PT-2007-1503 · Red Hat · Red Hat

Publicado

2007-02-27

·

Atualizado

2017-10-11

·

CVE-2007-0001

CVSS v2.0

4.7

Média

VetorAV:L/AC:M/Au:N/C:N/I:N/A:C
Name of the Vulnerable Software and Affected Versions Red Hat Enterprise Linux kernel version 2.6.9
Description The issue is related to the file watch implementation in the audit subsystem, specifically when using the auditctl -w command. It allows local users to cause a denial of service, resulting in a kernel panic, by replacing a watched file. This replacement does not cause the watch on the old inode to be dropped, leading to the denial of service.
Recommendations For Red Hat Enterprise Linux kernel version 2.6.9, consider disabling the file watch implementation in the audit subsystem as a temporary workaround until a patch is available. Restrict access to the auditctl command to minimize the risk of exploitation.

Exploit

Correção

Encontrou algum problema na descrição? Tem algo a acrescentar? Fique à vontade para nos escrever 👾
dbugs@ptsecurity.com

Identificadores relacionados

CVE-2007-0001
RHSA-2007:0085
RHSA-2007_0085

Produtos afetados

Red Hat