CVE-2004-0565: Low severity Mandrakesoft Mandrake Multi Network Firewall vulnerability
Floating point information leak in the context switch code for Linux 2.4.x only checks the MFH bit but does not verify the FPH owner, which allows local users to read register values of other processes by setting the MFH bit.
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2004-0565?
CVE-2004-0565 is considered a medium severity vulnerability due to the potential information leak that can be exploited by local users.
How do I fix CVE-2004-0565?
To fix CVE-2004-0565, users should update their affected Linux kernel and apply the latest security patches provided by their distribution.
Which versions of Linux are affected by CVE-2004-0565?
CVE-2004-0565 affects Linux kernel version 2.4.x and specific distributions including Mandrake Linux, Trustix Secure Linux, and others listed in the vulnerability details.
Can CVE-2004-0565 be exploited remotely?
CVE-2004-0565 cannot be exploited remotely as it requires local user access to the affected system.
What impact does CVE-2004-0565 have on system security?
CVE-2004-0565 allows local users to read sensitive floating point register values from other processes, potentially exposing private data.