CVE-2012-2127

Linux Kernel < 3.2 - Denial of Service via PID Namespace Reference Leak

Title source: llm
STIX 2.1

Description

fs/proc/root.c in the procfs implementation in the Linux kernel before 3.2 does not properly interact with CLONE_NEWPID clone system calls, which allows remote attackers to cause a denial of service (reference leak and memory consumption) by making many connections to a daemon that uses PID namespaces to isolate clients, as demonstrated by vsftpd.

References (11)

Core 11
Core References
Vendor Advisory x_refsource_confirm
http://www.kernel.org/pub/linux/kernel/v3.x/
Vendor Advisory vendor-advisory x_refsource_ubuntu
http://www.ubuntu.com/usn/USN-1594-1
Mailing List mailing-list x_refsource_mlist
http://www.openwall.com/lists/oss-security/2012/04/22/1
Various Sources vendor-advisory x_refsource_ubuntu
http://ubuntu.com/usn/usn-1607-1
Third Party Advisory, VDB Entry vdb-entry x_refsource_bid
http://www.securityfocus.com/bid/55774
Exploit mailing-list x_refsource_mlist
http://www.openwall.com/lists/oss-security/2012/04/20/25

Scores

EPSS 0.0431
EPSS Percentile 90.0%

Details

CWE
CWE-119
Status published
Products (10)
linux/linux_kernel 3.1.1
linux/linux_kernel 3.1.2
linux/linux_kernel 3.1.3
linux/linux_kernel 3.1.4
linux/linux_kernel 3.1.5
linux/linux_kernel 3.1.6
linux/linux_kernel 3.1.7
linux/linux_kernel 3.1.8
linux/linux_kernel 3.1.9
linux/linux_kernel < 3.1.10
Published Jun 21, 2012
Tracked Since Feb 18, 2026