            "lang": "es",
            "value": "La funcionalidad de emulaci\u00f3n de llamada del sistema IA32 en Linux kernel 2.4.x y 2.6.x versiones anteriores a 2.6.22.7, cuando se ejecuta en arquitecturas x86_64, no extiende a cero el registro eax despu\u00e9s de ser usada una ruta de entrada 32bit en ptrace, lo cual podr\u00eda permitir a usuarios locales, obtener privilegios al disparar un acceso fuera de l\u00edmites en la tabla de llamadas del sistema utilizando el registro %RAX."
          }
        ],
        "id": "CVE-2007-4573",
        "lastModified": "2026-04-23T00:35:47.467",
        "metrics": {
          "cvssMetricV2": [
            {
              "acInsufInfo": false,
              "baseSeverity": "HIGH",
              "cvssData": {
                "accessComplexity": "LOW",
                "accessVector": "LOCAL",
                "authentication": "NONE",
                "availabilityImpact": "COMPLETE",
                "baseScore": 7.2,
                "confidentialityImpact": "COMPLETE",
                "integrityImpact": "COMPLETE",
                "vectorString": "AV:L/AC:L/Au:N/C:C/I:C/A:C",
                "version": "2.0"
              },
              "exploitabilityScore": 3.9,
              "impactScore": 10.0,
              "obtainAllPrivilege": true,
              "obtainOtherPrivilege": false,
              "obtainUserPrivilege": false,
              "source": "nvd@nist.gov",
              "type": "Primary",
              "userInteractionRequired": false
            }
          ]
        },
        "published": "2007-09-24T22:17:00.000",
        "references": [
          {
            "source": "secalert@redhat.com",
            "url": "http://fedoranews.org/updates/FEDORA-2007-229.shtml"
          },
          {
            "source": "secalert@redhat.com",
            "url": "http://kernel.org/pub/linux/kernel/v2.4/ChangeLog-2.4.35.3"
          },
          {
            "source": "secalert@redhat.com",
            "url": "http://lists.opensuse.org/opensuse-security-announce/2007-12/msg00001.html"
          },
          {
            "source": "secalert@redhat.com",
            "tags": [
              "Patch"
            ],
            "url": "http://lkml.org/lkml/2007/9/21/512"
          },
          {
            "source": "secalert@redhat.com",
            "url": "http://lkml.org/lkml/2007/9/21/513"
          },
          {
            "source": "secalert@redhat.com",
            "url": "http://marc.info/?l=full-disclosure\u0026m=119062587407908\u0026w=2"
          },
          {
            "source": "secalert@redhat.com",
            "url": "http://secunia.com/advisories/26917"
          },
          {
            "source": "secalert@redhat.com",
            "url": "http://secunia.com/advisories/26919"
          },
          {
            "source": "secalert@redhat.com",
            "url": "http://secunia.com/advisories/26934"
          },
          {
            "source": "secalert@redhat.com",
            "url": "http://secunia.com/advisories/26953"
          },
          {
            "source": "secalert@redhat.com",
            "url": "http://secunia.com/advisories/26955"
          },
          {
            "source": "secalert@redhat.com",
            "url": "http://secunia.com/advisories/26978"
          },
          {
            "source": "secalert@redhat.com",
            "url": "http://secunia.com/advisories/26994"
          },
          {
            "source": "secalert@redhat.com",
            "url": "http://secunia.com/advisories/26995"
          },
          {
            "source": "secalert@redhat.com",
            "url": "http://secunia.com/advisories/27212"
          },
          {
            "source": "secalert@redhat.com",
            "url": "http://secunia.com/advisories/27227"
          },
          {
            "source": "secalert@redhat.com",
            "url": "http://secunia.com/advisories/27912"
          },
          {
            "source": "secalert@redhat.com",
            "url": "http://secunia.com/advisories/29058"
          },
          {
            "source": "secalert@redhat.com",
            "url": "http://securitytracker.com/id?1018748"
