PT-2007-1330 · Linux · Linux Kernel

Fingerout · Published 2007-02-24 · Updated 2018-10-30 · CVE-2006-7051

Positive Technologies (AI Summary)

CVSS v2.0

4.9

Medium

Base vector

AV:L/AC:L/Au:N/C:N/I:N/A:C

Name of the Vulnerable Software and Affected Versions Linux kernel version 2.6.x

Description The issue allows local users to cause a denial of service by consuming memory and possibly bypass memory limits or cause other processes to be killed. This is achieved by creating a large number of posix timers, which are allocated in kernel memory but not treated as part of the process' memory.

Recommendations For Linux kernel version 2.6.x, consider restricting the creation of posix timers to prevent excessive memory consumption until a patch is available. As a temporary workaround, limiting the number of timers that can be created by a single process may help mitigate the risk of denial of service.

Exploit

Fix

Related Identifiers

CVE-2006-7051

Affected Products

Linux Kernel

References · 5

• 🔥 https://exploit-db.com/exploits/1657 · Exploit
• https://nvd.nist.gov/vuln/detail/CVE-2006-7051 · Security Note
• https://exchange.xforce.ibmcloud.com/vulnerabilities/25712 · Note
• http://securityreason.com/securityalert/2287 · Note
• http://securityfocus.com/archive/1/430278/30/5790/threaded · Note