ID:10809 - Exploit for Memory corruption in Linux kernel - CVE-2006-7051

 
Main Vulnerability Database Exploits ID:10809 - Exploit for Memory corruption in Linux kernel - CVE-2006-7051

ID:10809 - Exploit for Memory corruption in Linux kernel - CVE-2006-7051

Published: November 5, 2024


Vulnerability identifier: #VU99776
Vulnerability risk: Low
CVE-ID: CVE-2006-7051
CWE-ID: CWE-119
Exploitation vector: Local access
Vulnerable software:
Linux kernel

Link to public exploit:


Vulnerability description

The vulnerability allows a local user to perform a denial of service (DoS) attack.

The sys_timer_create function in posix-timers.c for Linux kernel 2.6.x allows local users to cause a denial of service (memory consumption) and possibly bypass memory limits or cause other processes to be killed by creating a large number of posix timers, which are allocated in kernel memory but are not treated as part of the process' memory.


Remediation

Install update from vendor's repository.