PT-2005-3593 · Linux+1 · Linux Kernel+1
Blossom
·
Publicado
2005-10-25
·
Atualizado
2018-10-19
·
CVE-2005-2708
CVSS v2.0
2.1
Baixa
| Vetor | AV:L/AC:L/Au:N/C:N/I:N/A:P |
Name of the Vulnerable Software and Affected Versions
Linux kernel version 2.4 on 64-bit x86 architectures
Description
The issue is related to the search binary handler function in exec.c, which does not properly check a return code when virtual memory is low. This can be exploited by local users to cause a denial of service, resulting in a system panic. The exploitation can be demonstrated by running a process with limited virtual memory using the bash ulimit -v command.
Recommendations
For Linux kernel version 2.4 on 64-bit x86 architectures, consider applying a patch that fixes the search binary handler function to properly handle return codes when virtual memory is low. As a temporary workaround, restrict the use of the bash ulimit -v command to minimize the risk of exploitation.
Exploit
Correção
Encontrou algum problema na descrição? Tem algo a acrescentar? Fique à vontade para nos escrever 👾
Enumeração de Fraquezas
Identificadores relacionados
Produtos afetados
Linux Kernel
Bash