PT-2008-6231 · Linux+1 · Linux Kernel+1
Hugo Dias
·
Publicado
2008-12-09
·
Atualizado
2018-10-11
·
CVE-2008-5079
CVSS v2.0
4.9
Média
| Vetor | AV:L/AC:L/Au:N/C:N/I:N/A:C |
Name of the Vulnerable Software and Affected Versions
Linux kernel versions prior to 2.6.27.8
Description
The issue is related to the ATM subsystem in the Linux kernel, where a local user can cause a denial of service by making specific calls to
svc listen for the same socket and then reading a /proc/net/atm/*vc file. This action corrupts the vcc table, leading to a kernel infinite loop.Recommendations
For Linux kernel versions prior to 2.6.27.8, consider updating to a newer version to resolve the issue. As a temporary workaround, restrict access to the
/proc/net/atm/*vc files to minimize the risk of exploitation. Avoid making multiple calls to svc listen for the same socket until the issue is resolved.Exploit
Correção
DoS
Encontrou algum problema na descrição? Tem algo a acrescentar? Fique à vontade para nos escrever 👾
Enumeração de Fraquezas
Identificadores relacionados
Produtos afetados
Linux Kernel
Red Hat