Linux Kernel Itanium PerfMonCTL Local Denial of Service Vulnerability
BID:20361
Info
Linux Kernel Itanium PerfMonCTL Local Denial of Service Vulnerability
| Bugtraq ID: | 20361 |
| Class: | Design Error |
| CVE: |
CVE-2006-3741 |
| Remote: | No |
| Local: | Yes |
| Published: | Aug 21 2006 12:00AM |
| Updated: | Mar 19 2015 09:09AM |
| Credit: | Stephane Eranian is credited with the discovery of this vulnerability. |
| Vulnerable: |
SuSE SUSE Linux Enterprise Server 9 SuSE SUSE Linux Enterprise Server 10 SuSE SUSE Linux Enterprise Desktop 10 S.u.S.E. Open-Enterprise-Server 0 S.u.S.E. Novell Linux POS 9 S.u.S.E. Novell Linux Desktop 9.0 S.u.S.E. Linux Professional 10.0 OSS S.u.S.E. Linux Professional 9.3 x86_64 S.u.S.E. Linux Professional 9.3 S.u.S.E. Linux Professional 10.1 S.u.S.E. Linux Personal 10.0 OSS S.u.S.E. Linux Personal 9.3 x86_64 S.u.S.E. Linux Personal 9.3 S.u.S.E. Linux Personal 10.1 RedHat Enterprise Linux WS 4 RedHat Enterprise Linux ES 4 RedHat Enterprise Linux Desktop version 4 Red Hat Enterprise Linux AS 4 Mandriva Linux Mandrake 2006.0 x86_64 Mandriva Linux Mandrake 2006.0 MandrakeSoft Multi Network Firewall 2.0 MandrakeSoft Corporate Server 4.0 x86_64 MandrakeSoft Corporate Server 3.0 x86_64 MandrakeSoft Corporate Server 3.0 MandrakeSoft Corporate Server 4.0 Linux kernel 2.6.17 .9 Linux kernel 2.6.17 .8 Linux kernel 2.6.17 .7 Linux kernel 2.6.17 .6 Linux kernel 2.6.17 .5 Linux kernel 2.6.17 .4 Linux kernel 2.6.17 .3 Linux kernel 2.6.17 .11 Linux kernel 2.6.17 .10 Linux kernel 2.6.17 .1 Linux kernel 2.6.17 -rc5 Linux kernel 2.6.17 Linux kernel 2.6.16 27 Linux kernel 2.6.16 13 Linux kernel 2.6.16 .9 Linux kernel 2.6.16 .8 Linux kernel 2.6.16 .7 Linux kernel 2.6.16 .5 Linux kernel 2.6.16 .4 Linux kernel 2.6.16 .3 Linux kernel 2.6.16 .23 Linux kernel 2.6.16 .21 Linux kernel 2.6.16 .2 Linux kernel 2.6.16 .19 Linux kernel 2.6.16 .18 Linux kernel 2.6.16 .17 Linux kernel 2.6.16 .16 Linux kernel 2.6.16 .12 Linux kernel 2.6.16 .11 Linux kernel 2.6.16 .1 Linux kernel 2.6.16 -rc1 Linux kernel 2.6.16 Linux kernel 2.6.15 .6 Linux kernel 2.6.15 .4 Linux kernel 2.6.15 .3 Linux kernel 2.6.15 .2 Linux kernel 2.6.15 .1 Linux kernel 2.6.15 -rc6 Linux kernel 2.6.15 -rc5 Linux kernel 2.6.15 -rc4 Linux kernel 2.6.15 -rc3 Linux kernel 2.6.15 -rc2 Linux kernel 2.6.15 -rc1 Linux kernel 2.6.15 Linux kernel 2.6.14 .5 Linux kernel 2.6.14 .4 Linux kernel 2.6.14 .3 Linux kernel 2.6.14 .2 Linux kernel 2.6.14 .1 Linux kernel 2.6.14 -rc4 Linux kernel 2.6.14 -rc3 Linux kernel 2.6.14 -rc2 Linux kernel 2.6.14 -rc1 Linux kernel 2.6.14 Linux kernel 2.6.13 .4 Linux kernel 2.6.13 .3 Linux kernel 2.6.13 .2 Linux kernel 2.6.13 .1 Linux kernel 2.6.13 -rc7 Linux kernel 2.6.13 -rc6 Linux kernel 2.6.13 -rc4 Linux kernel 2.6.13 -rc1 Linux kernel 2.6.13 Linux kernel 2.6.12 .6 Linux kernel 2.6.12 .5 Linux kernel 2.6.12 .4 Linux kernel 2.6.12 .3 Linux kernel 2.6.12 .2 Linux kernel 2.6.12 .1 Linux kernel 2.6.12 -rc5 Linux kernel 2.6.12 -rc4 Linux kernel 2.6.12 -rc1 Linux kernel 2.6.12 Linux kernel 2.6.11 .8 Linux kernel 2.6.11 .7 Linux kernel 2.6.11 .6 Linux kernel 2.6.11 .5 Linux kernel 2.6.11 .4 Linux kernel 2.6.11 .12 Linux kernel 2.6.11 .11 Linux kernel 2.6.11 -rc4 Linux kernel 2.6.11 -rc3 Linux kernel 2.6.11 -rc2 Linux kernel 2.6.11 Linux kernel 2.6.10 rc2 Linux kernel 2.6.10 Linux kernel 2.6.9 Linux kernel 2.6.8 rc3 Linux kernel 2.6.8 rc2 Linux kernel 2.6.8 rc1 Linux kernel 2.6.8 Linux kernel 2.6.7 rc1 Linux kernel 2.6.7 Linux kernel 2.6.6 rc1 Linux kernel 2.6.6 Linux kernel 2.6.5 Linux kernel 2.6.4 Linux kernel 2.6.3 Linux kernel 2.6.2 Linux kernel 2.6.1 -rc2 Linux kernel 2.6.1 -rc1 Linux kernel 2.6.1 Linux kernel 2.6 .10 Linux kernel 2.6 -test9-CVS Linux kernel 2.6 -test9 Linux kernel 2.6 -test8 Linux kernel 2.6 -test7 Linux kernel 2.6 -test6 Linux kernel 2.6 -test5 Linux kernel 2.6 -test4 Linux kernel 2.6 -test3 Linux kernel 2.6 -test2 Linux kernel 2.6 -test11 Linux kernel 