CVEvulnerability
CVE-2004-0565
2.1 LOW
Official page ↗
- Status
- Modified
- Published
- 2004-12-06
- Last modified
- 2026-06-16
- Assigner
- [email protected]
- CVSS 2.0 ([email protected])
- 2.1 LOW — AV:L/AC:L/Au:N/C:P/I:N/A:N
Description
Floating point information leak in the context switch code for Linux 2.4.x only checks the MFH bit but does not verify the FPH owner, which allows local users to read register values of other processes by setting the MFH bit.
Affected configurations
• mandrakesoft mandrake multi network firewall 8.2
• gentoo linux
• linux linux kernel 2.4.0
• mandrakesoft mandrake linux 9.1
• mandrakesoft mandrake linux 9.2
• mandrakesoft mandrake linux 10.0
• mandrakesoft mandrake linux corporate server 2.1
• trustix secure linux 2
• trustix secure linux 2.0
• trustix secure linux 2.1
References
- http://archives.neohapsis.com/archives/linux/owl/2004-q2/0038.html Vendor Advisory
- http://secunia.com/advisories/20162 secunia.com
- http://secunia.com/advisories/20163 secunia.com
- http://secunia.com/advisories/20202 secunia.com
- http://secunia.com/advisories/20338 secunia.com
- http://www.debian.org/security/2006/dsa-1067 www.debian.org
- http://www.debian.org/security/2006/dsa-1069 www.debian.org
- http://www.debian.org/security/2006/dsa-1070 www.debian.org
- http://www.debian.org/security/2006/dsa-1082 www.debian.org
- http://www.mandriva.com/security/advisories?name=MDKSA-2004:066 www.mandriva.com
- http://www.redhat.com/support/errata/RHSA-2004-504.html www.redhat.com
- http://www.securityfocus.com/bid/10687 www.securityfocus.com
- https://bugzilla.redhat.com/bugzilla/show_bug.cgi?id=124734 Vendor Advisory
- https://exchange.xforce.ibmcloud.com/vulnerabilities/16644 exchange.xforce.ibmcloud.com
- https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A10714 oval.cisecurity.org
- http://archives.neohapsis.com/archives/linux/owl/2004-q2/0038.html Vendor Advisory
- http://secunia.com/advisories/20162 secunia.com
- http://secunia.com/advisories/20163 secunia.com
- http://secunia.com/advisories/20202 secunia.com
- http://secunia.com/advisories/20338 secunia.com
- http://www.debian.org/security/2006/dsa-1067 www.debian.org
- http://www.debian.org/security/2006/dsa-1069 www.debian.org
- http://www.debian.org/security/2006/dsa-1070 www.debian.org
- http://www.debian.org/security/2006/dsa-1082 www.debian.org
- http://www.mandriva.com/security/advisories?name=MDKSA-2004:066 www.mandriva.com
- http://www.redhat.com/support/errata/RHSA-2004-504.html www.redhat.com
- http://www.securityfocus.com/bid/10687 www.securityfocus.com
- https://bugzilla.redhat.com/bugzilla/show_bug.cgi?id=124734 Vendor Advisory
- https://exchange.xforce.ibmcloud.com/vulnerabilities/16644 exchange.xforce.ibmcloud.com
- https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A10714 oval.cisecurity.org