blob: 76ed9b86d18083d848289ea633e6ecd7969af5e3 (
plain) (
blame)
1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
|
Candidate: CVE-2007-2525
References:
Description:
Memory leak in the PPP over Ethernet (PPPoE) socket implementation in the
Linux kernel before 2.6.21-git8 allows local users to cause a denial of
service (memory consumption) by creating a socket using connect, and
releasing it before the PPPIOCGCHAN ioctl is initialized.
Ubuntu-Description:
A flaw was discovered in the PPP over Ethernet implementation. Local
attackers could manipulate ioctls and cause kernel memory consumption
leading to a denial of service.
Notes:
jmm> 202a03acf9994076055df40ae093a5c5474ad0bd
Bugs:
upstream: released (2.6.21)
linux-2.6: released (2.6.21-1)
2.6.18-etch-security: released (2.6.18.dfsg.1-13etch1) [bugfix/pppoe-socket-release-mem-leak.patch]
2.6.8-sarge-security: released (2.6.8-17sarge1) [pppoe-socket-release-mem-leak.dpatch]
2.4.27-sarge-security: released (2.4.27-10sarge6) [255_pppoe-socket-release-mem-leak.diff]
2.6.15-dapper-security: released (2.6.15-28.57)
2.6.17-edgy-security: released (2.6.17.1-11.39) [123623f9ad4d9bbe55c03b33ce79123e948b107f]
2.6.20-feisty-security: released (2.6.20-16.31) [168038c2da7f984a07fd169270b2cac561e1c90c]
|
