CVE-2003-0985

The mremap system call (do_mremap) in Linux kernel 2.4.x before 2.4.21, and possibly other versions before 2.4.24, does not properly perform bounds checks, which allows local users to cause a denial of service and possibly gain privileges by causing a remapping of a virtual memory area (VMA) to create a zero length VMA, a different vulnerability than CAN-2004-0077.

CVSS v2.0 NVD

7.2 HIGHAV:L/AC:L/Au:N/C:C/I:C/A:C

EPSS

1.23% chance of exploitation in the next 30 days, 69th percentile

Published

2004-09-01

Updated

2024-08-08

Proof-of-concept exploits (1)

• http://marc.info/?l=bugtraq&m=107340358402129&w=2

ExploitDB entries (3)

• https://www.exploit-db.com/exploits/145
• https://www.exploit-db.com/exploits/142
• https://www.exploit-db.com/exploits/141

Security advisories

• http://www.linuxsecurity.com/advisories/engarde_advisory-3904.html
• http://www.redhat.com/support/errata/RHSA-2003-417.html
• http://www.securityfocus.com/bid/9356
• http://www.kb.cert.org/vuls/id/490620
• http://www.redhat.com/support/errata/RHSA-2003-416.html
• http://www.redhat.com/support/errata/RHSA-2003-418.html
• http://www.redhat.com/support/errata/RHSA-2003-419.html

References

• CVE Record
• NVD entry