diff options
Diffstat (limited to 'ignored/CVE-2005-3660')
| -rw-r--r-- | ignored/CVE-2005-3660 | 20 |
1 files changed, 20 insertions, 0 deletions
diff --git a/ignored/CVE-2005-3660 b/ignored/CVE-2005-3660 new file mode 100644 index 00000000..2d8276a4 --- /dev/null +++ b/ignored/CVE-2005-3660 @@ -0,0 +1,20 @@ +Candidate: CVE-2005-3660 +References: + http://www.idefense.com/intelligence/vulnerabilities/display.php?id=362 + http://www.securityfocus.com/bid/16041 +Description: + Linux kernel 2.4 and 2.6 allows attackers to cause a denial of service + (memory exhaustion and panic) by creating a large number of connected + file descriptors or socketpairs and setting a large data transfer + buffer, then preventing Linux from being able to finish the transfer + by causing the process to become a zombie, or closing the file + descriptor without closing an associated reference. +Notes: +5~ dannf> The fix suggested by idefense includes adding a struct user reference + dannf> to struct file. No such thing has gone upstream yet, however. +Bugs: +upstream: +linux-2.6: +2.6.8-sarge-security: ignored (2.6.8-16sarge5) +2.4.27-sarge-security: ignored (2.4.27-10sarge4) +2.6.18-etch-security: |