Linux Kernel do_coredump Denial of Service Vulnerability
BID:15723
Info
Linux Kernel do_coredump Denial of Service Vulnerability
| Bugtraq ID: | 15723 |
| Class: | Race Condition Error |
| CVE: |
CVE-2005-3527 |
| Remote: | No |
| Local: | Yes |
| Published: | Nov 09 2005 12:00AM |
| Updated: | Aug 15 2006 10:50PM |
| Credit: | Announced in a SuSE advisory. |
| Vulnerable: |
SuSE SUSE Linux Enterprise Server 8 SuSE Linux Enterprise Server 9 SuSE Linux Desktop 1.0 S.u.S.E. UnitedLinux 1.0 S.u.S.E. Linux Professional 10.0 OSS S.u.S.E. Linux Professional 10.0 S.u.S.E. Linux Professional 9.3 x86_64 S.u.S.E. Linux Professional 9.3 S.u.S.E. Linux Professional 9.2 x86_64 S.u.S.E. Linux Professional 9.2 S.u.S.E. Linux Professional 9.1 x86_64 S.u.S.E. Linux Professional 9.1 S.u.S.E. Linux Professional 9.0 x86_64 S.u.S.E. Linux Professional 9.0 S.u.S.E. Linux Personal 10.0 OSS S.u.S.E. Linux Personal 9.3 x86_64 S.u.S.E. Linux Personal 9.3 S.u.S.E. Linux Personal 9.2 x86_64 S.u.S.E. Linux Personal 9.2 S.u.S.E. Linux Personal 9.1 x86_64 S.u.S.E. Linux Personal 9.1 S.u.S.E. Linux Personal 9.0 x86_64 S.u.S.E. Linux Personal 9.0 Mandriva Linux Mandrake 2006.0 x86_64 Mandriva Linux Mandrake 2006.0 Linux kernel 2.6.15 -rc3 Linux kernel 2.6.15 -rc2 Linux kernel 2.6.15 -rc1 Linux kernel 2.6.14 .3 Linux kernel 2.6.14 .2 Linux kernel 2.6.14 .1 Linux kernel 2.6.14 -rc4 Linux kernel 2.6.14 -rc3 Linux kernel 2.6.14 -rc2 Linux kernel 2.6.14 -rc1 Linux kernel 2.6.14 Linux kernel 2.6.13 .4 Linux kernel 2.6.13 .3 Linux kernel 2.6.13 .2 Linux kernel 2.6.13 .1 Linux kernel 2.6.13 -rc7 Linux kernel 2.6.13 -rc6 Linux kernel 2.6.13 -rc4 Linux kernel 2.6.13 -rc1 Linux kernel 2.6.13 Linux kernel 2.6.12 .5 Linux kernel 2.6.12 .4 Linux kernel 2.6.12 .3 Linux kernel 2.6.12 .2 Linux kernel 2.6.12 .1 Linux kernel 2.6.12 -rc5 Linux kernel 2.6.12 -rc4 Linux kernel 2.6.12 -rc1 Linux kernel 2.6.11 .8 Linux kernel 2.6.11 .7 Linux kernel 2.6.11 .6 Linux kernel 2.6.11 .5 Linux kernel 2.6.11 .12 Linux kernel 2.6.11 .11 Linux kernel 2.6.11 -rc4 Linux kernel 2.6.11 -rc3 Linux kernel 2.6.11 -rc2 Linux kernel 2.6.11 Linux kernel 2.6.10 rc2 Linux kernel 2.6.10 Linux kernel 2.6.9 Linux kernel 2.6.8 rc3 Linux kernel 2.6.8 rc2 Linux kernel 2.6.8 rc1 Linux kernel 2.6.8 Linux kernel 2.6.7 rc1 Linux kernel 2.6.7 Linux kernel 2.6.6 rc1 Linux kernel 2.6.6 Linux kernel 2.6.5 Linux kernel 2.6.4 Linux kernel 2.6.3 Linux kernel 2.6.2 Linux kernel 2.6.1 -rc2 Linux kernel 2.6.1 -rc1 Linux kernel 2.6.1 Linux kernel 2.6 .10 Linux kernel 2.6 -test9-CVS Linux kernel 2.6 -test9 Linux kernel 2.6 -test8 Linux kernel 2.6 -test7 Linux kernel 2.6 -test6 Linux kernel 2.6 -test5 Linux kernel 2.6 -test4 Linux kernel 2.6 -test3 Linux kernel 2.6 -test2 Linux kernel 2.6 -test11 Linux kernel 2.6 -test10 Linux kernel 2.6 -test1 Linux kernel 2.6 |
| Not Vulnerable: | |
Discussion
Linux Kernel do_coredump Denial of Service Vulnerability
Linux kernel is prone to a denial-of-service vulnerability caused by a race condition in 'do_coredump()'.
