PT-2019-1435 · Linux+5 · Linux Kernel+5
Publicado
2017-03-17
·
Atualizado
2021-06-02
·
CVE-2019-8980
CVSS v2.0
7.8
Alta
| Vetor | AV:N/AC:L/Au:N/C:N/I:N/A:C |
Name of the Vulnerable Software and Affected Versions
Linux kernel versions through 4.20.11
Description
The issue is related to a memory leak in the kernel read file function, specifically in the fs/exec.c file of the Linux kernel. This leak occurs when handling vfs read failures, allowing attackers to cause a denial of service by consuming memory. The exploitation of this issue can be achieved by triggering vfs read failures, potentially through specially crafted files.
Recommendations
For Linux kernel versions through 4.20.11, consider updating to a version that includes a fix for the memory leak in the kernel read file function to prevent denial of service attacks.
As a temporary workaround, consider restricting access to sensitive files and implementing memory usage monitoring to minimize the risk of exploitation.
Exploit
Correção
DoS
Memory Leak
Encontrou algum problema na descrição? Tem algo a acrescentar? Fique à vontade para nos escrever 👾
Identificadores relacionados
Produtos afetados
Alt Linux
Centos
Linux Kernel
Red Hat
Suse
Ubuntu