Linux kernel sysfs/file.c fill_write_buffer() denial of service
| linux-fillwritebuffer-dos (25693) |  Low Risk |
Description:
Linux kernel is vulnerable to a denial of service. The fill_write_buffer() function in sysfs/file.c fails to zero terminate a buffer when a length greater than the default PAGE_SIZE value is requested. A local attacker could exploit this vulnerability to cause the system to crash.
Consequences:
Denial of Service
Remedy:
Upgrade to the latest version of Linux kernel (2.6.17-rc1 or later), available from The Linux Kernel Archives. See References.
For SUSE Linux:
Refer to SUSE-SA:2006:028 for patch, upgrade, or suggested workaround information. See References.
For other distributions:
Contact your vendor for upgrade or patch information.
References:
- The The Linux Kernel Archives Web site: The Linux Kernel Archives.
- The The Linux Kernel Archives Web site: [PATCH] sysfs: zero terminate sysfs write buffers.
- BID-17402: Linux Kernel SYSFS PAGE_SIZE Local Denial of Service Vulnerability
- CVE-2006-1055: The fill_write_buffer function in sysfs/file.c in Linux kernel 2.6.12 up to versions before 2.6.17-rc1 does not zero terminate a buffer when a length of PAGE_SIZE or more is requested, which might allow local users to cause a denial of service (crash) by causing an out-of-bounds read.
- OSVDB ID: 24443: Linux Kernel sysfs Crafted Write Local DoS
- SA19495: Linux Kernel SYSFS Local Denial of Service Vulnerability
- SUSE-SA:2006:028: various kernel security problems
- USN-281-1: Linux kernel vulnerabilities
- USN-302-1: Linux kernel vulnerabilities
- VUPEN/ADV-2006-1273: Linux Kernel Sysfs fill_write_buffer Function Local Denial of Service Vulnerability
Platforms Affected:
- Canonical Ubuntu 5.04
- Canonical Ubuntu 5.10
- Canonical Ubuntu 6.06 LTS
- Linux Kernel 2.6.12 rc5
- Linux Kernel 2.6.12
- Linux Kernel 2.6.12 rc4
- Linux Kernel 2.6.12 rc1
- Linux Kernel 2.6.12.1
- Linux Kernel 2.6.12.2
- Linux Kernel 2.6.12.3
- Linux Kernel 2.6.12.4
- Linux Kernel 2.6.12.5
- Linux Kernel 2.6.12.6
- Linux Kernel 2.6.13 rc6
- Linux Kernel 2.6.13
- Linux Kernel 2.6.13 rc1
- Linux Kernel 2.6.13 rc4
- Linux Kernel 2.6.13 rc7
- Linux Kernel 2.6.13.1
- Linux Kernel 2.6.13.2
- Linux Kernel 2.6.13.3
- Linux Kernel 2.6.13.4
- Linux Kernel 2.6.14 rc2
- Linux Kernel 2.6.14
- Linux Kernel 2.6.14 rc1
- Linux Kernel 2.6.14 rc3
- Linux Kernel 2.6.14 rc4
- Linux Kernel 2.6.14.1
- Linux Kernel 2.6.14.2
- Linux Kernel 2.6.14.3
- Linux Kernel 2.6.14.4
- Linux Kernel 2.6.14.5
- Linux Kernel 2.6.15 rc6
- Linux Kernel 2.6.15 rc5
- Linux Kernel 2.6.15 rc7
- Linux Kernel 2.6.15 rc1
- Linux Kernel 2.6.15
- Linux Kernel 2.6.15 rc4
- Linux Kernel 2.6.15 rc3
- Linux Kernel 2.6.15 rc2
- Linux Kernel 2.6.15.1
- Linux Kernel 2.6.15.2
- Linux Kernel 2.6.15.3
- Linux Kernel 2.6.15.4
- Linux Kernel 2.6.15.5
- Linux Kernel 2.6.16 rc1
- Linux Kernel 2.6.17
- Novell UnitedLinux 1.0
- SuSE Linux Enterprise Server 8
- SuSE Linux Enterprise Server 9
- SUSE SuSE Linux 10.0
- SUSE SuSE Linux 9.1
- SUSE SuSE Linux 9.2
- SUSE SuSE Linux 9.3
- SuSE SuSE Linux Desktop 1.0
- SuSE SuSE SLES 9
Reported:
Mar 31, 2006
The information within this database may change without notice. Use of this information constitutes acceptance for use in an AS IS condition. There are NO warranties, implied or otherwise, with regard to this information or its use. Any use of this information is at the user's risk. In no event shall the author/distributor (IBM Internet Security Systems X-Force) be held liable for any damages whatsoever arising out of or in connection with the use or spread of this information.
For corrections or additions please email xforce@iss.net