Successful exploitation can cause the system to stop responding to legitimate requests.
Linux kernel is prone to a denial-of-service vulnerability caused by a race condition in 'do_coredump()'.
Successful exploitation can cause the system to stop responding to legitimate requests.
Exploit / POC
Linux Kernel do_coredump Denial of Service Vulnerability
An exploit is not required.
An exploit is not required.
Solution / Fix
Linux Kernel do_coredump Denial of Service Vulnerability
Solution:
Please see the referenced advisories for further information.
NOTE: This issue was reportedly addressed by the vendor. However, Symantec has not been able to verify this.
Currently we are not aware of any vendor-supplied patches for this issue. If you feel we are in error or if you are aware of more recent information, please mail us at: [email protected]:[email protected]
Linux kernel 2.6.13
Linux kernel 2.6.8
Solution:
Please see the referenced advisories for further information.
NOTE: This issue was reportedly addressed by the vendor. However, Symantec has not been able to verify this.
Currently we are not aware of any vendor-supplied patches for this issue. If you feel we are in error or if you are aware of more recent information, please mail us at: [email protected]:[email protected]
Linux kernel 2.6.13
-
SuSE Intel-536ep-4.69-14.2.i586.rpm
SUSE LINUX 10.0:
ftp://ftp.suse.com/pub/suse/i386/update/10.0/rpm/i586/Intel-536ep-4.69 -14.2.i586.rpm -
SuSE kernel-default-2.6.13-15.7.i586.rpm
SUSE LINUX 10.0:
ftp://ftp.suse.com/pub/suse/i386/update/10.0/rpm/i586/kernel-default-2 .6.13-15.7.i586.rpm -
SuSE kernel-default-2.6.13-15.7.ppc.rpm
SUSE LINUX 10.0:
ftp://ftp.suse.com/pub/suse/i386/update/10.0/rpm/ppc/kernel-default-2. 6.13-15.7.ppc.rpm -
SuSE kernel-default-nongpl-2.6.13-15.7.x86_64.rpm
SUSE LINUX 10.0:
ftp://ftp.suse.com/pub/suse/i386/update/10.0/rpm/x86_64/kernel-default -nongpl-2.6.13-15.7.x86_64.rpm -
SuSE kernel-iseries64-2.6.13-15.7.ppc.rpm
SUSE LINUX 10.0:
ftp://ftp.suse.com/pub/suse/i386/update/10.0/rpm/ppc/kernel-iseries64- 2.6.13-15.7.ppc.rpm -
SuSE kernel-ppc64-2.6.13-15.7.ppc.rpm
SUSE LINUX 10.0:
ftp://ftp.suse.com/pub/suse/i386/update/10.0/rpm/ppc/kernel-ppc64-2.6. 13-15.7.ppc.rpm -
SuSE kernel-smp-2.6.13-15.7.x86_64.rpm
SUSE LINUX 10.0:
ftp://ftp.suse.com/pub/suse/i386/update/10.0/rpm/x86_64/kernel-smp-2.6 .13-15.7.x86_64.rpm -
SuSE kernel-source-2.6.13-15.7.ppc.rpm
SUSE LINUX 10.0:
ftp://ftp.suse.com/pub/suse/i386/update/10.0/rpm/ppc/kernel-source-2.6 .13-15.7.ppc.rpm -
SuSE kernel-source-2.6.13-15.7.x86_64.rpm
SUSE LINUX 10.0:
ftp://ftp.suse.com/pub/suse/i386/update/10.0/rpm/x86_64/kernel-source- 2.6.13-15.7.x86_64.rpm -
