Linux Kernel MMap Invalid Memory Region Local Denial Of Service Vulnerability
BID:13893
Info
Linux Kernel MMap Invalid Memory Region Local Denial Of Service Vulnerability
| Bugtraq ID: | 13893 |
| Class: | Failure to Handle Exceptional Conditions |
| CVE: |
CVE-2005-1265 |
| Remote: | No |
| Local: | Yes |
| Published: | Jun 08 2005 12:00AM |
| Updated: | Jul 12 2009 02:56PM |
| Credit: | Discovery of this issue is credited to Chris Wright. |
| Vulnerable: |
Ubuntu Ubuntu Linux 5.0 4 powerpc Ubuntu Ubuntu Linux 5.0 4 i386 Ubuntu Ubuntu Linux 5.0 4 amd64 Ubuntu Ubuntu Linux 4.1 ppc Ubuntu Ubuntu Linux 4.1 ia64 Ubuntu Ubuntu Linux 4.1 ia32 Redhat Enterprise Linux WS 4 Redhat Enterprise Linux ES 4 Redhat Enterprise Linux AS 4 Redhat Desktop 4.0 Linux kernel 2.6.10 Linux kernel 2.6.8 Debian Linux 3.1 sparc Debian Linux 3.1 s/390 Debian Linux 3.1 ppc Debian Linux 3.1 mipsel Debian Linux 3.1 mips Debian Linux 3.1 m68k Debian Linux 3.1 ia-64 Debian Linux 3.1 ia-32 Debian Linux 3.1 hppa Debian Linux 3.1 arm Debian Linux 3.1 amd64 Debian Linux 3.1 alpha Debian Linux 3.1 |
| Not Vulnerable: | |
Discussion
Linux Kernel MMap Invalid Memory Region Local Denial Of Service Vulnerability
The Linux kernel is reported prone to a local denial of service vulnerability. The issue is reported to exist due to a lack of validation performed by 'mmap()' on memory regions passed to the function.
Immediate consequence of exploitation is a kernel panic. However, it is conjectured that this issue may be further leveraged to execute arbitrary code in the context of the system kernel, although this is not confirmed.
The Linux kernel is reported prone to a local denial of service vulnerability. The issue is reported to exist due to a lack of validation performed by 'mmap()' on memory regions passed to the function.
Immediate consequence of exploitation is a kernel panic. However, it is conjectured that this issue may be further leveraged to execute arbitrary code in the context of the system kernel, although this is not confirmed.
Exploit / POC
Linux Kernel MMap Invalid Memory Region Local Denial Of Service Vulnerability
Currently we are not aware of any exploits for this issue. If you feel we are in error or are aware of more recent information, please mail us at: [email protected] <mailto:[email protected]>.
Currently we are not aware of any exploits for this issue. If you feel we are in error or are aware of more recent information, please mail us at: [email protected] <mailto:[email protected]>.
Solution / Fix
Linux Kernel MMap Invalid Memory Region Local Denial Of Service Vulnerability
Solution:
Ubuntu has released advisory (USN-137-1) and fixes to address this and another vulnerability. Customers are advised to peruse the referenced advisory for further information in regards to obtaining and applying an appropriate update.
RedHat has released security advisory RHSA-2005:514-44 addressing this issue for their Desktop and Enterprise editions. Please see the referenced advisory for further information.
Debian GNU/Linux has released advisory DSA 922-1, along with fixes to address multiple kernel issues. Please see the referenced advisory for further information.
Currently we are not aware of any vendor-supplied patches for this issue. If you feel we are in error or are aware of more recent information, please mail us at: [email protected] <mailto:[email protected]>.
Solution:
Ubuntu has released advisory (USN-137-1) and fixes to address this and another vulnerability. Customers are advised to peruse the referenced advisory for further information in regards to obtaining and applying an appropriate update.
RedHat has released security advisory RHSA-2005:514-44 addressing this issue for their Desktop and Enterprise editions. Please see the referenced advisory for further information.
Debian GNU/Linux has released advisory DSA 922-1, along with fixes to address multiple kernel issues. Please see the referenced advisory for further information.
Currently we are not aware of any vendor-supplied patches for this issue. If you feel we are in error or are aware of more recent information, please mail us at: [email protected] <mailto:[email protected]>.
References
Linux Kernel MMap Invalid Memory Region Local Denial Of Service Vulnerability
References:
References: