The arch_get_unmapped_area function in mmap.c in the PaX patches for Linux kernel 2.6, when Address Space Layout Randomization (ASLR) is enabled, allows local users to cause a denial of service (infinite loop) via unknown attack vectors.
CVSS 2.0
Severity: LOW
Problem Type: NVD-CWE-Other,
Products Affected
| Vendor | Product | Version |
|---|---|---|
| gentoo | linux | 1.4 |
| the_pax_team | pax_linux | 2.6.5 |
Unknown vulnerability in PaX from the September 2003 release to 2.2 before 2005.03.05, related to SEGMEXEC or RANDEXEC and VMA mirroring, allows local users and possibly remote attackers to bypass intended access restrictions and execute arbitrary code.
CVSS 2.0
Severity: MEDIUM
Problem Type: NVD-CWE-Other,
Products Affected
| Vendor | Product | Version |
|---|---|---|
| the_pax_team | pax_linux | 2.4.22 |
| the_pax_team | pax_linux | 2.4.24 |
| the_pax_team | pax_linux | 2.4.25 |
| the_pax_team | pax_linux | 2.4.20 |
| the_pax_team | pax_linux | 2.2 |
| the_pax_team | pax_linux | 2.4.28 |
| the_pax_team | pax_linux | 2.4.21 |
| the_pax_team | pax_linux | 2.4.23 |
| the_pax_team | pax_linux | 2.4.26 |
| the_pax_team | pax_linux | 2.6.5 |
| the_pax_team | pax_linux | 2.4.27 |