Bug#302705: CAN-2005-0749: Potential DOS in elf_load_library()

[Horms <horms@debian.org>]

tags 30270 +pending
thanks

On Sat, Apr 02, 2005 at 03:03:53PM +0200, Moritz Muehlenhoff wrote:
> Package: kernel-source-2.4.27
> Severity: important
> Tags: security
> 
> Yichen Xie found out that load_elf_library can modify `elf_phdata' before
> freeing it, resulting in a local Denial-of-Service vulnerability.
> 
> A fix is available at:
> http://linux.bkbits.net:8080/linux-2.4/gnupatch@4244930dPN44h62CZtM0P-qXoOI-7A

Thanks, this fix is in SVN.

Do you know if it has a CAN number assigned, I have been unable to find one?

-- 
Horms