CVE-2006-1860 - lease_init in fs/locks.c in Linux kernel before 2.6.16.16 allows attackers to cause a denial of serv

CVE-2006-1860

Summary

lease_init in fs/locks.c in Linux kernel before 2.6.16.16 allows attackers to cause a denial of service (fcntl_setlease lockup) via actions that cause lease_init to free a lock that might not have been allocated on the stack.

References

Vulnerable Configurations

cpe:2.3:o:linux:linux_kernel:2.6.16.15:*:*:*:*:*:*:*
cpe:2.3:o:linux:linux_kernel:2.6.16.15:*:*:*:*:*:*:*

CVSS

Base:	2.1 (as of 20-07-2017 - 01:30)
Impact:
Exploitability:

CWE

NVD-CWE-Other

CAPEC

Access

Vector	Complexity	Authentication
LOCAL	LOW	NONE

Impact

Confidentiality	Integrity	Availability
NONE	NONE	PARTIAL

cvss-vector via4

AV:L/AC:L/Au:N/C:N/I:N/A:P

refmap via4

bid	17943
confirm	http://www.kernel.org/git/?p=linux/kernel/git/stable/linux-2.6.16.y.git;a=blobdiff;h=aa7f66091823dde953e15895dc427615701c39c7;hp=e75ac392a313f3fad823bf2e46a03f29701e3e34;hb=1f0e637c94a9b041833947c79110d6c02fff8618;f=fs/locks.c http://www.kernel.org/git/?p=linux/kernel/git/stable/linux-2.6.16.y.git;a=commit;h=1f0e637c94a9b041833947c79110d6c02fff8618 http://www.kernel.org/pub/linux/kernel/v2.6/ChangeLog-2.6.16.16
mandriva	MDKSA-2006:123
osvdb	25425
secunia	20083 20716 21045 21179
suse	SUSE-SA:2006:042
trustix	2006-0028
ubuntu	USN-302-1
vupen	ADV-2006-1767
xf	linux-locks-lease-init-dos(26437)

Last major update

20-07-2017 - 01:30

Published

12-05-2006 - 01:02

Last modified

20-07-2017 - 01:30