CVE-2003-0985

Public Exploit

Description

The mremap system call (do_mremap) in Linux kernel 2.4.x before 2.4.21, and possibly other versions before 2.4.24, does not properly perform bounds checks, which allows local users to cause a denial of service and possibly gain privileges by causing a remapping of a virtual memory area (VMA) to create a zero length VMA, a different vulnerability than CAN-2004-0077.

7.2

CVSS

Severity: High

CVSS 2.0 •

EPSS 0.57%

Vendor Advisory debian.org Vendor Advisory debian.org Vendor Advisory redhat.com Vendor Advisory com.br Vendor Advisory debian.org Vendor Advisory debian.org Vendor Advisory debian.org Vendor Advisory debian.org Vendor Advisory debian.org Vendor Advisory debian.org Vendor Advisory debian.org Vendor Advisory linuxsecurity.com Vendor Advisory debian.org Vendor Advisory debian.org Vendor Advisory debian.org Vendor Advisory immunix.org Vendor Advisory redhat.com Vendor Advisory debian.org Vendor Advisory marc.info Vendor Advisory sgi.com Vendor Advisory debian.org Vendor Advisory redhat.com Vendor Advisory redhat.com Vendor Advisory novell.com Vendor Advisory mandrakesoft.com Vendor Advisory securityfocus.com

Affected: n/a n/a

References

Link	Tags
http://secunia.com/advisories/20163	third party advisory
http://www.debian.org/security/2006/dsa-1082	vendor advisory
http://www.debian.org/security/2004/dsa-423	vendor advisory
http://www.redhat.com/support/errata/RHSA-2003-417.html	patch vendor advisory
http://distro.conectiva.com.br/atualizacoes/?id=a&anuncio=000799	vendor advisory
http://www.debian.org/security/2004/dsa-450	vendor advisory
http://www.debian.org/security/2006/dsa-1070	vendor advisory
http://www.debian.org/security/2004/dsa-440	vendor advisory
http://marc.info/?l=bugtraq&m=107394143105081&w=2	mailing list
http://www.debian.org/security/2004/dsa-439	vendor advisory
http://www.debian.org/security/2006/dsa-1067	vendor advisory
http://www.debian.org/security/2004/dsa-475	vendor advisory
http://www.debian.org/security/2006/dsa-1069	vendor advisory
http://www.linuxsecurity.com/advisories/engarde_advisory-3904.html	patch vendor advisory
http://www.debian.org/security/2004/dsa-417	vendor advisory
http://www.debian.org/security/2004/dsa-442	vendor advisory
http://secunia.com/advisories/20202	third party advisory
http://www.debian.org/security/2004/dsa-470	vendor advisory
http://secunia.com/advisories/20338	third party advisory
http://download.immunix.org/ImmunixOS/7.3/updates/IMNX-2004-73-001-01	vendor advisory
http://www.redhat.com/support/errata/RHSA-2003-416.html	vendor advisory
https://exchange.xforce.ibmcloud.com/vulnerabilities/14135	vdb entry
http://klecker.debian.org/~joey/security/kernel/patches/patch.CAN-2005-0528.mremap
http://www.debian.org/security/2004/dsa-413	vendor advisory
http://marc.info/?l=bugtraq&m=107340358402129&w=2	mailing list
http://marc.info/?l=bugtraq&m=107350348418373&w=2	mailing list
http://marc.info/?l=bugtraq&m=107340814409017&w=2	mailing list
http://marc.info/?l=bugtraq&m=107332754521495&w=2	vendor advisory
https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A860	vdb entry signature
http://archives.neohapsis.com/archives/bugtraq/2004-01/0070.html	mailing list
http://www.osvdb.org/3315	vdb entry
ftp://patches.sgi.com/support/free/security/advisories/20040102-01-U	vendor advisory
https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A867	vdb entry signature
http://www.kernel.org/pub/linux/kernel/v2.4/ChangeLog-2.4.24
http://www.securityfocus.com/bid/9356	exploit vdb entry patch vendor advisory
http://svn.debian.org/wsvn/kernel/patch-tracking/CVE-2005-0528?op=file&rev=0&sc=0
http://isec.pl/vulnerabilities/isec-0013-mremap.txt
http://marc.info/?l=bugtraq&m=107332782121916&w=2	mailing list
http://www.debian.org/security/2004/dsa-427	vendor advisory
http://www.redhat.com/support/errata/RHSA-2003-418.html	vendor advisory
http://www.ciac.org/ciac/bulletins/o-045.shtml	third party advisory government resource
http://www.redhat.com/support/errata/RHSA-2003-419.html	vendor advisory
http://www.novell.com/linux/security/advisories/2004_03_linux_kernel.html	vendor advisory
http://secunia.com/advisories/10532	third party advisory
http://www.kb.cert.org/vuls/id/490620	third party advisory us government resource
http://www.mandrakesoft.com/security/advisories?name=MDKSA-2004:001	vendor advisory

Frequently Asked Questions

What is the severity of CVE-2003-0985?: CVE-2003-0985 has been scored as a high severity vulnerability.
How to fix CVE-2003-0985?: To fix CVE-2003-0985, make sure you are using an up-to-date version of the affected component(s) by checking the vendor release notes. As for now, there are no other specific guidelines available.
Is CVE-2003-0985 being actively exploited in the wild?: It is possible that CVE-2003-0985 is being exploited or will be exploited in a near future based on public information. According to its EPSS score, there is a ~1% probability that this vulnerability will be exploited by malicious actors in the next 30 days.