PT-2005-3947 · Linux+1 · Linux Kernel+1
CVE-2005-3119
·
Publicado
2005-10-11
·
Atualizado
2024-02-02
CVSS v2.0
2.1
Baixa
| Vetor | AV:L/AC:L/Au:N/C:N/I:N/A:P |
Name of the Vulnerable Software and Affected Versions
Linux kernel versions 2.6.10 through 2.6.13
Description
The issue is related to a memory leak in the
request key auth destroy function within the request key auth component of the Linux kernel. This leak allows local users to cause a denial of service by consuming memory through the creation of a large number of authorization token keys.Recommendations
For Linux kernel versions 2.6.10 through 2.6.13, consider updating to a version outside of this range to resolve the issue. As a temporary workaround, restrict the creation of authorization token keys to minimize the risk of exploitation.
Correção
DoS
Memory Leak
Encontrou algum problema na descrição? Tem algo a acrescentar? Fique à vontade para nos escrever 👾
Enumeração de Fraquezas
Identificadores relacionados
Produtos afetados
Linux Kernel
Red Hat