          },
          {
            "source": "secalert@redhat.com",
            "url": "http://www.debian.org/security/2007/dsa-1378"
          },
          {
            "source": "secalert@redhat.com",
            "url": "http://www.debian.org/security/2007/dsa-1381"
          },
          {
            "source": "secalert@redhat.com",
            "url": "http://www.debian.org/security/2008/dsa-1504"
          },
          {
            "source": "secalert@redhat.com",
            "url": "http://www.kernel.org/pub/linux/kernel/v2.6/ChangeLog-2.6.22.7"
          },
          {
            "source": "secalert@redhat.com",
            "url": "http://www.mandriva.com/security/advisories?name=MDKSA-2007:195"
          },
          {
            "source": "secalert@redhat.com",
            "url": "http://www.mandriva.com/security/advisories?name=MDKSA-2007:196"
          },
          {
            "source": "secalert@redhat.com",
            "url": "http://www.mandriva.com/security/advisories?name=MDVSA-2008:008"
          },
          {
            "source": "secalert@redhat.com",
            "url": "http://www.mandriva.com/security/advisories?name=MDVSA-2008:105"
          },
          {
            "source": "secalert@redhat.com",
            "url": "http://www.novell.com/linux/security/advisories/2007_53_kernel.html"
          },
          {
            "source": "secalert@redhat.com",
            "url": "http://www.redhat.com/support/errata/RHSA-2007-0936.html"
          },
          {
            "source": "secalert@redhat.com",
            "url": "http://www.redhat.com/support/errata/RHSA-2007-0937.html"
          },
          {
            "source": "secalert@redhat.com",
            "url": "http://www.redhat.com/support/errata/RHSA-2007-0938.html"
          },
          {
            "source": "secalert@redhat.com",
            "url": "http://www.securityfocus.com/archive/1/480451/100/0/threaded"
          },
          {
            "source": "secalert@redhat.com",
            "url": "http://www.securityfocus.com/archive/1/480705/100/0/threaded"
          },
          {
            "source": "secalert@redhat.com",
            "url": "http://www.securityfocus.com/bid/25774"
          },
          {
            "source": "secalert@redhat.com",
            "url": "http://www.ubuntu.com/usn/usn-518-1"
          },
          {
            "source": "secalert@redhat.com",
            "url": "http://www.vupen.com/english/advisories/2007/3246"
          },
          {
            "source": "secalert@redhat.com",
            "url": "https://issues.rpath.com/browse/RPL-1754"
          },
          {
            "source": "secalert@redhat.com",
            "url": "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A9735"
          },
          {
            "source": "secalert@redhat.com",
            "url": "https://www.redhat.com/archives/fedora-package-announce/2007-September/msg00355.html"
          },
          {
            "source": "af854a3a-2127-422b-91ae-364da2661108",
            "url": "http://fedoranews.org/updates/FEDORA-2007-229.shtml"
          },
          {
            "source": "af854a3a-2127-422b-91ae-364da2661108",
            "url": "http://kernel.org/pub/linux/kernel/v2.4/ChangeLog-2.4.35.3"
          },
          {
            "source": "af854a3a-2127-422b-91ae-364da2661108",
            "url": "http://lists.opensuse.org/opensuse-security-announce/2007-12/msg00001.html"
          },
          {
            "source": "af854a3a-2127-422b-91ae-364da2661108",
            "tags": [
              "Patch"
            ],
            "url": "http://lkml.org/lkml/2007/9/21/512"
          },
          {
            "source": "af854a3a-2127-422b-91ae-364da2661108",
            "url": "http://lkml.org/lkml/2007/9/21/513"
          },
          {
            "source": "af854a3a-2127-422b-91ae-364da2661108",
            "url": "http://marc.info/?l=full-disclosure\u0026m=119062587407908\u0026w=2"
          },
          {
            "source": "af854a3a-2127-422b-91ae-364da2661108",
            "url": "http://secunia.com/advisories/26917"
          },
          {
