PT-2007-1330 · Linux · Linux Kernel

Fingerout · Publicado 2007-02-24 · Atualizado 2018-10-30 · CVE-2006-7051

Positive Technologies (AI Summary)

CVSS v2.0

4.9

Média

Vetor base

AV:L/AC:L/Au:N/C:N/I:N/A:C

Name of the Vulnerable Software and Affected Versions Linux kernel version 2.6.x

Description The issue allows local users to cause a denial of service by consuming memory and possibly bypass memory limits or cause other processes to be killed. This is achieved by creating a large number of posix timers, which are allocated in kernel memory but not treated as part of the process' memory.

Recommendations For Linux kernel version 2.6.x, consider restricting the creation of posix timers to prevent excessive memory consumption until a patch is available. As a temporary workaround, limiting the number of timers that can be created by a single process may help mitigate the risk of denial of service.

Exploit

Correção

Identificadores relacionados

CVE-2006-7051

Produtos afetados

Linux Kernel

Referências · 5

• 🔥 https://exploit-db.com/exploits/1657 · Exploit
• https://exchange.xforce.ibmcloud.com/vulnerabilities/25712 · Nota
• http://securityreason.com/securityalert/2287 · Nota
• https://nvd.nist.gov/vuln/detail/CVE-2006-7051 · Nota de Segurança
• http://securityfocus.com/archive/1/430278/30/5790/threaded · Nota