DSA-1070-1

Vulnerability : several Problem-Type : local/remote Debian-specific: no CVE IDs : CVE-2004-0427 CVE-2005-0489 CVE-2004-0394 CVE-2004-0447 CVE-2004-0554 CVE-2004-0565 CVE-2004-0685 CVE-2005-0001 CVE-2004-0883 CVE-2004-0949 CVE-2004-1016 CVE-2004-1333 CVE-2004-0997 CVE-2004-1335 CVE-2004-1017 CVE-2005-0124 CVE-2005-0528 CVE-2003-0984 CVE-2004-1070 CVE-2004-1071 CVE-2004-1072 CVE-2004-1073 CVE-2004-1074 CVE-2004-0138 CVE-2004-1068 CVE-2004-1234 CVE-2005-0003 CVE-2004-1235 CVE-2005-0504 CVE-2005-0384 CVE-2005-0135

Several local and remote vulnerabilities have been discovered in the Linux kernel that may lead to a denial of service or the execution of arbitrary code. The Common Vulnerabilities and Exposures project identifies the following problems:

CVE-2004-0427

 A local denial of service vulnerability in do_fork() has been found.     

CVE-2005-0489

 A local denial of service vulnerability in proc memory handling has
 been found.

CVE-2004-0394

 A buffer overflow in the panic handling code has been found.

CVE-2004-0447

 A local denial of service vulnerability through a null pointer
 dereference in the IA64 process handling code has been found.

CVE-2004-0554

 A local denial of service vulnerability through an infinite loop in
 the signal handler code has been found.

CVE-2004-0565

 An information leak in the context switch code has been found on
 the IA64 architecture.

CVE-2004-0685

 Unsafe use of copy_to_user in USB drivers may disclose sensitive
 information.

CVE-2005-0001

 A race condition in the i386 page fault handler may allow privilege
 escalation.

CVE-2004-0883

 Multiple vulnerabilities in the SMB filesystem code may allow denial
 of service of information disclosure.

CVE-2004-0949

 An information leak discovered in the SMB filesystem code.

CVE-2004-1016

 A local denial of service vulnerability has been found in the SCM layer.

CVE-2004-1333...