Vulnerability in Red Hat Enterprise Linux
CVE-2005-0403
init_dev in tty_io.c in the Red Hat backport of NPTL to Red Hat Enterprise Linux 3 does not properly clear controlling tty's in multi-threaded applications, which allows local users to cause a denial of service (crash) and possibly gain tty access via unknown attack vectors that trigger an access of a pointer to a freed structure.
EPSS: 0.004 (32.9th percentile) — read the EPSS interpretation.
Affected products
- Redhat Enterprise_linux — versions 3.0
- Redhat Enterprise_linux_desktop — versions 3.0
- N/a — versions n/a
References
- secalert@redhat.com (x_refsource_OVAL, signature, vdb-entry)
- secalert@redhat.com (x_refsource_MISC)
- secalert@redhat.com (x_refsource_REDHAT, vendor-advisory, Patch, Vendor Advisory)