Linux Kernel ReiserFS File System Local Denial Of Service Vulnerability
BID:11533
Info
Linux Kernel ReiserFS File System Local Denial Of Service Vulnerability
| Bugtraq ID: | 11533 |
| Class: | Design Error |
| CVE: | |
| Remote: | No |
| Local: | Yes |
| Published: | Oct 26 2004 12:00AM |
| Updated: | Oct 26 2004 12:00AM |
| Credit: | Discovery of this issue is credited to Jeff Mahoney. |
| Vulnerable: |
Ubuntu Ubuntu Linux 4.1 ppc Ubuntu Ubuntu Linux 4.1 ia64 Ubuntu Ubuntu Linux 4.1 ia32 Redhat Linux 9.0 i386 Redhat Linux 7.3 i386 Redhat Fedora Core1 Mandriva Linux Mandrake 10.1 x86_64 Mandriva Linux Mandrake 10.1 Mandriva Linux Mandrake 10.0 AMD64 Mandriva Linux Mandrake 10.0 Mandriva Linux Mandrake 9.2 amd64 Mandriva Linux Mandrake 9.2 MandrakeSoft Multi Network Firewall 2.0 MandrakeSoft Corporate Server 3.0 MandrakeSoft Corporate Server 2.1 x86_64 MandrakeSoft Corporate Server 2.1 Linux kernel 2.6.8 rc3 Linux kernel 2.6.8 rc2 Linux kernel 2.6.8 rc1 Linux kernel 2.6.8 |
| Not Vulnerable: |
Linux kernel 2.6.9 |
Discussion
Linux Kernel ReiserFS File System Local Denial Of Service Vulnerability
The Linux kernel is affected by a local denial of service vulnerability in its ReiserFS file system functionality. This issue is due to a failure of the application to properly handle files under certain conditions.
An attacker may leverage this issue to trigger a livelock in the affected file system, forcing a user to restart the computer to return it to proper functionality.
The Linux kernel is affected by a local denial of service vulnerability in its ReiserFS file system functionality. This issue is due to a failure of the application to properly handle files under certain conditions.
An attacker may leverage this issue to trigger a livelock in the affected file system, forcing a user to restart the computer to return it to proper functionality.
Exploit / POC
Linux Kernel ReiserFS File System Local Denial Of Service Vulnerability
No exploit is required to leverage this issue.
No exploit is required to leverage this issue.
Solution / Fix
Linux Kernel ReiserFS File System Local Denial Of Service Vulnerability
Solution:
The vendor has released an upgrade dealing with this issue.
It had been previously reported that a number of vendors had released advisories dealing with this issue (Fedora Legacy FLSA:2336, Ubuntu Linux USN-38-1, MandrakeSoft MDKSA-2005:022, TurboLinux 28/Feb/2005, and SuSE Linux SUSE-SA:2005:018). Furthermore it had been reported that this issue corresponded with Mitre candidate ID CAN-2004-0814. It has been found that this issue neither corresponds with the previously mentioned Mitre candidate ID nor is it fixed by any of the previously noted advisories or fixes. This information was posted in error.
This BID will be updated as advisories are released.
Linux kernel 2.6.8 rc1
Linux kernel 2.6.8 rc3
Linux kernel 2.6.8
Linux kernel 2.6.8 rc2
Solution:
The vendor has released an upgrade dealing with this issue.
It had been previously reported that a number of vendors had released advisories dealing with this issue (Fedora Legacy FLSA:2336, Ubuntu Linux USN-38-1, MandrakeSoft MDKSA-2005:022, TurboLinux 28/Feb/2005, and SuSE Linux SUSE-SA:2005:018). Furthermore it had been reported that this issue corresponded with Mitre candidate ID CAN-2004-0814. It has been found that this issue neither corresponds with the previously mentioned Mitre candidate ID nor is it fixed by any of the previously noted advisories or fixes. This information was posted in error.
This BID will be updated as advisories are released.
Linux kernel 2.6.8 rc1
-
Linux linux-2.6.9.tar.bz2
http://www.kernel.org/pub/linux/kernel/v2.6/linux-2.6.9.tar.bz2
Linux kernel 2.6.8 rc3
-
Linux linux-2.6.9.tar.bz2
http://www.kernel.org/pub/linux/kernel/v2.6/linux-2.6.9.tar.bz2
Linux kernel 2.6.8
-
Linux linux-2.6.9.tar.bz2
http://www.kernel.org/pub/linux/kernel/v2.6/linux-2.6.9.tar.bz2
Linux kernel 2.6.8 rc2
-
Linux linux-2.6.9.tar.bz2
http://www.kernel.org/pub/linux/kernel/v2.6/linux-2.6.9.tar.bz2
References
Linux Kernel ReiserFS File System Local Denial Of Service Vulnerability
References:
References:
- kernel.org Homepage. (Linux Kernel)
- Linux Kernel 2.6.9 Change Log (Linux Kernel)