Linux kernel does not properly validate user input via sysctl for negative value

🗓️ 18 Jul 2001 00:00:00Reported by CERTType

cert

cert🔗 www.kb.cert.org👁 33 Views

Linux kernel flaw in sysctl allows unprivileged users to read kernel memory via negative length input.

Reporter	Title	Published	Views	Family All 14
BDU FSTEC	Vulnerabilities of the Red Hat Linux operating system that allow malicious actors to compromise the confidentiality, integrity, and accessibility of protected information	28 Apr 201500:00	–	bdu_fstec
BDU FSTEC	Vulnerabilities of the Red Hat Linux operating system that allow malicious actors to compromise the confidentiality, integrity, and accessibility of protected information	28 Apr 201500:00	–	bdu_fstec
BDU FSTEC	Vulnerabilities of the Red Hat Linux operating system that allow malicious actors to compromise the confidentiality, integrity, and accessibility of protected information	28 Apr 201500:00	–	bdu_fstec
BDU FSTEC	Vulnerabilities of the Red Hat Linux operating system that allow malicious actors to compromise the confidentiality, integrity, and accessibility of protected information	28 Apr 201500:00	–	bdu_fstec
BDU FSTEC	Vulnerabilities of the Red Hat Linux operating system that allow malicious actors to compromise the confidentiality, integrity, and accessibility of protected information	28 Apr 201500:00	–	bdu_fstec
BDU FSTEC	Vulnerabilities of the Red Hat Linux operating system that allow malicious actors to compromise the confidentiality, integrity, and accessibility of protected information	28 Apr 201500:00	–	bdu_fstec
BDU FSTEC	Vulnerabilities of the Red Hat Linux operating system that allow malicious actors to compromise the confidentiality, integrity, and accessibility of protected information	28 Apr 201500:00	–	bdu_fstec
BDU FSTEC	Vulnerabilities of the Red Hat Linux operating system that allow malicious actors to compromise the confidentiality, integrity, and accessibility of protected information	28 Apr 201500:00	–	bdu_fstec
CVE	CVE-2001-0316	7 May 200104:00	–	cve
Cvelist	CVE-2001-0316	7 May 200104:00	–	cvelist

Source	Link
securityfocus	www.securityfocus.com/archive/59/162008
cve	www.cve.mitre.org/cgi-bin/cvename.cgi
securityfocus	www.securityfocus.com/bid/2364
redhat	www.redhat.com/support/errata/RHSA-2001-013.html
redhat	www.redhat.com/support/errata/RHSA-2001-047.html
ciac	www.ciac.org/ciac/bulletins/l-045.shtml
caldera	www.caldera.com/support/security/advisories/CSSA-2001-009.0.txt
debian	www.debian.org/security/2001/dsa-047
linux	www.linux.org.uk/VERSION/relnotes.2219.html
linux-mandrake	www.linux-mandrake.com/en/updates/2001/MDKSA-2001-037.php3

24 Jul 2001 17:23Current

5.5Medium risk

Vulners AI Score5.5

CVSS 24.6

EPSS0.00776

linux kernel sysctl vulnerability unprivileged access negative value input root access upgrade solution.