CVE-2006-7051

Published Feb 24, 2007

Last updated 6 years ago

CVSS info 4.9

Overview

Description: The sys_timer_create function in posix-timers.c for Linux kernel 2.6.x allows local users to cause a denial of service (memory consumption) and possibly bypass memory limits or cause other processes to be killed by creating a large number of posix timers, which are allocated in kernel memory but are not treated as part of the process' memory.
Source: cve@mitre.org
NVD status: Modified

Risk scores

CVSS 2.0

Type: Primary
Base score: 4.9
Impact score: 6.9
Exploitability score: 3.9
Vector string: AV:L/AC:L/Au:N/C:N/I:N/A:C

Weaknesses

nvd@nist.gov: NVD-CWE-Other

Hype score: Not currently trending

Vendor comments

Red HatThis issue can only be exploited if pending signals (ulimit -i) is set to "unlimited". In case of Red Hat Enterprise Linux version 2.1, 3 and 4 this is not the case and therefore they are not vulnerable to this issue.

Configurations

[
  {
    "nodes": [
      {
        "negate": false,
        "cpeMatch": [
          {
            "criteria": "cpe:2.3:o:linux:linux_kernel:2.6.18.0:*:*:*:*:*:*:*",
            "vulnerable": true,
            "matchCriteriaId": "7A252C50-D63A-4FC0-A51E-A63A939D6AA1"
          },
          {
            "criteria": "cpe:2.3:o:linux:linux_kernel:2.6.18.1:*:*:*:*:*:*:*",
            "vulnerable": true,
            "matchCriteriaId": "D08CBC56-C820-4513-ABEC-1ABB3EFC3A15"
          },
          {
            "criteria": "cpe:2.3:o:linux:linux_kernel:2.6.18.2:*:*:*:*:*:*:*",
            "vulnerable": true,
            "matchCriteriaId": "338BB401-8831-4094-9186-2B3CFA5903D3"
          },
          {
            "criteria": "cpe:2.3:o:linux:linux_kernel:2.6.18.3:*:*:*:*:*:*:*",
            "vulnerable": true,
            "matchCriteriaId": "1E32E6BA-AFEF-44A8-B230-87DD043BB222"
          },
          {
            "criteria": "cpe:2.3:o:linux:linux_kernel:2.6.18.4:*:*:*:*:*:*:*",
            "vulnerable": true,
            "matchCriteriaId": "F69E575B-BD1A-4E50-8D6F-131D5E08058E"
          },
          {
            "criteria": "cpe:2.3:o:linux:linux_kernel:2.6.18.5:*:*:*:*:*:*:*",
            "vulnerable": true,
            "matchCriteriaId": "20F6269B-5F6B-4413-B14D-7AE5442E4CCD"
          },
          {
            "criteria": "cpe:2.3:o:linux:linux_kernel:2.6.18.6:*:*:*:*:*:*:*",
            "vulnerable": true,
            "matchCriteriaId": "189D1246-F975-4411-A58B-343ED90485FD"
          },
          {
            "criteria": "cpe:2.3:o:linux:linux_kernel:2.6.18.7:*:*:*:*:*:*:*",
            "vulnerable": true,
            "matchCriteriaId": "1B914F7F-C6BD-4527-B1E9-7FD1E337A18C"
          },
          {
            "criteria": "cpe:2.3:o:linux:linux_kernel:2.6.19:*:*:*:*:*:*:*",
            "vulnerable": true,
            "matchCriteriaId": "179147E4-5247-451D-9409-545D661BC158"
          },
          {
            "criteria": "cpe:2.3:o:linux:linux_kernel:2.6.19.1:*:*:*:*:*:*:*",
            "vulnerable": true,
            "matchCriteriaId": "6554469E-F6AE-4EB0-880E-CBFD196FEE31"
          },
          {
            "criteria": "cpe:2.3:o:linux:linux_kernel:2.6.19.2:*:*:*:*:*:*:*",
            "vulnerable": true,
            "matchCriteriaId": "2F99CFC1-DCCE-47B9-98EF-84AEDAECE02E"
          },
          {
            "criteria": "cpe:2.3:o:linux:linux_kernel:2.6.19.3:*:*:*:*:*:*:*",
            "vulnerable": true,
            "matchCriteriaId": "C20367B0-F722-4442-8B59-ABB0FEDB8CC8"
          },
          {
            "criteria": "cpe:2.3:o:linux:linux_kernel:2.6.19.4:*:*:*:*:*:*:*",
            "vulnerable": true,
            "matchCriteriaId": "86A98A70-51E3-4556-8DC4-DD09CF370D1A"
          },
          {
            "criteria": "cpe:2.3:o:linux:linux_kernel:2.6.20:*:*:*:*:*:*:*",
            "vulnerable": true,
            "matchCriteriaId": "C6940324-0383-4510-BA55-770E0A6B80B7"
          },
          {
            "criteria": "cpe:2.3:o:linux:linux_kernel:2.6.20.1:*:*:*:*:*:*:*",
            "vulnerable": true,
            "matchCriteriaId": "1E3313D5-52E8-49B3-B145-170D9A26DA43"
          }
        ],
        "operator": "OR"
      }
    ]
  }
]

Overview

Risk scores

CVSS 2.0

Weaknesses

Social media

Vendor comments

Configurations

References