2.6 -test10 Linux kernel 2.6 -test1 Linux kernel 2.6 Linux kernel 2.6.15.5 Linux kernel 2.6.11.4 Debian Linux 3.1 sparc Debian Linux 3.1 s/390 Debian Linux 3.1 ppc Debian Linux 3.1 mipsel Debian Linux 3.1 mips Debian Linux 3.1 m68k Debian Linux 3.1 ia-64 Debian Linux 3.1 ia-32 Debian Linux 3.1 hppa Debian Linux 3.1 arm Debian Linux 3.1 amd64 Debian Linux 3.1 alpha Debian Linux 3.1 Avaya SES 2.0 Avaya S8710 R2.0.1 Avaya S8710 R2.0.0 Avaya S8710 CM 3.1 Avaya S8700 R2.0.1 Avaya S8700 R2.0.0 Avaya S8700 CM 3.1 Avaya S8500 R2.0.1 Avaya S8500 R2.0.0 Avaya S8500 CM 3.1 Avaya S8500 0 Avaya S8300 R2.0.1 Avaya S8300 R2.0.0 Avaya S8300 CM 3.1 Avaya S8300 0 Avaya Messaging Storage Server MM3.0 Avaya CCS 3.0 Avaya CCS 2.0 Avaya Aura SIP Enablement Services 3.0 |
| Not Vulnerable: |
Linux kernel 2.6.18 |
Discussion
Linux Kernel Itanium PerfMonCTL Local Denial of Service Vulnerability
The Linux kernel is prone to a local denial-of-service vulnerability.
An attacker can exploit this issue to crash the kernel, denying further service to legitimate users. It is conjectured that this issue may also be exploited to gain elevated privileges, but this has not been confirmed.
This issue is exploitable only on the Itanium architecture running Linux kernel versions prior to 2.6.18.
The Linux kernel is prone to a local denial-of-service vulnerability.
An attacker can exploit this issue to crash the kernel, denying further service to legitimate users. It is conjectured that this issue may also be exploited to gain elevated privileges, but this has not been confirmed.
This issue is exploitable only on the Itanium architecture running Linux kernel versions prior to 2.6.18.
Exploit / POC
Linux Kernel Itanium PerfMonCTL Local Denial of Service Vulnerability
Currently we are not aware of any exploits for this issue. If you feel we are in error or if you are aware of more recent information, please mail us at: [email protected]
Currently we are not aware of any exploits for this issue. If you feel we are in error or if you are aware of more recent information, please mail us at: [email protected]
Solution / Fix
Linux Kernel Itanium PerfMonCTL Local Denial of Service Vulnerability
Solution:
The vendor has released version 2.6.18 to address this issue. Please see the references for more information.
Linux kernel 2.6.3
Solution:
The vendor has released version 2.6.18 to address this issue. Please see the references for more information.
Linux kernel 2.6.3
-
Mandriva kernel-2.6.3.36mdk-1-1mdk.i586.rpm
Corporate 3.0:
http://www.mandriva.com/en/download -
Mandriva kernel-2.6.3.36mdk-1-1mdk.x86_64.rpm
Corporate 3.0/X86_64:
http://www.mandriva.com/en/download -
Mandriva kernel-BOOT-2.6.3.36mdk-1-1mdk.i586.rpm
Corporate 3.0:
http://www.mandriva.com/en/download -
Mandriva kernel-BOOT-2.6.3.36mdk-1-1mdk.x86_64.rpm
Corporate 3.0/X86_64:
http://www.mandriva.com/en/download -
Mandriva kernel-enterprise-2.6.3.36mdk-1-1mdk.i586.rpm
Corporate 3.0:
http://www.mandriva.com/en/download -
Mandriva kernel-i686-up-4GB-2.6.3.36mdk-1-1mdk.i586.rpm
Corporate 3.0:
http://www.mandriva.com/en/download -
Mandriva kernel-p3-smp-64GB-2.6.3.36mdk-1-1mdk.i586.rpm
Corporate 3.0:
http://www.mandriva.com/en/download -
Mandriva kernel-secure-2.6.3.36mdk-1-1mdk.i586.rpm
Corporate 3.0:
http://www.mandriva.com/en/download -
Mandriva kernel-secure-2.6.3.36mdk-1-1mdk.x86_64.rpm
Corporate 3.0/X86_64:
http://www.mandriva.com/en/download -
Mandriva kernel-smp-2.6.3.36mdk-1-1mdk.i586.rpm
Corporate 3.0:
http://www.mandriva.com/en/download -
Mandriva kernel-smp-2.6.3.36mdk-1-1mdk.x86_64.rpm
Corporate 3.0/X86_64:
http://www.mandriva.com/en/download
References
Linux Kernel Itanium PerfMonCTL Local Denial of Service Vulnerability
References:
References:
- Bugzilla Bug 204360 (Red Hat)
- Linux Kernel Changelog - 2.6.18 (Linux )
- RHSA-2006:0689-15 - kernel security update (Red Hat)
- Avaya Security Advisory ASA-2006-249 (Avaya Inc. )