CVE-2008-5079

Linux Kernel < 2.6.27.8 - Resource Management Error

Title source: rule

Description

net/atm/svc.c in the ATM subsystem in the Linux kernel 2.6.27.8 and earlier allows local users to cause a denial of service (kernel infinite loop) by making two calls to svc_listen for the same socket, and then reading a /proc/net/atm/*vc file, related to corruption of the vcc table.

Exploits (1)

exploitdb WORKING POC VERIFIED

by Jon Oberheide · cdoslinux

https://www.exploit-db.com/exploits/7405

View Code ZIP pw:eip

References (29)

[Mailing List] http://lists.opensuse.org/opensuse-security-announce/2009-01/msg00006.html

[Mailing List] http://lists.opensuse.org/opensuse-security-announce/2009-01/msg00010.html

[Mailing List] http://lists.opensuse.org/opensuse-security-announce/2009-02/msg00003.html

[Mailing List] http://marc.info/?l=linux-netdev&m=122841256115780&w=2

[Vendor Advisory] http://secunia.com/advisories/32913

[Third Party Advisory] http://secunia.com/advisories/33083

[Vendor Advisory] http://www.mandriva.com/security/advisories?name=MDVSA-2009:032

[Vendor Advisory] http://www.redhat.com/support/errata/RHSA-2009-0053.html

[Vendor Advisory] http://www.redhat.com/support/errata/RHSA-2009-0225.html

[Third Party Advisory, VDB Entry] http://www.securityfocus.com/archive/1/498943/100/0/threaded

[Vendor Advisory] http://www.ubuntu.com/usn/usn-715-1

[Issue Tracking] https://issues.rpath.com/browse/RPL-2915

[Vendor Advisory] https://usn.ubuntu.com/714-1/

[Vendor Advisory] https://www.redhat.com/archives/fedora-package-announce/2008-December/msg01358.html

[Third Party Advisory] http://wiki.rpath.com/wiki/Advisories:rPSA-2008-0332

[Third Party Advisory, VDB Entry] http://www.securityfocus.com/archive/1/499044/100/0/threaded

[Third Party Advisory, VDB Entry] http://www.securityfocus.com/bid/32676

[Third Party Advisory] http://www.debian.org/security/2009/dsa-1787

[Third Party Advisory, VDB Entry] https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A11288

[Third Party Advisory, VDB Entry] http://www.securitytracker.com/id?1021360

... and 9 more

Scores

EPSS 0.0161

EPSS Percentile 81.8%

Details

CWE

CWE-399

Status published

Products (43)

linux/linux_kernel 2.2.27

linux/linux_kernel 2.4.36

linux/linux_kernel 2.4.36.1

linux/linux_kernel 2.4.36.2

linux/linux_kernel 2.4.36.3

linux/linux_kernel 2.4.36.4

linux/linux_kernel 2.4.36.5

linux/linux_kernel 2.4.36.6

linux/linux_kernel 2.6

linux/linux_kernel 2.6.18 (8 CPE variants)

... and 33 more

Published Dec 09, 2008

Tracked Since Feb 18, 2026