PT-2011-2859 · Linux+1 · Linux Kernel+1

Nelson Elhage

·

Publicado

2011-04-03

·

Atualizado

2023-02-13

·

CVE-2011-1082

CVSS v2.0

4.9

Média

VetorAV:L/AC:L/Au:N/C:N/I:N/A:C
Name of the Vulnerable Software and Affected Versions Linux kernel versions prior to 2.6.38
Description The issue allows local users to cause a denial of service, resulting in either a deadlock or stack memory consumption, by making epoll create and epoll ctl system calls via a crafted application. This is due to the improper checking for closed loops or deep chains when placing epoll file descriptors within other epoll data structures.
Recommendations For Linux kernel versions prior to 2.6.38, update to version 2.6.38 or later to resolve the issue.

Exploit

Correção

DoS

Resource Exhaustion

Encontrou algum problema na descrição? Tem algo a acrescentar? Fique à vontade para nos escrever 👾
dbugs@ptsecurity.com

Enumeração de Fraquezas

CWE-400

Identificadores relacionados

CVE-2011-1082
RHSA-2011:0500
RHSA-2011:0542
RHSA-2011:0883
RHSA-2011_0542
RHSA-2011_0883

Produtos afetados

Linux Kernel
Red Hat