ID:4436 - Exploit for Resource management error in Linux kernel - CVE-2011-1083

 
Main Vulnerability Database Exploits ID:4436 - Exploit for Resource management error in Linux kernel - CVE-2011-1083

ID:4436 - Exploit for Resource management error in Linux kernel - CVE-2011-1083

Published: August 11, 2020


Vulnerability identifier: #VU45146
Vulnerability risk: Medium
CVE-ID: CVE-2011-1083
CWE-ID: CWE-399
Exploitation vector: Remote access
Vulnerable software:
Linux kernel

Link to public exploit:


Vulnerability description

The vulnerability allows a remote non-authenticated attacker to perform a denial of service (DoS) attack.

The epoll implementation in the Linux kernel 2.6.37.2 and earlier does not properly traverse a tree of epoll file descriptors, which allows local users to cause a denial of service (CPU consumption) via a crafted application that makes epoll_create and epoll_ctl system calls.


Remediation

Install update from vendor's website.