CVE-2003-0961

Description

Integer overflow in the do_brk function for the brk system call in Linux kernel 2.4.22 and earlier allows local users to gain root privileges.

7.2

CVSS

Severity: High

CVSS 2.0 •

EPSS 1.30% Top 25%

Vendor Advisory debian.org Vendor Advisory debian.org Vendor Advisory novell.com Vendor Advisory debian.org Vendor Advisory redhat.com Vendor Advisory debian.org Vendor Advisory mandriva.com Vendor Advisory com.br Vendor Advisory redhat.com Vendor Advisory debian.org Vendor Advisory debian.org Vendor Advisory debian.org Vendor Advisory debian.org Vendor Advisory debian.org Vendor Advisory debian.org

Affected: n/a n/a

References

Link	Tags
http://marc.info/?l=bugtraq&m=107064830206816&w=2	mailing list
http://secunia.com/advisories/10330	third party advisory
http://www.debian.org/security/2004/dsa-433	vendor advisory
http://www.debian.org/security/2004/dsa-423	vendor advisory
http://www.kb.cert.org/vuls/id/301156	third party advisory us government resource
http://www.novell.com/linux/security/advisories/2003_049_kernel.html	vendor advisory
http://www.debian.org/security/2004/dsa-450	vendor advisory
http://www.redhat.com/support/errata/RHSA-2003-389.html	patch vendor advisory
http://www.debian.org/security/2004/dsa-440	vendor advisory
http://www.mandriva.com/security/advisories?name=MDKSA-2003:110	vendor advisory
http://marc.info/?l=bugtraq&m=107394143105081&w=2	mailing list
http://distro.conectiva.com.br/atualizacoes/?id=a&anuncio=000796	vendor advisory
http://www.redhat.com/support/errata/RHSA-2003-368.html	vendor advisory
http://secunia.com/advisories/10328	third party advisory
http://secunia.com/advisories/10329	third party advisory
http://www.debian.org/security/2004/dsa-439	vendor advisory
http://www.debian.org/security/2004/dsa-475	vendor advisory
http://secunia.com/advisories/10338	third party advisory
http://secunia.com/advisories/10333	third party advisory
http://marc.info/?l=bugtraq&m=107064798706473&w=2	mailing list
http://www.debian.org/security/2004/dsa-417	vendor advisory
http://www.debian.org/security/2003/dsa-403	patch vendor advisory
http://isec.pl/papers/linux_kernel_do_brk.pdf
http://www.debian.org/security/2004/dsa-442	vendor advisory
http://www.debian.org/security/2004/dsa-470	vendor advisory

Frequently Asked Questions

What is the severity of CVE-2003-0961?: CVE-2003-0961 has been scored as a high severity vulnerability.
How to fix CVE-2003-0961?: To fix CVE-2003-0961, make sure you are using an up-to-date version of the affected component(s) by checking the vendor release notes. As for now, there are no other specific guidelines available.
Is CVE-2003-0961 being actively exploited in the wild?: It is possible that CVE-2003-0961 is being exploited or will be exploited in a near future based on public information. According to its EPSS score, there is a ~1% probability that this vulnerability will be exploited by malicious actors in the next 30 days.