PT-2006-2090 · Linux · Linux Kernel

Al Viro

·

Publicado

2006-04-05

·

Atualizado

2018-10-03

·

CVE-2006-1055

CVSS v2.0

4.9

Média

VetorAV:L/AC:L/Au:N/C:N/I:N/A:C
Name of the Vulnerable Software and Affected Versions Linux kernel versions 2.6.12 through 2.6.17-rc1
Description The issue is related to the fill write buffer function in sysfs/file.c, which does not properly zero-terminate a buffer when a length of PAGE SIZE or more is requested. This could allow local users to cause a denial of service by triggering an out-of-bounds read, potentially leading to a system crash.
Recommendations For Linux kernel versions 2.6.12 through 2.6.17-rc1, consider updating to a version after 2.6.17-rc1 to resolve the issue. As a temporary workaround, restrict local user access to minimize the risk of exploitation.

Exploit

Correção

Encontrou algum problema na descrição? Tem algo a acrescentar? Fique à vontade para nos escrever 👾
dbugs@ptsecurity.com

Identificadores relacionados

CVE-2006-1055

Produtos afetados

Linux Kernel