PT-2008-6231 · Linux+1 · Linux Kernel+1
Hugo Dias
·
Published
2008-12-09
·
Updated
2018-10-11
·
CVE-2008-5079
CVSS v2.0
4.9
Medium
| Vector | AV:L/AC:L/Au:N/C:N/I:N/A:C |
Name of the Vulnerable Software and Affected Versions
Linux kernel versions prior to 2.6.27.8
Description
The issue is related to the ATM subsystem in the Linux kernel, where a local user can cause a denial of service by making specific calls to
svc listen for the same socket and then reading a /proc/net/atm/*vc file. This action corrupts the vcc table, leading to a kernel infinite loop.Recommendations
For Linux kernel versions prior to 2.6.27.8, consider updating to a newer version to resolve the issue. As a temporary workaround, restrict access to the
/proc/net/atm/*vc files to minimize the risk of exploitation. Avoid making multiple calls to svc listen for the same socket until the issue is resolved.Exploit
Fix
DoS
Found an issue in the description? Have something to add? Feel free to write us 👾
Weakness Enumeration
Related Identifiers
Affected Products
Linux Kernel
Red Hat