Linux Kernel mq_open system call denial of service condition

Date Discovered: 2006. január 17.
Date Published: 2006. január 18.
Last Updated: 2006. január 18.

Threat Assessment
Overall Risk: Medium
Impact: High
Popularity: Medium
Simplicity: Low

Vulnerability Description

Vulnerability ID: 33758 D
iscovered By: anonymous
Exploitable Locally: Yes
Exploitable Remotely: No
Impact: Local attackers can cause a denial of service condition.
Root Cause: Software Vulnerability

Linux Kernel contains a vulnerability that may allow local attackers to cause a denial of service condition. The vulnerability is due to a validation error in the mq_open system call. Local attackers can exploit this vulnerability to cause a crash.

Recommendations

For: Red Hat Desktop 4, Red Hat Enterprise Linux AS 4, Red Hat Enterprise Linux ES 4, Red Hat Enterprise Linux WS 4

Red Hat Desktop (v. 4)
SRPMS:
kernel-2.6.9-22.0.2.EL.src.rpm b50fbbd12e29a3ca1bfa7b4310fdc18d

IA-32:
kernel-2.6.9-22.0.2.EL.i686.rpm a9054fd42cd3105a673f2066caf4de15
kernel-devel-2.6.9-22.0.2.EL.i686.rpm e3a7fef199a480936043131ca10945e1
kernel-doc-2.6.9-22.0.2.EL.noarch.rpm bb0a0d5917b0d63d9c683a7f33e519a9
kernel-hugemem-2.6.9-22.0.2.EL.i686.rpm 0e26e14f1de7f0e8d39ac918af2a8494
kernel-hugemem-devel-2.6.9-22.0.2.EL.i686.rpm dcb79758906cc2ba683d5b1beadf6db1
kernel-smp-2.6.9-22.0.2.EL.i686.rpm e66a773b0425948807df2369519c8416
kernel-smp-devel-2.6.9-22.0.2.EL.i686.rpm 52aef02b73f55f9a28308713e3cad221

x86_64:
kernel-2.6.9-22.0.2.EL.x86_64.rpm aa26a1be88624b4dd72b21878d051f2c
kernel-devel-2.6.9-22.0.2.EL.x86_64.rpm 2bdb46d99ab6ec0a7e2cb40c27caf557
kernel-smp-2.6.9-22.0.2.EL.x86_64.rpm e9cdbe981b52ec9f3cf52e6e48c4f99c
kernel-smp-devel-2.6.9-22.0.2.EL.x86_64.rpm 1397c66c010c457c5d9203f5af6eb410

Red Hat Enterprise Linux AS (v. 4)

SRPMS:
kernel-2.6.9-22.0.2.EL.src.rpm b50fbbd12e29a3ca1bfa7b4310fdc18d

IA-32:
kernel-2.6.9-22.0.2.EL.i686.rpm a9054fd42cd3105a673f2066caf4de15
kernel-devel-2.6.9-22.0.2.EL.i686.rpm e3a7fef199a480936043131ca10945e1
kernel-doc-2.6.9-22.0.2.EL.noarch.rpm bb0a0d5917b0d63d9c683a7f33e519a9
kernel-hugemem-2.6.9-22.0.2.EL.i686.rpm 0e26e14f1de7f0e8d39ac918af2a8494
kernel-hugemem-devel-2.6.9-22.0.2.EL.i686.rpm dcb79758906cc2ba683d5b1beadf6db1
kernel-smp-2.6.9-22.0.2.EL.i686.rpm e66a773b0425948807df2369519c8416
kernel-smp-devel-2.6.9-22.0.2.EL.i686.rpm 52aef02b73f55f9a28308713e3cad221

IA-64:
kernel-2.6.9-22.0.2.EL.ia64.rpm 2567e86652683fc131d6298a9466d9f4
kernel-devel-2.6.9-22.0.2.EL.ia64.rpm 15bfd72b79b20e2d90fd47fbf68deda0

PPC:
kernel-2.6.9-22.0.2.EL.ppc64.rpm 68686b0f7065d72e01090af2c3c12413
kernel-2.6.9-22.0.2.EL.ppc64iseries.rpm 1220c56733452c55c87ae7a7fc6da952
kernel-devel-2.6.9-22.0.2.EL.ppc64.rpm 6d50c9ead773ce1b5a033ef794107dd0
kernel-devel-2.6.9-22.0.2.EL.ppc64iseries.rpm edd38da55bca79d91268ccb39dc001e3

s390:
kernel-2.6.9-22.0.2.EL.s390.rpm fd2526e4e7fdac29d15a836554d18002
kernel-devel-2.6.9-22.0.2.EL.s390.rpm 55e50f39b2cae60dae41c19187513f85

s390x:
kernel-2.6.9-22.0.2.EL.s390x.rpm 94ffb16f720bd5e58c7ed16af7b8ad6c
kernel-devel-2.6.9-22.0.2.EL.s390x.rpm f05df19613aab4d3a3efbc04c83632c2

x86_64:
kernel-2.6.9-22.0.2.EL.x86_64.rpm aa26a1be88624b4dd72b21878d051f2c
kernel-devel-2.6.9-22.0.2.EL.x86_64.rpm 2bdb46d99ab6ec0a7e2cb40c27caf557
kernel-smp-2.6.9-22.0.2.EL.x86_64.rpm e9cdbe981b52ec9f3cf52e6e48c4f99c
kernel-smp-devel-2.6.9-22.0.2.EL.x86_64.rpm 1397c66c010c457c5d9203f5af6eb410

Red Hat Enterprise Linux ES (v. 4)

SRPMS:
kernel-2.6.9-22.0.2.EL.src.rpm b50fbbd12e29a3ca1bfa7b4310fdc18d

IA-32:
kernel-2.6.9-22.0.2.EL.i686.rpm a9054fd42cd3105a673f2066caf4de15
kernel-devel-2.6.9-22.0.2.EL.i686.rpm e3a7fef199a480936043131ca10945e1
kernel-doc-2.6.9-22.0.2.EL.noarch.rpm bb0a0d5917b0d63d9c683a7f33e519a9
kernel-hugemem-2.6.9-22.0.2.EL.i686.rpm 0e26e14f1de7f0e8d39ac918af2a8494
kernel-hugemem-devel-2.6.9-22.0.2.EL.i686.rpm dcb79758906cc2ba683d5b1beadf6db1
kernel-smp-2.6.9-22.0.2.EL.i686.rpm e66a773b0425948807df2369519c8416
kernel-smp-devel-2.6.9-22.0.2.EL.i686.rpm 52aef02b73f55f9a28308713e3cad221

IA-64:
kernel-2.6.9-22.0.2.EL.ia64.rpm 2567e8665268

Affected Technologies
Red Hat: Red Hat Desktop 4
Red Hat: Red Hat Enterprise Linux AS 4
Red Hat: Red Hat Enterprise Linux ES 4
Red Hat: Red Hat Enterprise Linux WS 4

References
Mitre CVE: CVE-2005-3356
Red Hat: RHSA-2006:0101