CVE-2004-0619: Integer overflow in the ubsec_keysetup function for Linux Broadcom 5820 cryptonet driver allows local users to cause a denial of service (crash) and possibly execute arbitrary… | LiveThreat CVE Feed — Verisq

Login Request a demo

Unscored severity · published Dec 6, 2004

CVE-2004-0619

Integer overflow in the ubsec_keysetup function for Linux Broadcom 5820 cryptonet driver allows local users to cause a denial of service (crash) and possibly execute arbitrary…

–

CVSS

0.5%

EPSS

No

On KEV

Description

Integer overflow in the ubsec_keysetup function for Linux Broadcom 5820 cryptonet driver allows local users to cause a denial of service (crash) and possibly execute arbitrary code via a negative add_dsa_buf_bytes variable, which leads to a buffer overflow.

Exploitation

Is it being used?

Exploit prediction (EPSS)0.5% · higher than 42% of CVEs

Exploited in the wildNo evidence yet

CISA KEVNot listed

Ransomware campaign useNot known

Affected products

Which versions

FC

Fedora Core · Redhat

core_1.0 · source: NVD

KE

Kernel · Redhat

2.4.20-8; 2.4.20-8; 2.4.20-8; 2.4.20-8; 2.4.20-8; 2.4.20-8; +2 more · source: NVD

LI

Linux · Redhat

8.0; 8.0; 8.0 · source: NVD

Affected product

FC

Fedora Core

Redhat

All Fedora Core CVEs

References

https://nvd.nist.gov/vuln/detail/CVE-2004-0619

https://www.cve.org/CVERecord?id=CVE-2004-0619

http://marc.info/?l=bugtraq&m=108802653409053&w=2

http://secunia.com/advisories/11936

http://www.ciac.org/ciac/bulletins/p-047.shtml

http://www.redhat.com/support/errata/RHSA-2004-549.html

http://www.redhat.com/support/errata/RHSA-2005-283.html

Vendor Advisory

http://www.securityfocus.com/bid/10599

More from Fedora Core

5.6

Hyper-Threading technology, as used in FreeBSD and other operating systems that are run on Intel Pentium and other processors, allows local users to use a malicious thread to…

–

buttonpressed.sh in scanbuttond 0.2.3 allows local users to overwrite arbitrary files via a symlink attack on the (1) scan.pnm and (2) scan.jpg temporary files

–

Buffer overflow in the wpa_printf function in the debugging code in wpa_supplicant in the Fedora NetworkManager package before 0.6.5-3.fc7 allows user-assisted remote attackers to…

–

lharc.c in lha does not securely create temporary files, which might allow local users to read or write files by creating a file before LHA is invoked

–

Integer overflow in the FontFileInitTable function in X.Org libXfont before 20070403 allows remote authenticated users to execute arbitrary code via a long first line in the…