20040502 PaX Linux Kernel 2.6 Patches DoS Advisorymailing list
http://marc.info/?l=bugtraq&m=108360001130312&w=2 CVE-2004-1983
PaX 2.6 Kernel Patch - Denial of Service
Record summary
CVE-2004-1983 has a selected CVSS score of 2.1; EIP currently links 1 catalogued exploit.
Description
The arch_get_unmapped_area function in mmap.c in the PaX patches for Linux kernel 2.6, when Address Space Layout Randomization (ASLR) is enabled, allows local users to cause a denial of service (infinite loop) via unknown attack vectors.
Description source: CVE List
Exploitation context
Available material
- Catalogued exploits
- 1
Proofs of concept
1Catalogued exploits
ExploitDBPaX 2.6 Kernel Patch - Denial of ServiceExploitDB exploitby ShadowintegerNot analyzed1 file
References
720040509 PaX DoS proof-of-conceptmailing list
http://marc.info/?l=bugtraq&m=108420555920369&w=2 pax.grsecurity.netConfirmation
http://pax.grsecurity.net/ GLSA-200407-02Vendor advisory
http://security.gentoo.org/glsa/glsa-200407-02.xml 10264vdb entry
http://www.securityfocus.com/bid/10264 pax-aslr-enabled-dos(16037)vdb entry
https://exchange.xforce.ibmcloud.com/vulnerabilities/16037 nvd.nist.gov
https://nvd.nist.gov/vuln/detail/CVE-2004-1983