CVE-2004-1295 uml-utilities

Metadata

low
2.1
uml-utilities
CVE-2004-1295
2017-12-30 18:04
2017-12-29 23:01
2017-12-29 21:05
2017-06-18 07:05
2017-06-16 18:43
2017-04-01 19:11
2017-01-05 20:17

Description

The slip_down function in slip.c for the uml_net program in uml-utilities 20030903, when uml_net is installed setuid root, does not verify whether the calling user has sufficient permission to disable an interface, which allows local users to cause a denial of service (network service disabled).

Am I vulnerable?

The constraints below list the versions that this vulnerability is patched in, and versions that are unaffected. If a patch is ready but unrealeased, then it is pending.

Or, you can just let us figure it out for you! Appcanary continously monitor your installed packages, and tell you if any of them are vulnerable.

Sign up for monitoring

Affected package information

None

Unaffected

Release Package Reason
stretch uml-utilities
jessie uml-utilities
buster uml-utilities
wheezy uml-utilities
sid uml-utilities