gcc cld instruction denial of service
| gcc-cld-dos (41340) |  Low Risk |
Description:
gcc is vulnerable to a denial of service, caused by a failure to generate cld instructions while compiling certain functions used for string manipulation. By persuading a victim to compile an affected function, a remote attacker could cause the consumption of all available CPU resources.
*CVSS:
| Base Score: | 2.6 |
| Access Vector: | Network |
| Access Complexity: | High |
| Authentication: | None |
| Confidentiality Impact: | None |
| Integrity Impact: | None |
| Availability Impact: | Partial |
| Temporal Score: | 1.9 |
| Exploitability: | Unproven |
| Remediation Level: | Official-Fix |
| Report Confidence: | Confirmed |
Consequences:
Denial of Service
Remedy:
Refer to the GCC Mailing List, Thu, 6 Mar 2008 16:55:21 +0100 for patch, upgrade or suggested workaround information. See References.
For other distributions:
Apply the appropriate update for your system. See References.
References:
- GCC Mailing List, Thu, 6 Mar 2008 16:55:21 +0100: [PATCH, i386]: Emit cld instruction when stringops are used.
- VMware Security-Announce Mailing List, Mon Jul 28 18:11:35 PDT 2008: VMSA-2008-00011 Updated ESX service console packages for Samba and vmnix.
- ASA-2008-203: kernel security and bug fix update (RHSA-2008-0211)
- ASA-2008-287: kernel security and bug fix update (RHSA-2008-0508)
- BID-29084: Linux Kernel Direction Flag Local Memory Corruption Vulnerability
- CVE-2008-1367: gcc 4.3.x does not generate a cld instruction while compiling functions used for string manipulation such as memcpy and memmove on x86 and i386, which can prevent the direction flag (DF) from being reset in violation of ABI conventions and cause data to be copied in the wrong direction during signal handling in the Linux kernel, which might allow context-dependent attackers to trigger memory corruption. NOTE: this issue was originally reported for CPU consumption in SBCL.
- RHSA-2008-0211: Important: kernel security and bug fix update
- RHSA-2008-0233: Important: kernel security and bug fix update
- RHSA-2008-0508: Important: kernel security and bug fix update
- SA31246: VMware ESX Server update for Samba and vmnix
- SUSE-SA:2008:030: Linux kernel security update
- SUSE-SA:2008:031: Linux kernel security problems
- SUSE-SA:2008:032: SUSE Linux Enterprise 10 SP1 Linux kernel
- VUPEN/ADV-2008-2222: VMware ESX Server Security Update Fixes Multiple Vulnerabilities
Platforms Affected:
- GNU GCC 4.3.0
- Novell Linux Desktop 9
- Novell Linux POS 9
- Novell OpenSUSE 10.2
- Novell OpenSUSE 10.3
- Novell SLE SDK 10 SP1
- Novell SUSE Linux Enterprise 10 SP1 DEBUGINFO
- Novell SUSE Linux Enterprise Desktop 10 SP1
- Novell SUSE Linux Enterprise Server 10 SP1
- RedHat Enterprise Linux 3 ES
- RedHat Enterprise Linux 3 WS
- RedHat Enterprise Linux 3 Desktop
- RedHat Enterprise Linux 3 AS
- RedHat Enterprise Linux 4 AS
- RedHat Enterprise Linux 4 WS
- RedHat Enterprise Linux 4 Desktop
- RedHat Enterprise Linux 4 ES
- RedHat Enterprise Linux 5 Client
- RedHat Enterprise Linux 5
- SuSE SuSE SLES 9
- VMware ESX Server 3.0.1
- VMware ESX Server 3.0.2
- VMware ESX Server 3.5
Reported:
Mar 06, 2008
The information within this database may change without notice. Use of this information constitutes acceptance for use in an AS IS condition. There are NO warranties, implied or otherwise, with regard to this information or its use. Any use of this information is at the user's risk. In no event shall the author/distributor (IBM Internet Security Systems X-Force) be held liable for any damages whatsoever arising out of or in connection with the use or spread of this information.
For corrections or additions please email xforce@iss.net
* According to the Forum of Incident Response and Security Teams (FIRST), the Common Vulnerability Scoring System (CVSS) is an "industry open standard designed to convey vulnerability severity and help to determine urgency and priority of response." IBM PROVIDES THE CVSS SCORES "AS IS" WITHOUT WARRANTY OF ANY KIND, INCLUDING THE IMPLIED WARRANTIES OF MERCHANTABILITY AND FITNESS FOR A PARTICULAR PURPOSE. CUSTOMERS ARE RESPONSIBLE FOR ASSESSING THE IMPACT OF ANY ACTUAL OR POTENTIAL SECURITY VULNERABILITY.
The information within this database may change without notice. Use of this information constitutes acceptance for use in an AS IS condition. There are NO warranties, implied or otherwise, with regard to this information or its use. Any use of this information is at the user's risk. In no event shall IBM be held liable for any damages whatsoever arising out of or in connection with the use or spread of this information.