Linux Kernel cred.c copy_creds() denial of service

VulDB: Linux Kernel cred.c copy_creds() denial of service

General

Linux

scipID: 5656
Affected: Linux Kernel
Published: 07/10/2012
Risk: problematic
Entry: 85.3% complete
Created: 07/19/2012
Updated: 09/03/2012

Summary

A vulnerability has been found in Linux Kernel and classified as problematic. This vulnerability affects the function copy_creds() of the file cred.c. The manipulation with an unknown input leads to a denial of service vulnerability. As an impact it is known to affect availability.

The weakness was released 07/10/2012 with Beyond Security’s SecuriTeam Secure Disclosure as RHSA-2012:1064-2 as advisory (Red Hat Security Advisory). The advisory is shared for download at rhn.redhat.com. This vulnerability was named CVE-2012-2745 since 05/14/2012. The attack can be initiated remotely. No form of authentication is required for a successful exploitation. There are known technical details, but no exploit is available.

Applying a patch is able to eliminate this problem. The bugfix is ready for download at rhn.redhat.com. A possible mitigation has been published immediately after the disclosure of the vulnerability. The vulnerability is also documented in the databases at OSVDB (83666) and Secunia (SA49778).