CVE-2004-1070 PUBLISHED CVSS 7.199999809265137 HIGH

The load_elf_binary function in the binfmt_elf loader (binfmt_elf.c) in Linux kernel 2.4.x up to 2.4.27, and 2.6.x up to 2.6.8, does not properly check return values from calls to the kernel_read function, which may allow local users to modify sensitive memory in a setuid program and execute arbitrary code.

EPSS 0.07% · 20.0th percentile

Risk Scores

CVSS v2.0
7.199999809265137
EPSS Score
0.07%
20.0th percentile

Affected Products

VendorProductVersions
n/an/an/a
linuxlinux_kernel2.4.0, 2.4.0, 2.4.0
susesuse_linux9.0, 9.0, 9.0
trustixsecure_linux2.0, 1.5, 2.1
redhatlinux_advanced_workstation2.1, 2.1
redhatenterprise_linux_desktop3.0
redhatfedora_corecore_3.0, core_2.0
redhatenterprise_linux2.1, 2.1, 2.1
turbolinuxturbolinux_server10.0

Timeline

References

…and 1 more

Open in Interactive Console →