            "source": "af854a3a-2127-422b-91ae-364da2661108",
            "url": "http://secunia.com/advisories/26919"
          },
          {
            "source": "af854a3a-2127-422b-91ae-364da2661108",
            "url": "http://secunia.com/advisories/26934"
          },
          {
            "source": "af854a3a-2127-422b-91ae-364da2661108",
            "url": "http://secunia.com/advisories/26953"
          },
          {
            "source": "af854a3a-2127-422b-91ae-364da2661108",
            "url": "http://secunia.com/advisories/26955"
          },
          {
            "source": "af854a3a-2127-422b-91ae-364da2661108",
            "url": "http://secunia.com/advisories/26978"
          },
          {
            "source": "af854a3a-2127-422b-91ae-364da2661108",
            "url": "http://secunia.com/advisories/26994"
          },
          {
            "source": "af854a3a-2127-422b-91ae-364da2661108",
            "url": "http://secunia.com/advisories/26995"
          },
          {
            "source": "af854a3a-2127-422b-91ae-364da2661108",
            "url": "http://secunia.com/advisories/27212"
          },
          {
            "source": "af854a3a-2127-422b-91ae-364da2661108",
            "url": "http://secunia.com/advisories/27227"
          },
          {
            "source": "af854a3a-2127-422b-91ae-364da2661108",
            "url": "http://secunia.com/advisories/27912"
          },
          {
            "source": "af854a3a-2127-422b-91ae-364da2661108",
            "url": "http://secunia.com/advisories/29058"
          },
          {
            "source": "af854a3a-2127-422b-91ae-364da2661108",
            "url": "http://securitytracker.com/id?1018748"
          },
          {
            "source": "af854a3a-2127-422b-91ae-364da2661108",
            "url": "http://www.debian.org/security/2007/dsa-1378"
          },
          {
            "source": "af854a3a-2127-422b-91ae-364da2661108",
            "url": "http://www.debian.org/security/2007/dsa-1381"
          },
          {
            "source": "af854a3a-2127-422b-91ae-364da2661108",
            "url": "http://www.debian.org/security/2008/dsa-1504"
          },
          {
            "source": "af854a3a-2127-422b-91ae-364da2661108",
            "url": "http://www.kernel.org/pub/linux/kernel/v2.6/ChangeLog-2.6.22.7"
          },
          {
            "source": "af854a3a-2127-422b-91ae-364da2661108",
            "url": "http://www.mandriva.com/security/advisories?name=MDKSA-2007:195"
          },
          {
            "source": "af854a3a-2127-422b-91ae-364da2661108",
            "url": "http://www.mandriva.com/security/advisories?name=MDKSA-2007:196"
          },
          {
            "source": "af854a3a-2127-422b-91ae-364da2661108",
            "url": "http://www.mandriva.com/security/advisories?name=MDVSA-2008:008"
          },
          {
            "source": "af854a3a-2127-422b-91ae-364da2661108",
            "url": "http://www.mandriva.com/security/advisories?name=MDVSA-2008:105"
          },
          {
            "source": "af854a3a-2127-422b-91ae-364da2661108",
            "url": "http://www.novell.com/linux/security/advisories/2007_53_kernel.html"
          },
          {
            "source": "af854a3a-2127-422b-91ae-364da2661108",
            "url": "http://www.redhat.com/support/errata/RHSA-2007-0936.html"
          },
          {
            "source": "af854a3a-2127-422b-91ae-364da2661108",
            "url": "http://www.redhat.com/support/errata/RHSA-2007-0937.html"
          },
          {
            "source": "af854a3a-2127-422b-91ae-364da2661108",
            "url": "http://www.redhat.com/support/errata/RHSA-2007-0938.html"
          },
          {
            "source": "af854a3a-2127-422b-91ae-364da2661108",
            "url": "http://www.securityfocus.com/archive/1/480451/100/0/threaded"
          },
          {
            "source": "af854a3a-2127-422b-91ae-364da2661108",
            "url": "http://www.securityfocus.com/archive/1/480705/100/0/threaded"
          },
          {
            "source": "af854a3a-2127-422b-91ae-364da2661108",
            "url": "http://www.securityfocus.com/bid/25774"
          },
          {
