2.4.20.8

DATE	CVE	VULNERABILITY TITLE	RISK
2004-12-06	CVE-2004-0619	Integer Overflow vulnerability in Linux Kernel Broadcom 5820 Cryptonet Driver Integer overflow in the ubsec_keysetup function for Linux Broadcom 5820 cryptonet driver allows local users to cause a denial of service (crash) and possibly execute arbitrary code via a negative add_dsa_buf_bytes variable, which leads to a buffer overflow. local low complexity redhat	7.2
2004-03-03	CVE-2004-0077	Local Privilege Escalation vulnerability in Linux Kernel do_mremap Function VMA Limit The do_mremap function for the mremap system call in Linux 2.2 to 2.2.25, 2.4 to 2.4.24, and 2.6 to 2.6.2, does not properly check the return value from the do_munmap function when the maximum number of VMA descriptors is exceeded, which allows local users to gain root privileges, a different vulnerability than CAN-2003-0985. local low complexity redhat linux netwosix trustix	7.2
2004-02-17	CVE-2003-0700	Remote Security vulnerability in Kernel 2.4.208/2.4.21 The C-Media PCI sound driver in Linux before 2.4.22 does not use the get_user function to access userspace in certain conditions, which crosses security boundaries and may facilitate the exploitation of vulnerabilities, a different vulnerability than CVE-2003-0699. network low complexity redhat	7.5