SuSE kernel-syms-2.6.13-15.7.ppc.rpm
SUSE LINUX 10.0:
ftp://ftp.suse.com/pub/suse/i386/update/10.0/rpm/ppc/kernel-syms-2.6.1 3-15.7.ppc.rpm -
SuSE kernel-syms-2.6.13-15.7.x86_64.rpm
SUSE LINUX 10.0:
ftp://ftp.suse.com/pub/suse/i386/update/10.0/rpm/x86_64/kernel-syms-2. 6.13-15.7.x86_64.rpm -
SuSE kernel-xen-2.6.13-15.7.i586.rpm
SUSE LINUX 10.0:
ftp://ftp.suse.com/pub/suse/i386/update/10.0/rpm/i586/kernel-xen-2.6.1 3-15.7.i586.rpm -
SuSE kernel-xen-nongpl-2.6.13-15.7.i586.rpm
SUSE LINUX 10.0:
ftp://ftp.suse.com/pub/suse/i386/update/10.0/rpm/i586/kernel-xen-nongp l-2.6.13-15.7.i586.rpm -
SuSE kernel-xen-nongpl-2.6.13-15.7.x86_64.rpm
SUSE LINUX 10.0:
ftp://ftp.suse.com/pub/suse/i386/update/10.0/rpm/x86_64/kernel-xen-non gpl-2.6.13-15.7.x86_64.rpm -
SuSE um-host-kernel-2.6.13-15.7.i586.rpm
SUSE LINUX 10.0:
ftp://ftp.suse.com/pub/suse/i386/update/10.0/rpm/i586/um-host-kernel-2 .6.13-15.7.i586.rpm -
SuSE xen-3.0_7608-2.1.i586.rpm
SUSE LINUX 10.0:
ftp://ftp.suse.com/pub/suse/i386/update/10.0/rpm/i586/xen-3.0_7608-2.1 .i586.rpm -
SuSE xen-devel-3.0_7608-2.1.i586.rpm
SUSE LINUX 10.0:
ftp://ftp.suse.com/pub/suse/i386/update/10.0/rpm/i586/xen-devel-3.0_76 08-2.1.i586.rpm -
SuSE xen-doc-pdf-3.0_7608-2.1.i586.rpm
SUSE LINUX 10.0:
ftp://ftp.suse.com/pub/suse/i386/update/10.0/rpm/i586/xen-doc-pdf-3.0_ 7608-2.1.i586.rpm -
SuSE xen-doc-ps-3.0_7608-2.1.i586.rpm
SUSE LINUX 10.0:
ftp://ftp.suse.com/pub/suse/i386/update/10.0/rpm/i586/xen-doc-ps-3.0_7 608-2.1.i586.rpm -
SuSE xen-tools-3.0_7608-2.1.i586.rpm
SUSE LINUX 10.0:
ftp://ftp.suse.com/pub/suse/i386/update/10.0/rpm/i586/xen-tools-3.0_76 08-2.1.i586.rpm -
SuSE xen-tools-ioemu-3.0_7608-2.1.i586.rpm
SUSE LINUX 10.0:
ftp://ftp.suse.com/pub/suse/i386/update/10.0/rpm/i586/xen-tools-ioemu- 3.0_7608-2.1.i586.rpm -
SUSE kernel-bigsmp-2.6.13-15.7.i586.rpm
SUSE LINUX 10.0:
ftp://ftp.suse.com/pub/suse/i386/update/10.0/rpm/i586/kernel-bigsmp-2. 6.13-15.7.i586.rpm -
SUSE kernel-bigsmp-nongpl-2.6.13-15.7.i586.rpm
SUSE LINUX 10.0:
ftp://ftp.suse.com/pub/suse/i386/update/10.0/rpm/i586/kernel-bigsmp-no ngpl-2.6.13-15.7.i586.rpm -
SUSE kernel-default-2.6.13-15.7.i586.rpm
SUSE LINUX 10.0:
ftp://ftp.suse.com/pub/suse/i386/update/10.0/rpm/i586/kernel-default-2 .6.13-15.7.i586.rpm -
SUSE kernel-default-2.6.13-15.7.ppc.rpm
SUSE LINUX 10.0:
ftp://ftp.suse.com/pub/suse/i386/update/10.0/rpm/ppc/kernel-default-2. 6.13-15.7.ppc.rpm -
SUSE kernel-default-2.6.13-15.7.x86_64.rpm
SUSE LINUX 10.0:
ftp://ftp.suse.com/pub/suse/i386/update/10.0/rpm/x86_64/kernel-default -2.6.13-15.7.x86_64.rpm -
SUSE kernel-default-nongpl-2.6.13-15.7.i586.rpm
SUSE LINUX 10.0:
ftp://ftp.suse.com/pub/suse/i386/update/10.0/rpm/i586/kernel-default-n ongpl-2.6.13-15.7.i586.rpm -
