medium4.9Public exploit code
CVE-2006-7051
The sys_timer_create function in posix-timers.c for Linux kernel 2.6.x allows local users to cause a denial of service (memory consumption) and possibly bypass…
Public exploit code
Working exploit or proof of concept code has been published for this vulnerability. Treat unpatched systems as at risk.
- Linux Kernel 2.6.x - 'sys_timer_create()' Local Denial of Service2006-04-09 · dos · linux · Verified
Impact
The sys_timer_create function in posix-timers.c for Linux kernel 2.6.x allows local users to cause a denial of service (memory consumption) and possibly bypass memory limits or cause other processes to be killed by creating a large number of posix timers, which are allocated in kernel memory but are not treated as part of the process' memory.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Linux | Linux Kernel | Versions 2.6.18.0, 2.6.18.1, 2.6.18.2, 2.6.18.3, 2.6.18.4, 2.6.18.5 |
References
- NVD record
- CVE.org record
- http://securityreason.com/securityalert/2287
- http://www.securityfocus.com/archive/1/430278/30/5790/threaded
- https://exchange.xforce.ibmcloud.com/vulnerabilities/25712
- https://www.exploit-db.com/exploits/1657
- http://securityreason.com/securityalert/2287
- http://www.securityfocus.com/archive/1/430278/30/5790/threaded
- https://exchange.xforce.ibmcloud.com/vulnerabilities/25712
- https://www.exploit-db.com/exploits/1657