Oval Definition:	oval:org.mitre.oval:def:9566
Revision Date: 2013-04-29 Version: 11 Title: Race condition in the (1) add_key, (2) request_key, and (3) keyctl functions in Linux kernel 2.6.x allows local users to cause a denial of service (crash) or read sensitive kernel memory by modifying the length of a string argument between the time that the kernel calculates the length and when it copies the data into kernel memory. Description: Race condition in the (1) add_key, (2) request_key, and (3) keyctl functions in Linux kernel 2.6.x allows local users to cause a denial of service (crash) or read sensitive kernel memory by modifying the length of a string argument between the time that the kernel calculates the length and when it copies the data into kernel memory. Family: unix Class: vulnerability Status: ACCEPTED Reference(s): CVE-2006-0457 Platform(s): CentOS Linux 4 Oracle Linux 4 Red Hat Enterprise Linux 4 Product(s): Definition Synopsis RHEL4, CentOS4 or Oracle Linux 4 The operating system installed on the system is Red Hat Enterprise Linux 4 OR CentOS Linux 4.x OR Oracle Linux 4.x AND Configuration section kernel-hugemem is earlier than 0:2.6.9-42.EL OR kernel-hugemem-devel is earlier than 0:2.6.9-42.EL OR kernel-smp-devel is earlier than 0:2.6.9-42.EL OR kernel-largesmp-devel is earlier than 0:2.6.9-42.EL OR kernel is earlier than 0:2.6.9-42.EL OR kernel-devel is earlier than 0:2.6.9-42.EL OR kernel-doc is earlier than 0:2.6.9-42.EL OR kernel-largesmp is earlier than 0:2.6.9-42.EL OR kernel-smp is earlier than 0:2.6.9-42.EL
BACK