CVE-2010-0729
First published: Wed Mar 10 2010(Updated: )
(Internal git) Commit c31d1f3f363a5c3b6dbd4d6daa36fa0f4273e948 "a64: fix deadlock in ia64 sys_ptrace" moved ptrace_check_attach() from find_thread_for_addr() to tasklist-is-not-held area. However it introduced other problems. In the likely case, when rbs_child == child, ptrace_check_attach() is never called. Otherwise we do ptrace_check_attach(rbs_child) twice. This means that any peek/poke request can silently fail and fool the tracer. With this patch the logic is ptrace_check_attach(child); if (rbs_child != child) { // we should use rbs_child ... if (!ptrace_check_attach(rbs_child)) child = rbs_child; // but if check_attach() fails we continue to // use child, we are doing as well as we can. } To simplify the error-handling and the logic, this patch changes the code to detect the likely rbs_child == child case earlier, right after find_thread_for_addr(). This only affects Red Hat Enterprise Linux 4.
Credit: secalert@redhat.com
| Affected Software | Affected Version | How to fix |
|---|---|---|
| Redhat Enterprise Linux | =4 |
Never miss a vulnerability like this again
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
Reference Links
- https://bugzilla.redhat.com/show_bug.cgi?id=572007
- http://www.openwall.com/lists/oss-security/2010/03/12/2
- http://www.securityfocus.com/bid/38702
- http://www.redhat.com/support/errata/RHSA-2010-0394.html
- http://support.avaya.com/css/P8/documents/100090459
- https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A8687
- https://rhn.redhat.com/errata/RHSA-2010-0394.html
- collector/nvd-historical
- collector/nvd-index
- agent/type
- agent/first-publish-date
- agent/softwarecombine
- collector/mitre-cve
- source/MITRE
- agent/references
- agent/author
- agent/last-modified-date
- agent/weakness
- agent/severity
- agent/description
- agent/event
- collector/redhat-bugzilla
- source/Red Hat
- alias/CVE-2010-0729
- agent/tags
- agent/trending
- vendor/redhat
- canonical/redhat enterprise linux
- version/redhat enterprise linux/4