CVE-2007-0771

2007-05-0222:19:00

[email protected]

web.nvd.nist.gov

utrace

linux kernel

denial of service

cve-2007-0771

4.9 Medium

CVSS2

Attack Vector

LOCAL

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

NONE

Integrity Impact

NONE

Availability Impact

COMPLETE

AV:L/AC:L/Au:N/C:N/I:N/A:C

5.8 Medium

AI Score

Confidence

Low

0.0004 Low

EPSS

Percentile

5.1%

JSON

The utrace support in Linux kernel 2.6.18, and other versions, allows local users to cause a denial of service (system hang) related to “MT exec + utrace_attach spin failure mode,” as demonstrated by ptrace-thrash.c.

Affected configurations

NVD

Node

linuxlinux_kernelMatch2.6.18

linuxlinux_kernelMatch2.6.18rc1

linuxlinux_kernelMatch2.6.18rc2

linuxlinux_kernelMatch2.6.18rc3

linuxlinux_kernelMatch2.6.18rc4

linuxlinux_kernelMatch2.6.18rc5

linuxlinux_kernelMatch2.6.18rc6

linuxlinux_kernelMatch2.6.18rc7

linuxlinux_kernelMatch2.6.18.1

linuxlinux_kernelMatch2.6.18.2

linuxlinux_kernelMatch2.6.18.3

linuxlinux_kernelMatch2.6.18.4

redhatenterprise_linuxMatch5.0desktop

redhatenterprise_linuxMatch5.0desktop_workstation

redhatenterprise_linuxMatch5.0server

CPENameOperatorVersion
linux:linux_kernellinux linux kerneleq2.6.18
linux:linux_kernellinux linux kerneleq2.6.18.1
linux:linux_kernellinux linux kerneleq2.6.18.2
linux:linux_kernellinux linux kerneleq2.6.18.3
linux:linux_kernellinux linux kerneleq2.6.18.4
redhat:enterprise_linuxredhat enterprise linuxeq5.0

CPE	Name	Operator	Version
linux:linux_kernel	linux linux kernel	eq	2.6.18
linux:linux_kernel	linux linux kernel	eq	2.6.18.1
linux:linux_kernel	linux linux kernel	eq	2.6.18.2
linux:linux_kernel	linux linux kernel	eq	2.6.18.3
linux:linux_kernel	linux linux kernel	eq	2.6.18.4
redhat:enterprise_linux	redhat enterprise linux	eq	5.0