FreeBSD 'fifo_vnops.c' Resource Leak Local Denial of Service Vulnerability

Bugtraq ID:	36949
Class:	Design Error
CVE:
Remote:	No
Local:	Yes
Published:	Nov 06 2009 12:00AM
Updated:	Nov 06 2009 03:36PM
Credit:	Chitti Nimmagadda and Dorr H. Clark
Vulnerable:	FreeBSD FreeBSD 6.0 -STABLE FreeBSD FreeBSD 8.0-STABLE FreeBSD FreeBSD 7.2-STABLE FreeBSD FreeBSD 7.1-STABLE FreeBSD FreeBSD 7.0-STABLE FreeBSD FreeBSD 7.0 FreeBSD FreeBSD 6.4 -STABLE FreeBSD FreeBSD 6.3 FreeBSD FreeBSD 6.2 -STABLE FreeBSD FreeBSD 6.1 -STABLE FreeBSD FreeBSD 6.1
Not Vulnerable:

FreeBSD 'fifo_vnops.c' Resource Leak Local Denial of Service Vulnerability

FreeBSD is prone to a local denial-of-service vulnerability related to handling FIFO resources.

Exploiting this issue allows local attackers to trigger denial-of-service conditions.

The issue affects FreeBSD 6.x, 7.x, and 8.x.

FreeBSD 'fifo_vnops.c' Resource Leak Local Denial of Service Vulnerability

The following exploit code is available:

• /data/vulnerabilities/exploits/36949.c

FreeBSD 'fifo_vnops.c' Resource Leak Local Denial of Service Vulnerability

Solution:
Currently we are not aware of any vendor-supplied patches. If you feel we are in error or if you are aware of more recent information, please mail us at: [email protected].

FreeBSD 'fifo_vnops.c' Resource Leak Local Denial of Service Vulnerability

References:

• FreeBSD Homepage (FreeBSD)
  
• resource leak in fifo_vnops.c: 6.x/7.x/8.x (Dorr H. Clark)
  
• FreeBSD FIFO Resource Leak (xorl %eax, %eax)