Resource management error in Linux kernel

1) Resource management error

EUVDB-ID: #VU45418

Risk: Medium

CVSSv4.0: 5.5 [CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:A/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N/E:P/U:Green]

CVE-ID: CVE-2010-4243

CWE-ID: CWE-399 - Resource Management Errors

Exploit availability: Yes

Description

The vulnerability allows a remote non-authenticated attacker to perform a denial of service (DoS) attack.

fs/exec.c in the Linux kernel before 2.6.37 does not enable the OOM Killer to assess use of stack memory by arrays representing the (1) arguments and (2) environment, which allows local users to cause a denial of service (memory consumption) via a crafted exec system call, aka an "OOM dodging issue," a related issue to CVE-2010-3858.

Mitigation

Install update from vendor's website.

Vulnerable software versions

Linux kernel: 2.6.0 - 2.6.37

CPE2.3

• cpe:2.3:o:linux_foundation:linux_kernel:2.6.0:*:*:*:*:*:*:*
• cpe:2.3:o:linux_foundation:linux_kernel:2.6.1:*:*:*:*:*:*:*
• cpe:2.3:o:linux_foundation:linux_kernel:2.6.2:*:*:*:*:*:*:*
• cpe:2.3:o:linux_foundation:linux_kernel:2.6.3:*:*:*:*:*:*:*
• cpe:2.3:o:linux_foundation:linux_kernel:2.6.4:*:*:*:*:*:*:*
• cpe:2.3:o:linux_foundation:linux_kernel:2.6.5:*:*:*:*:*:*:*
• cpe:2.3:o:linux_foundation:linux_kernel:2.6.6:*:*:*:*:*:*:*
• cpe:2.3:o:linux_foundation:linux_kernel:2.6.7:*:*:*:*:*:*:*
• cpe:2.3:o:linux_foundation:linux_kernel:2.6.8:*:*:*:*:*:*:*
• cpe:2.3:o:linux_foundation:linux_kernel:2.6.8.1:*:*:*:*:*:*:*

External links

https://git.kernel.org/?p=linux/kernel/git/torvalds/linux-2.6.git;a=commit;h=3c77f845722158206a7209c45ccddc264d19319c
https://grsecurity.net/~spender/64bit_dos.c
https://linux.derkeiler.com/Mailing-Lists/Kernel/2010-11/msg13278.html
https://lkml.org/lkml/2010/8/27/429
https://lkml.org/lkml/2010/8/29/206
https://lkml.org/lkml/2010/8/30/138
https://lkml.org/lkml/2010/8/30/378
https://openwall.com/lists/oss-security/2010/11/22/15
https://openwall.com/lists/oss-security/2010/11/22/6
https://secunia.com/advisories/42884
https://secunia.com/advisories/46397
https://www.exploit-db.com/exploits/15619
https://www.kernel.org/pub/linux/kernel/v2.6/ChangeLog-2.6.37
https://www.redhat.com/support/errata/RHSA-2011-0017.html
https://www.securityfocus.com/archive/1/520102/100/0/threaded
https://www.securityfocus.com/bid/45004
https://www.vmware.com/security/advisories/VMSA-2011-0012.html
https://bugzilla.redhat.com/show_bug.cgi?id=625688
https://exchange.xforce.ibmcloud.com/vulnerabilities/64700

Q & A

Can this vulnerability be exploited remotely?

Yes. This vulnerability can be exploited by a remote non-authenticated attacker via the Internet.

Is there known malware, which exploits this vulnerability?

No. We are not aware of malware exploiting this vulnerability. However, proof of concept for this vulnerability is available.