CVE-2004-1983

THE PAX Team Pax Linux - Denial of Service

Title source: rule

Description

The arch_get_unmapped_area function in mmap.c in the PaX patches for Linux kernel 2.6, when Address Space Layout Randomization (ASLR) is enabled, allows local users to cause a denial of service (infinite loop) via unknown attack vectors.

Exploits (1)

exploitdb WORKING POC VERIFIED

by Shadowinteger · cdoslinux

https://www.exploit-db.com/exploits/24078

View Code ZIP pw:eip

References (6)

[Mailing List] http://marc.info/?l=bugtraq&m=108420555920369&w=2

[Third Party Advisory, VDB Entry] https://exchange.xforce.ibmcloud.com/vulnerabilities/16037

[Patch] http://pax.grsecurity.net/

[Mailing List] http://marc.info/?l=bugtraq&m=108360001130312&w=2

[Vendor Advisory] http://security.gentoo.org/glsa/glsa-200407-02.xml

[Exploit, Patch, Vendor Advisory] http://www.securityfocus.com/bid/10264

Scores

EPSS 0.0021

EPSS Percentile 43.4%

Details

Status published

Products (2)

gentoo/linux 1.4

the_pax_team/pax_linux 2.6.5

Published May 02, 2004

Tracked Since Feb 18, 2026