CVE-2004-0565

Published: Dec 6, 2004Modified: Apr 16, 2026

2.1

Vector

AV:L/AC:L/Au:N/C:P/I:N/A:N

Exploitability: 3.9 / Impact: 2.9

Source: NVD

Description

Floating point information leak in the context switch code for Linux 2.4.x only checks the MFH bit but does not verify the FPH owner, which allows local users to read register values of other processes by setting the MFH bit.

Affected (10)

Products: Mandrakesoft: Mandrake Multi Network Firewall, Mandrake Linux, Mandrake Linux Corporate Server · Gentoo: Linux · Linux: Linux Kernel · +1 more

Show all products

Mandrakesoft: Mandrake Multi Network Firewall, Mandrake Linux, Mandrake Linux Corporate Server · Gentoo: Linux · Linux: Linux Kernel · Trustix: Secure Linux

3 products

Mandrake Multi Network Firewall

Mandrake Linux Corporate Server

1 product

1 product

1 product

Configuration A

1 vulnerable

Vulnerable Software	Affected Versions
Mandrakesoft Mandrake Multi Network Firewall	Version 8.2

Configuration B

9 vulnerable

Vulnerable Software	Affected Versions
Gentoo Linux	All versions
Linux Linux Kernel	Version 2.4.0
Mandrakesoft Mandrake Linux	Version 10.0
Mandrakesoft Mandrake Linux	Version 9.1
Mandrakesoft Mandrake Linux	Version 9.2
Mandrakesoft Mandrake Linux Corporate Server	Version 2.1
Trustix Secure Linux	Version 2.0
Trustix Secure Linux	Version 2.1
Trustix Secure Linux	Version 2

References (30)

http://archives.neohapsis.com/archives/linux/owl/2004-q2/0038.html

Source: cve@mitre.org

Vendor Advisory

http://secunia.com/advisories/20162

Source: cve@mitre.org

http://secunia.com/advisories/20163

Source: cve@mitre.org

http://secunia.com/advisories/20202

Source: cve@mitre.org

http://secunia.com/advisories/20338

Source: cve@mitre.org

http://www.debian.org/security/2006/dsa-1067

Source: cve@mitre.org

http://www.debian.org/security/2006/dsa-1069

Source: cve@mitre.org

http://www.debian.org/security/2006/dsa-1070

Source: cve@mitre.org

http://www.debian.org/security/2006/dsa-1082

Source: cve@mitre.org

http://www.mandriva.com/security/advisories?name=MDKSA-2004:066

Source: cve@mitre.org

http://www.redhat.com/support/errata/RHSA-2004-504.html

Source: cve@mitre.org

http://www.securityfocus.com/bid/10687

Source: cve@mitre.org

https://bugzilla.redhat.com/bugzilla/show_bug.cgi?id=124734

Source: cve@mitre.org

Vendor Advisory

https://exchange.xforce.ibmcloud.com/vulnerabilities/16644

Source: cve@mitre.org

https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A10714

Source: cve@mitre.org

http://archives.neohapsis.com/archives/linux/owl/2004-q2/0038.html

Source: af854a3a-2127-422b-91ae-364da2661108

Vendor Advisory

http://secunia.com/advisories/20162

Source: af854a3a-2127-422b-91ae-364da2661108

http://secunia.com/advisories/20163

Source: af854a3a-2127-422b-91ae-364da2661108

http://secunia.com/advisories/20202

Source: af854a3a-2127-422b-91ae-364da2661108

http://secunia.com/advisories/20338

Source: af854a3a-2127-422b-91ae-364da2661108

http://www.debian.org/security/2006/dsa-1067

Source: af854a3a-2127-422b-91ae-364da2661108

http://www.debian.org/security/2006/dsa-1069

Source: af854a3a-2127-422b-91ae-364da2661108

http://www.debian.org/security/2006/dsa-1070

Source: af854a3a-2127-422b-91ae-364da2661108

http://www.debian.org/security/2006/dsa-1082

Source: af854a3a-2127-422b-91ae-364da2661108

http://www.mandriva.com/security/advisories?name=MDKSA-2004:066

Source: af854a3a-2127-422b-91ae-364da2661108

http://www.redhat.com/support/errata/RHSA-2004-504.html

Source: af854a3a-2127-422b-91ae-364da2661108

http://www.securityfocus.com/bid/10687

Source: af854a3a-2127-422b-91ae-364da2661108

https://bugzilla.redhat.com/bugzilla/show_bug.cgi?id=124734

Source: af854a3a-2127-422b-91ae-364da2661108

Vendor Advisory

https://exchange.xforce.ibmcloud.com/vulnerabilities/16644

Source: af854a3a-2127-422b-91ae-364da2661108

https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A10714

Source: af854a3a-2127-422b-91ae-364da2661108

Timeline

No history available yet.