Lucene search

K
cveRedhatCVE-2011-1082
HistoryApr 04, 2011 - 12:27 p.m.

CVE-2011-1082

2011-04-0412:27:57
CWE-400
redhat
web.nvd.nist.gov
65
4
linux
kernel
cve-2011-1082
denial of service
vulnerability
nvd

CVSS2

4.9

Attack Vector

LOCAL

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

NONE

Integrity Impact

NONE

Availability Impact

COMPLETE

AV:L/AC:L/Au:N/C:N/I:N/A:C

AI Score

7.4

Confidence

High

EPSS

0

Percentile

9.7%

fs/eventpoll.c in the Linux kernel before 2.6.38 places epoll file descriptors within other epoll data structures without properly checking for (1) closed loops or (2) deep chains, which allows local users to cause a denial of service (deadlock or stack memory consumption) via a crafted application that makes epoll_create and epoll_ctl system calls.

Affected configurations

Nvd
Node
linuxlinux_kernelRange<2.6.38
VendorProductVersionCPE
linuxlinux_kernel*cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*

Social References

More

CVSS2

4.9

Attack Vector

LOCAL

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

NONE

Integrity Impact

NONE

Availability Impact

COMPLETE

AV:L/AC:L/Au:N/C:N/I:N/A:C

AI Score

7.4

Confidence

High

EPSS

0

Percentile

9.7%