CVE-2008-5079

net/atm/svc.c in the ATM subsystem in the Linux kernel 2.6.27.8 and earlier allows local users to cause a denial of service (kernel infinite loop) by making two calls to svc_listen for the same socket, and then reading a /proc/net/atm/*vc file, related to corruption of the vcc table.

🔗 References (58)

• secalert@redhathttp://lists.opensuse.org/opensuse-security-announce/2009-01/msg00006.html
• secalert@redhathttp://lists.opensuse.org/opensuse-security-announce/2009-01/msg00010.html
• secalert@redhathttp://lists.opensuse.org/opensuse-security-announce/2009-02/msg00003.html
• secalert@redhathttp://marc.info/?l=linux-netdev&m=122841256115780&w=2
• secalert@redhathttp://secunia.com/advisories/32913
• secalert@redhathttp://secunia.com/advisories/33083
• secalert@redhathttp://secunia.com/advisories/33348
• secalert@redhathttp://secunia.com/advisories/33623
• secalert@redhathttp://secunia.com/advisories/33641
• secalert@redhathttp://secunia.com/advisories/33704
• secalert@redhathttp://secunia.com/advisories/33706
• secalert@redhathttp://secunia.com/advisories/33756
• secalert@redhathttp://secunia.com/advisories/33854
• secalert@redhathttp://secunia.com/advisories/34981
• secalert@redhathttp://securityreason.com/securityalert/4694