gcc cld instruction denial of service
| gcc-cld-dos (41340) |  Low Risk |
Description:
gcc is vulnerable to a denial of service, caused by a failure to generate cld instructions while compiling certain functions used for string manipulation. By persuading a victim to compile an affected function, a remote attacker could cause the consumption of all available CPU resources.
Platforms Affected:
- GNU, GCC 4.3.0
- Novell, Linux Desktop 9
- Novell, Linux POS 9
- Novell, OpenSUSE 10.2
- Novell, OpenSUSE 10.3
- Novell, SLE SDK 10 SP1
- Novell, SUSE Linux Enterprise 10 SP1 DEBUGINFO
- Novell, SUSE Linux Enterprise Desktop 10 SP1
- Novell, SUSE Linux Enterprise Server 10 SP1
- RedHat, Enterprise Linux 3 ES
- RedHat, Enterprise Linux 3 AS
- RedHat, Enterprise Linux 3 Desktop
- RedHat, Enterprise Linux 3 WS
- RedHat, Enterprise Linux 4 Desktop
- RedHat, Enterprise Linux 4 WS
- RedHat, Enterprise Linux 4 ES
- RedHat, Enterprise Linux 4 AS
- RedHat, Enterprise Linux 5 Client
- RedHat, Enterprise Linux 5
- SuSE, SuSE SLES 9
- VMware, ESX Server 3.0.1
- VMware, ESX Server 3.0.2
- VMware, ESX Server 3.5
Remedy:
Refer to the GCC Mailing List, Thu, 6 Mar 2008 16:55:21 +0100 for patch, upgrade or suggested workaround information. See References.
For other distributions:
Apply the appropriate update for your system. See References.
Consequences:
Denial of Service
References:
- GCC Mailing List, Thu, 6 Mar 2008 16:55:21 +0100, [PATCH, i386]: Emit cld instruction when stringops are used at http://gcc.gnu.org/ml/gcc-patches/2008-03/msg00417.html.
- VMware Security-Announce Mailing List, Mon Jul 28 18:11:35 PDT 2008, VMSA-2008-00011 Updated ESX service console packages for Samba and vmnix at http://lists.vmware.com/pipermail/security-announce/2008/000023.html.
- ASA-2008-203: kernel security and bug fix update (RHSA-2008-0211)
- ASA-2008-287: kernel security and bug fix update (RHSA-2008-0508)
- BID-29084: Linux Kernel Direction Flag Local Memory Corruption Vulnerability
- CVE-2008-1367: gcc 4.3.x does not generate a cld instruction while compiling functions used for string manipulation such as memcpy and memmove on x86 and i386, which can prevent the direction flag (DF) from being reset in violation of ABI conventions and cause data to be copied in the wrong direction during signal handling in the Linux kernel, which might allow context-dependent attackers to trigger memory corruption. NOTE: this issue was originally reported for CPU consumption in SBCL.
- RHSA-2008-0211: Important: kernel security and bug fix update
- RHSA-2008-0233: Important: kernel security and bug fix update
- RHSA-2008-0508: Important: kernel security and bug fix update
- SA31246: VMware ESX Server update for Samba and vmnix
- SUSE-SA:2008:030: Linux kernel security update
- SUSE-SA:2008:031: Linux kernel security problems
- SUSE-SA:2008:032: SUSE Linux Enterprise 10 SP1 Linux kernel
- VUPEN/ADV-2008-2222: VMware ESX Server Security Update Fixes Multiple Vulnerabilities
Reported:
Mar 06, 2008
The information within this database may change without notice. Use of this information constitutes acceptance for use in an AS IS condition. There are NO warranties, implied or otherwise, with regard to this information or its use. Any use of this information is at the user's risk. In no event shall the author/distributor (IBM Internet Security Systems X-Force) be held liable for any damages whatsoever arising out of or in connection with the use or spread of this information.
For corrections or additions please email xforce@iss.net