Vulnerability Description
Linux kernel 2.4.x and 2.6.x for x86 allows local users to cause a denial of service (system crash), possibly via an infinite loop that triggers a signal handler with a certain sequence of fsave and frstor instructions, as originally demonstrated using a "crash.c" program.
CVSS Score
LOW
Affected Products
| Vendor | Product | Versions |
|---|---|---|
| Avaya | Converged Communications Server | 2.0 |
| Avaya | Modular Messaging Message Storage Server | s3400 |
| Gentoo | Linux | 1.4 |
| Linux | Linux Kernel | 2.4.18 |
| Redhat | Enterprise Linux | 2.1 |
| Suse | Suse Linux | 7 |
| Avaya | Intuity Audix | All versions |
| Suse | Suse Email Server | 3.1 |
| Suse | Suse Linux Admin-Cd For Firewall | All versions |
| Suse | Suse Linux Connectivity Server | All versions |
| Suse | Suse Linux Database Server | All versions |
| Suse | Suse Linux Firewall Cd | All versions |
| Suse | Suse Linux Office Server | All versions |
| Suse | Suse Office Server | All versions |
| Avaya | S8300 | r2.0.0 |
| Avaya | S8500 | r2.0.0 |
| Avaya | S8700 | r2.0.0 |
| Conectiva | Linux | 8.0 |
References
- http://distro.conectiva.com.br/atualizacoes/?id=a&anuncio=000845
- http://gcc.gnu.org/bugzilla/show_bug.cgi?id=15905
- http://linuxreviews.org/news/2004-06-11_kernel_crash/index.html
- http://lwn.net/Articles/91155/
- http://marc.info/?l=bugtraq&m=108786114032681&w=2
- http://marc.info/?l=bugtraq&m=108793699910896&w=2
- http://marc.info/?l=linux-kernel&m=108681568931323&w=2
- http://secunia.com/advisories/20162
- http://secunia.com/advisories/20163
- http://secunia.com/advisories/20202
- http://secunia.com/advisories/20338
- http://security.gentoo.org/glsa/glsa-200407-02.xml
- http://www.debian.org/security/2006/dsa-1067
- http://www.debian.org/security/2006/dsa-1069
- http://www.debian.org/security/2006/dsa-1070
FAQ
What is CVE-2004-0554?
CVE-2004-0554 is a vulnerability with a CVSS score of 2.1 (LOW). Linux kernel 2.4.x and 2.6.x for x86 allows local users to cause a denial of service (system crash), possibly via an infinite loop that triggers a signal handler with a certain sequence of fsave and f...
How severe is CVE-2004-0554?
CVE-2004-0554 has been rated LOW with a CVSS base score of 2.1/10. Review the CVSS metrics above for detailed severity breakdown.
Is there a patch for CVE-2004-0554?
Check the references section above for vendor advisories and patch information. Affected products include: Avaya Converged Communications Server, Avaya Modular Messaging Message Storage Server, Gentoo Linux, Linux Linux Kernel, Redhat Enterprise Linux.