PT-2011-2860

CVE-2011-1083

·

Publicado

2011-04-03

·

Atualizado

2020-08-12

Descrição por

CVSS 2.0
4.9
Média
MétricasAV:L/AC:L/Au:N/C:N/I:N/A:C
Name of the Vulnerable Software and Affected Versions Linux kernel versions prior to 2.6.37.2
Description The issue is related to the epoll implementation in the Linux kernel, which does not properly traverse a tree of epoll file descriptors. This allows local users to cause a denial of service, specifically CPU consumption, by using a crafted application that makes epoll create and epoll ctl system calls.
Recommendations For Linux kernel versions prior to 2.6.37.2, consider upgrading to a newer version to resolve the issue. As a temporary workaround, restrict the use of the epoll create and epoll ctl system calls to minimize the risk of exploitation.
Explorabilidade
Exploit
Correção
Impactos
Pesquisadores
Fornecedores
Produtos afetados
Identificadores relacionados
CESA-2012_0862
RHSA-2012:0150
RHSA-2012_0150
RHSA-2012:0862
RHSA-2012_0862
RHSA-2012:1129
SUSE-SU-2012_0554-1
SUSE-SU-2012_0616-1
SUSE-SU-2014_0287-1
Encontrou algum problema na descrição? Tem algo a acrescentar? Fique à vontade para nos escrever 👾