SUSE kernel-default-nongpl-2.6.13-15.7.x86_64.rpm
SUSE LINUX 10.0:
ftp://ftp.suse.com/pub/suse/i386/update/10.0/rpm/x86_64/kernel-default -nongpl-2.6.13-15.7.x86_64.rpm -
SUSE kernel-iseries64-2.6.13-15.7.ppc.rpm
SUSE LINUX 10.0:
ftp://ftp.suse.com/pub/suse/i386/update/10.0/rpm/ppc/kernel-iseries64- 2.6.13-15.7.ppc.rpm -
SUSE kernel-ppc64-2.6.13-15.7.ppc.rpm
SUSE LINUX 10.0:
ftp://ftp.suse.com/pub/suse/i386/update/10.0/rpm/ppc/kernel-ppc64-2.6. 13-15.7.ppc.rpm -
SUSE kernel-smp-2.6.13-15.7.i586.rpm
SUSE LINUX 10.0:
ftp://ftp.suse.com/pub/suse/i386/update/10.0/rpm/i586/kernel-smp-2.6.1 3-15.7.i586.rpm -
SUSE kernel-smp-2.6.13-15.7.x86_64.rpm
SUSE LINUX 10.0:
ftp://ftp.suse.com/pub/suse/i386/update/10.0/rpm/x86_64/kernel-smp-2.6 .13-15.7.x86_64.rpm -
SUSE kernel-smp-nongpl-2.6.13-15.7.i586.rpm
SUSE LINUX 10.0:
ftp://ftp.suse.com/pub/suse/i386/update/10.0/rpm/i586/kernel-smp-nongp l-2.6.13-15.7.i586.rpm -
SUSE kernel-smp-nongpl-2.6.13-15.7.x86_64.rpm
SUSE LINUX 10.0:
ftp://ftp.suse.com/pub/suse/i386/update/10.0/rpm/x86_64/kernel-smp-non gpl-2.6.13-15.7.x86_64.rpm -
SUSE kernel-source-2.6.13-15.7.i586.rpm
SUSE LINUX 10.0:
ftp://ftp.suse.com/pub/suse/i386/update/10.0/rpm/i586/kernel-source-2. 6.13-15.7.i586.rpm -
SUSE kernel-source-2.6.13-15.7.ppc.rpm
SUSE LINUX 10.0:
ftp://ftp.suse.com/pub/suse/i386/update/10.0/rpm/ppc/kernel-source-2.6 .13-15.7.ppc.rpm -
SUSE kernel-source-2.6.13-15.7.x86_64.rpm
SUSE LINUX 10.0:
ftp://ftp.suse.com/pub/suse/i386/update/10.0/rpm/x86_64/kernel-source- 2.6.13-15.7.x86_64.rpm -
SUSE kernel-syms-2.6.13-15.7.i586.rpm
SUSE LINUX 10.0:
ftp://ftp.suse.com/pub/suse/i386/update/10.0/rpm/i586/kernel-syms-2.6. 13-15.7.i586.rpm -
SUSE kernel-syms-2.6.13-15.7.ppc.rpm
SUSE LINUX 10.0:
ftp://ftp.suse.com/pub/suse/i386/update/10.0/rpm/ppc/kernel-syms-2.6.1 3-15.7.ppc.rpm -
SUSE kernel-syms-2.6.13-15.7.x86_64.rpm
SUSE LINUX 10.0:
ftp://ftp.suse.com/pub/suse/i386/update/10.0/rpm/x86_64/kernel-syms-2. 6.13-15.7.x86_64.rpm -
SUSE kernel-um-2.6.13-15.7.i586.rpm
SUSE LINUX 10.0:
ftp://ftp.suse.com/pub/suse/i386/update/10.0/rpm/i586/kernel-um-2.6.13 -15.7.i586.rpm -
SUSE kernel-um-nongpl-2.6.13-15.7.i586.rpm
SUSE LINUX 10.0:
ftp://ftp.suse.com/pub/suse/i386/update/10.0/rpm/i586/kernel-um-nongpl -2.6.13-15.7.i586.rpm -
SUSE kernel-xen-2.6.13-15.7.i586.rpm
SUSE LINUX 10.0:
ftp://ftp.suse.com/pub/suse/i386/update/10.0/rpm/i586/kernel-xen-2.6.1 3-15.7.i586.rpm -
SUSE kernel-xen-2.6.13-15.7.x86_64.rpm
SUSE LINUX 10.0:
ftp://ftp.suse.com/pub/suse/i386/update/10.0/rpm/x86_64/kernel-xen-2.6 .13-15.7.x86_64.rpm -
SUSE kernel-xen-nongpl-2.6.13-15.7.i586.rpm
SUSE LINUX 10.0:
ftp://ftp.suse.com/pub/suse/i386/update/10.0/rpm/i586/kernel-xen-nongp l-2.6.13-15.7.i586.rpm -
