[Forgot Password]
Login  Register Subscribe

30479

 
 

423868

 
 

250038

 
 

909

 
 

195843

 
 

282

Paid content will be excluded from the download.


Download | Alert*
CVE
view JSON

CVE-2006-7051Date: (C)2007-02-23   (M)2023-12-22


The sys_timer_create function in posix-timers.c for Linux kernel 2.6.x allows local users to cause a denial of service (memory consumption) and possibly bypass memory limits or cause other processes to be killed by creating a large number of posix timers, which are allocated in kernel memory but are not treated as part of the process' memory.

CVSS Score and Metrics +CVSS Score and Metrics -

CVSS V2 Severity:
CVSS Score : 4.9
Exploit Score: 3.9
Impact Score: 6.9
 
CVSS V2 Metrics:
Access Vector: LOCAL
Access Complexity: LOW
Authentication: NONE
Confidentiality: NONE
Integrity: NONE
Availability: COMPLETE
  
Reference:
EXPLOIT-DB-1657
http://www.securityfocus.com/archive/1/archive/1/430278/30/5790/threaded
SREASON-2287
linux-systimercreate-dos(25712)

CPE    14
cpe:/o:linux:linux_kernel:2.6.20
cpe:/o:linux:linux_kernel:2.6.20.1
cpe:/o:linux:linux_kernel:2.6.18.3
cpe:/o:linux:linux_kernel:2.6.19.2
...

© SecPod Technologies