CVE-2007-3105

Publication date 27 July 2007

Last updated 24 July 2024

Ubuntu priority

Stack-based buffer overflow in the random number generator (RNG) implementation in the Linux kernel before 2.6.22 might allow local root users to cause a denial of service or gain privileges by setting the default wakeup threshold to a value greater than the output pool size, which triggers writing random numbers to the stack by the pool transfer function involving "bound check ordering". NOTE: this issue might only cross privilege boundaries in environments that have granular assignment of privileges for root.

Status

Show unmaintained releases

Package	Ubuntu Release	Status
linux-source-2.6.15	7.04 feisty	Not in release
	6.10 edgy	Not in release
	6.06 LTS dapper	Fixed 2.6.15-29.58
linux-source-2.6.17	7.04 feisty	Not in release
	6.10 edgy	Fixed 2.6.17.1-12.40
	6.06 LTS dapper	Not in release
linux-source-2.6.20	7.04 feisty	Fixed 2.6.20-16.31
	6.10 edgy	Not in release
	6.06 LTS dapper	Not in release
linux-source-2.6.22	7.04 feisty	Not in release
	6.10 edgy	Not in release
	6.06 LTS dapper	Not in release

References

Related Ubuntu Security Notices (USN)

USN-510-1
Linux kernel vulnerabilities
31 August 2007

USN-509-1
Linux kernel vulnerabilities
30 August 2007

USN-508-1
Linux kernel vulnerabilities
31 August 2007

Other references

https://www.cve.org/CVERecord?id=CVE-2007-3105