CVE-2004-0814
Fixed in a distro release EPSS <1%
Multiple race conditions in the terminal layer in Linux 2.4.x, and 2.6.x before 2.6.9, allow (1) local users to obtain portions of kernel data via a TIOCSETD ioctl call to a terminal interface that is being accessed by another thread, or (2) remote attackers to cause a denial of service (panic) by switching from console to PPP line discipline, then quickly sending data that is received during the switch.
Products: linux_kernel, ubuntu_linux
Distro releases
| Release | Package | Fixed in |
|---|---|---|
| Red Hat Enterprise Linux 3 | kernel | 0:2.4.21-27.0.4.EL |
| Red Hat Enterprise Linux 3 | kernel-BOOT | 0:2.4.21-27.0.4.EL |
| Red Hat Enterprise Linux 3 | kernel-debuginfo | 0:2.4.21-27.0.4.EL |
| Red Hat Enterprise Linux 3 | kernel-doc | 0:2.4.21-27.0.4.EL |
| Red Hat Enterprise Linux 3 | kernel-hugemem | 0:2.4.21-27.0.4.EL |
| Red Hat Enterprise Linux 3 | kernel-hugemem-unsupported | 0:2.4.21-27.0.4.EL |
| Red Hat Enterprise Linux 3 | kernel-smp | 0:2.4.21-27.0.4.EL |
| Red Hat Enterprise Linux 3 | kernel-smp-unsupported | 0:2.4.21-27.0.4.EL |
| Red Hat Enterprise Linux 3 | kernel-source | 0:2.4.21-27.0.4.EL |
| Red Hat Enterprise Linux 3 | kernel-unsupported | 0:2.4.21-27.0.4.EL |