Red Hat Content Accelerator Memory Leak Local Denial Of Service Vulnerability

Bugtraq ID:	26657
Class:	Design Error
CVE:	CVE-2007-5494
Remote:	No
Local:	Yes
Published:	Nov 29 2007 12:00AM
Updated:	Dec 19 2007 11:11PM
Credit:	This vulnerability was discovered by the vendor.
Vulnerable:	Redhat Enterprise Linux WS 4 Redhat Enterprise Linux ES 4 Redhat Enterprise Linux Desktop 5 client Redhat Enterprise Linux AS 4 Redhat Enterprise Linux 5 Server Redhat Desktop 4.0
Not Vulnerable:

Red Hat Content Accelerator Memory Leak Local Denial Of Service Vulnerability

Red Hat Content Accelerator is prone to a denial-of-service vulnerability.

Exploiting this vulnerability may cause the system to crash due to a memory leak.

Red Hat Enterprise Linux (v. 5 server) and Red Hat Enterprise Linux Desktop (v. 5 client) are known to be affected by this issue.

Red Hat Content Accelerator Memory Leak Local Denial Of Service Vulnerability

Currently we are not aware of any exploits for this issue. If you feel we are in error or if you are aware of more recent information, please mail us at: [email protected].

Red Hat Content Accelerator Memory Leak Local Denial Of Service Vulnerability

Solution:
The vendor has released fixes to address this issue; please see the references for more information and fixes.

Red Hat Content Accelerator Memory Leak Local Denial Of Service Vulnerability

References:

• Red Hat Content Accelerator (RedHat)
  
• RHSA-2007:0993-13 - kernel security update (RedHat)
  
• RHSA-2007:1104-11 Important: kernel security and bug fix update (Red Hat)