First published: Wed Apr 05 2006(Updated: )
The fill_write_buffer function in sysfs/file.c in Linux kernel 2.6.12 up to versions before 2.6.17-rc1 does not zero terminate a buffer when a length of PAGE_SIZE or more is requested, which might allow local users to cause a denial of service (crash) by causing an out-of-bounds read.
Credit: secalert@redhat.com secalert@redhat.com
Affected Software | Affected Version | How to fix |
---|---|---|
Linux Linux kernel | =2.6.12-rc1 | |
Linux Linux kernel | =2.6.12-rc4 | |
Linux Linux kernel | =2.6.14-rc2 | |
Linux Linux kernel | =2.6.15.3 | |
Linux Linux kernel | =2.6.16-rc1 | |
Linux Linux kernel | =2.6.13 | |
Linux Linux kernel | =2.6.15-rc4 | |
Linux Linux kernel | =2.6.13.3 | |
Linux Linux kernel | =2.6.14.4 | |
Linux Linux kernel | =2.6.14 | |
Linux Linux kernel | =2.6.13-rc1 | |
Linux Linux kernel | =2.6.14.3 | |
Linux Linux kernel | =2.6.13-rc6 | |
Linux Linux kernel | =2.6.13-rc7 | |
Linux Linux kernel | =2.6.15.1 | |
Linux Linux kernel | =2.6.15-rc5 | |
Linux Linux kernel | =2.6.14.5 | |
Linux Linux kernel | =2.6.13.2 | |
Linux Linux kernel | =2.6.12-rc5 | |
Linux Linux kernel | =2.6.14-rc3 | |
Linux Linux kernel | =2.6.17 | |
Linux Linux kernel | =2.6.15-rc3 | |
Linux Linux kernel | =2.6.14.1 | |
Linux Linux kernel | =2.6.12.5 | |
Linux Linux kernel | =2.6.12.1 | |
Linux Linux kernel | =2.6.13.4 | |
Linux Linux kernel | =2.6.12.2 | |
Linux Linux kernel | =2.6.14-rc1 | |
Linux Linux kernel | =2.6.15.2 | |
Linux Linux kernel | =2.6.12.4 | |
Linux Linux kernel | =2.6.12.3 | |
Linux Linux kernel | =2.6.13-rc4 | |
Linux Linux kernel | =2.6.15.4 | |
Linux Linux kernel | =2.6.12.6 | |
Linux Linux kernel | =2.6.15 | |
Linux Linux kernel | =2.6.15-rc6 | |
Linux Linux kernel | =2.6.15-rc1 | |
Linux Linux kernel | =2.6.14.2 | |
Linux Linux kernel | =2.6.14-rc4 | |
Linux Linux kernel | =2.6.15-rc7 | |
Linux Linux kernel | =2.6.15.5 | |
Linux Linux kernel | =2.6.13.1 | |
Linux Linux kernel | =2.6.12 |
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.