Description
fs/proc/root.c in the procfs implementation in the Linux kernel before 3.2 does not properly interact with CLONE_NEWPID clone system calls, which allows remote attackers to cause a denial of service (reference leak and memory consumption) by making many connections to a daemon that uses PID namespaces to isolate clients, as demonstrated by vsftpd.
Affected products
Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.
n/a n/a
n/aaffected
References
- https://github.com/torvalds/linux/commit/905ad269c55fc62bee3da29f7b1d1efeba8aa1e1 ↗
- http://www.ubuntu.com/usn/USN-1594-1 ↗
- http://www.openwall.com/lists/oss-security/2012/04/22/1 ↗
- https://bugzilla.redhat.com/show_bug.cgi?id=815188 ↗
- http://ubuntu.com/usn/usn-1607-1 ↗
- http://www.kernel.org/pub/linux/kernel/v3.x/ ↗
- http://www.securityfocus.com/bid/55774 ↗
- http://git.kernel.org/?p=linux/kernel/git/torvalds/linux-2.6.git%3Ba=commit%3Bh=905ad269c55fc62bee3da29f7b1d1efeba8aa1e1 ↗
- https://bugzilla.novell.com/show_bug.cgi?id=757783 ↗
- http://www.openwall.com/lists/oss-security/2012/04/20/25 ↗
- http://www.kernel.org/pub/linux/kernel/v3.x/patch-3.2.bz2 ↗