CVE-2003-1288: Race Condition

Published Dec 31, 2003

Updated

Multiple race conditions in Linux-VServer 1.22 with Linux kernel 2.4.23 and SMP allow local users to cause a denial of service (kernel oops) via unknown attack vectors related to the (1) sinfo and (2) ipinfo data structures and the (a) forgetoriginalparent, (b) goodness, (c) schedule, (d) updateprocesstimes, and (e) vcnewscontext functions.

Affected Software

1 affected component

vserver Linux-VServer=1.22

Remediation

Patch Available

http://www.osvdb.org/7587

Event History

Dec 31, 2003

CVE Published

05:00 AM

Data Sourced

via NVD·05:00 AM

RemedyDescriptionSeverityAffected Software

Dec 4, 2005

CVE Published

via MITRE·04:00 PM

Data Sourced

via MITRE·04:00 PM

Description

Frequently Asked Questions

What is the severity of CVE-2003-1288?

CVE-2003-1288 is considered a medium severity vulnerability due to its potential to cause denial of service.

How do I fix CVE-2003-1288?

To mitigate CVE-2003-1288, it is recommended to upgrade to a later version of Linux-VServer that addresses these race conditions.

Who is affected by CVE-2003-1288?

CVE-2003-1288 affects local users of Linux-VServer 1.22 running on the Linux kernel 2.4.23 with SMP support.

What types of attacks does CVE-2003-1288 enable?

CVE-2003-1288 enables local users to perform attacks that can lead to a kernel oops and service disruption.

What are the underlying causes of CVE-2003-1288?

CVE-2003-1288 is caused by multiple race conditions related to the s_info and ip_info data structures in the affected software.