Início
Tendências
Vulnerabilidades
Notícias
Pesquisadores
Por que dbugs?

Hugo Dias

#49826de 53,638
4.9CVSS total
Vulnerabilidades · 1
PT-2008-6231
4.9
2008-12-09
Linux · Linux Kernel · CVE-2008-5079
**Name of the Vulnerable Software and Affected Versions** Linux kernel versions prior to 2.6.27.8 **Description** The issue is related to the ATM subsystem in the Linux kernel, where a local user can cause a denial of service by making specific calls to `svc listen` for the same socket and then reading a `/proc/net/atm/*vc` file. This action corrupts the vcc table, leading to a kernel infinite loop. **Recommendations** For Linux kernel versions prior to 2.6.27.8, consider updating to a newer version to resolve the issue. As a temporary workaround, restrict access to the `/proc/net/atm/*vc` files to minimize the risk of exploitation. Avoid making multiple calls to `svc listen` for the same socket until the issue is resolved.