SUSE kernel-xen-nongpl-2.6.13-15.7.x86_64.rpm
SUSE LINUX 10.0:
ftp://ftp.suse.com/pub/suse/i386/update/10.0/rpm/x86_64/kernel-xen-non gpl-2.6.13-15.7.x86_64.rpm -
SUSE xen-3.0_7608-2.1.i586.rpm
SUSE LINUX 10.0:
ftp://ftp.suse.com/pub/suse/i386/update/10.0/rpm/i586/xen-3.0_7608-2.1 .i586.rpm -
SUSE xen-3.0_7608-2.1.x86_64.rpm
SUSE LINUX 10.0:
ftp://ftp.suse.com/pub/suse/i386/update/10.0/rpm/x86_64/xen-3.0_7608-2 .1.x86_64.rpm -
SUSE xen-devel-3.0_7608-2.1.i586.rpm
SUSE LINUX 10.0:
ftp://ftp.suse.com/pub/suse/i386/update/10.0/rpm/i586/xen-devel-3.0_76 08-2.1.i586.rpm -
SUSE xen-devel-3.0_7608-2.1.x86_64.rpm
SUSE LINUX 10.0:
ftp://ftp.suse.com/pub/suse/i386/update/10.0/rpm/x86_64/xen-devel-3.0_ 7608-2.1.x86_64.rpm -
SUSE xen-doc-html-3.0_7608-2.1.i586.rpm
SUSE LINUX 10.0:
ftp://ftp.suse.com/pub/suse/i386/update/10.0/rpm/i586/xen-doc-html-3.0 _7608-2.1.i586.rpm -
SUSE xen-doc-html-3.0_7608-2.1.x86_64.rpm
SUSE LINUX 10.0:
ftp://ftp.suse.com/pub/suse/i386/update/10.0/rpm/x86_64/xen-doc-html-3 .0_7608-2.1.x86_64.rpm -
SUSE xen-doc-pdf-3.0_7608-2.1.i586.rpm
SUSE LINUX 10.0:
ftp://ftp.suse.com/pub/suse/i386/update/10.0/rpm/i586/xen-doc-pdf-3.0_ 7608-2.1.i586.rpm -
SUSE xen-doc-pdf-3.0_7608-2.1.x86_64.rpm
SUSE LINUX 10.0:
ftp://ftp.suse.com/pub/suse/i386/update/10.0/rpm/x86_64/xen-doc-pdf-3. 0_7608-2.1.x86_64.rpm -
SUSE xen-doc-ps-3.0_7608-2.1.i586.rpm
SUSE LINUX 10.0:
ftp://ftp.suse.com/pub/suse/i386/update/10.0/rpm/i586/xen-doc-ps-3.0_7 608-2.1.i586.rpm -
SUSE xen-doc-ps-3.0_7608-2.1.x86_64.rpm
SUSE LINUX 10.0:
ftp://ftp.suse.com/pub/suse/i386/update/10.0/rpm/x86_64/xen-doc-ps-3.0 _7608-2.1.x86_64.rpm -
SUSE xen-tools-3.0_7608-2.1.i586.rpm
SUSE LINUX 10.0:
ftp://ftp.suse.com/pub/suse/i386/update/10.0/rpm/i586/xen-tools-3.0_76 08-2.1.i586.rpm -
SUSE xen-tools-3.0_7608-2.1.x86_64.rpm
SUSE LINUX 10.0:
ftp://ftp.suse.com/pub/suse/i386/update/10.0/rpm/x86_64/xen-tools-3.0_ 7608-2.1.x86_64.rpm -
SUSE xen-tools-ioemu-3.0_7608-2.1.i586.rpm
SUSE LINUX 10.0:
ftp://ftp.suse.com/pub/suse/i386/update/10.0/rpm/i586/xen-tools-ioemu- 3.0_7608-2.1.i586.rpm -
SUSE xen-tools-ioemu-3.0_7608-2.1.x86_64.rpm
SUSE LINUX 10.0:
ftp://ftp.suse.com/pub/suse/i386/update/10.0/rpm/x86_64/xen-tools-ioem u-3.0_7608-2.1.x86_64.rpm
Linux kernel 2.6.8
-
SuSE kernel-source-2.6.8-24.13.i586.rpm
ftp://ftp.suse.com/pub/suse/i386/update/9.2/rpm/i586/kernel-source-2.6 .8-24.13.i586.rpm -
SuSE kernel-source-2.6.8-24.13.x86_64.rpm
ftp://ftp.suse.com/pub/suse/i386/update/9.2/rpm/x86_64/kernel-source-2 .6.8-24.13.x86_64.rpm
References
Linux Kernel do_coredump Denial of Service Vulnerability
References:
References:
- kernel.org Homepage. (Linux Kernel)