            "source": "af854a3a-2127-422b-91ae-364da2661108",
            "url": "http://www.ubuntu.com/usn/usn-518-1"
          },
          {
            "source": "af854a3a-2127-422b-91ae-364da2661108",
            "url": "http://www.vupen.com/english/advisories/2007/3246"
          },
          {
            "source": "af854a3a-2127-422b-91ae-364da2661108",
            "url": "https://issues.rpath.com/browse/RPL-1754"
          },
          {
            "source": "af854a3a-2127-422b-91ae-364da2661108",
            "url": "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A9735"
          },
          {
            "source": "af854a3a-2127-422b-91ae-364da2661108",
            "url": "https://www.redhat.com/archives/fedora-package-announce/2007-September/msg00355.html"
          }
        ],
        "sourceIdentifier": "secalert@redhat.com",
        "vendorComments": [
          {
            "comment": "This issue affected users who were running 64-bit versions of Red Hat Enterprise Linux 3, 4, or 5 on x86_64 architecture.  It did not affect users of Red Hat Enterprise Linux 2.1. \n\nUpdates are available for Red Hat Enterprise Linux 3, 4, and 5 to correct\nthis issue.  New kernel packages along with our advisory are available at\nthe URL below as well as via the Red Hat Network. http://rhn.redhat.com/errata/CVE-2007-4573.html\n",
            "lastModified": "2007-09-27T00:00:00",
            "organization": "Red Hat"
          }
        ],
        "vulnStatus": "Modified",
        "weaknesses": [
          {
            "description": [
              {
                "lang": "en",
                "value": "CWE-264"
              }
            ],
            "source": "nvd@nist.gov",
            "type": "Primary"
          }
        ]
      }
    },
    "redhat_vex": {
      "aggregate_severity": "Important",
      "current_release_date": "2026-01-09T08:42:06+00:00",
      "cve": "CVE-2007-4573",
      "id": "CVE-2007-4573",
      "initial_release_date": "2007-09-21T00:00:00+00:00",
      "product_status:fixed": "446",
      "source": "Red Hat CSAF VEX",
      "status": "final",
      "title": "x86_64 syscall vulnerability",
      "url": "https://security.access.redhat.com/data/csaf/v2/vex/2007/cve-2007-4573.json",
      "version": "3"
    },
    "suse_vex": {
      "aggregate_severity": "important",
      "current_release_date": "2026-08-02T23:33:06Z",
      "cve": "CVE-2007-4573",
      "id": "CVE-2007-4573",
      "initial_release_date": "2023-02-15T06:11:04Z",
      "product_status:known_affected": "24",
      "product_status:known_not_affected": "43",
      "source": "SUSE CSAF VEX",
      "status": "interim",
      "title": "SUSE CVE CVE-2007-4573",
      "url": "https://ftp.suse.com/pub/projects/security/csaf-vex/cve-2007-4573.json",
      "version": "9"
    }
  }
}



Log in or create an account to share your comment.




Tags
Taxonomy of the tags.





Forecast uses a logistic model when the trend is rising, or an exponential decay model when the trend is falling. Fitted via linearized least squares.

Sightings

Author Source Type Date Other

Nomenclature

  • Seen: The vulnerability was mentioned, discussed, or observed by the user.
  • Confirmed: The vulnerability has been validated from an analyst's perspective.
  • Published Proof of Concept: A public proof of concept is available for this vulnerability.
  • Exploited: The vulnerability was observed as exploited by the user who reported the sighting.
  • Patched: The vulnerability was observed as successfully patched by the user who reported the sighting.
  • Not exploited: The vulnerability was not observed as exploited by the user who reported the sighting.
  • Not confirmed: The user expressed doubt about the validity of the vulnerability.
  • Not patched: The vulnerability was not observed as successfully patched by the user who reported the sighting.



Related by attack behaviour

Vulnerabilities whose description is nearest to this one in the vector space of the CIRCL/vulnerability-attack-technique-biencoder model. This is a similarity search over the bi-encoder space (plain cosine), not a classification, and it has no measured accuracy.