SkipNavigation
US-CERT
American Flag
  Vulnerability
Notes
Database

Search Vulnerability Notes

Vulnerability Notes Help Information


 
 View Notes By
  Name

ID Number

CVE Name

Date Public

Date Published

Date Updated

Severity Metric



 Other Documents
  Technical Alerts

Technical Bulletins

Alerts

Security Tips

Vulnerability Note VU#245984

The Red Hat Enterprise Linux 3 SMP Kernel fails to properly handle IPC shared-memory

Overview

The Red Hat Enterprise Linux 3 SMP Kernel may allow an authenticated attacker to cause a denial-of-service condition with specially crafted IPC shared-memory functions.

I. Description

Inter-Process Communication (IPC) shared-memory is a method of passing data between programs used by the Red Hat Enterprise Linux 3 SMP Kernel. The shmat() function is used to attach shared memory segments to data segments of calling processes and the shmctl() function can be used to remove the shared memory segment. When these functions are run simultaneously, controls set by shmat() that limit access to areas of IPC shared-memory may not be properly removed before the shared-memory is removed by shmctl(). This could cause a deadlock condition where shmat() is left waiting indefinitely to remove shared-memory access controls.

II. Impact

An authenticated local attacker may be able to cause the system to freeze due to a deadlock condition, resulting in a denial of service.

III. Solution

Upgrade or apply a patch

Patches have been released to address this issue. Refer to Red Hat Security Advisory RHSA-2006:0710. Users who compile the kernel from source are encouraged to update to the most recent version.

Systems Affected

VendorStatusDate NotifiedDate Updated
Red Hat, Inc.Vulnerable6-Nov-2006

References


https://bugzilla.redhat.com/bugzilla/show_bug.cgi?id=205618
http://www.redhat.com/support/errata/RHSA-2006-0710.html
http://secunia.com/advisories/22497

Credit

This issue was reported in Red Hat Security Advisory RHSA-2006:0710-01.

This document was written by Chris Taschner.

Other Information

Date Public:2006-10-19
Date First Published:2006-11-06
Date Last Updated:2006-11-16
CERT Advisory: 
CVE-ID(s):CVE-2006-4342
NVD-ID(s):CVE-2006-4342
US-CERT Technical Alerts: 
Metric:0.03
Document Revision:11

If you have feedback, comments, or additional information about this vulnerability, please send us email.
 

 
Page Corner Image
Produced 2006 by US-CERT, a government organization
Disclaimers and copyright information
Get Adobe Reader Get Adobe Reader