Vulnerability Details CVE-2003-1288
Multiple race conditions in Linux-VServer 1.22 with Linux kernel 2.4.23 and SMP allow local users to cause a denial of service (kernel oops) via unknown attack vectors related to the (1) s_info and (2) ip_info data structures and the (a) forget_original_parent, (b) goodness, (c) schedule, (d) update_process_times, and (e) vc_new_s_context functions.
Exploit prediction scoring system (EPSS) score
EPSS Score 0.004
EPSS Ranking 61.4%
CVSS Severity
CVSS v2 Score 5.0
References
- http://linux-vserver.org/ChangeLog
- http://list.linux-vserver.org/archive/vserver/msg05630.html
- http://list.linux-vserver.org/archive/vserver/msg05631.html
- http://list.linux-vserver.org/archive/vserver/msg05658.html
- http://www.osvdb.org/7587
- http://linux-vserver.org/ChangeLog
- http://list.linux-vserver.org/archive/vserver/msg05630.html
- http://list.linux-vserver.org/archive/vserver/msg05631.html
- http://list.linux-vserver.org/archive/vserver/msg05658.html
- http://www.osvdb.org/7587
Products affected by CVE-2003-1288
-
cpe:2.3:a:vserver:linux-vserver:1.22