>> Linux Kernel Multiple Local Denial of Service Vulnerabilities
Title : Linux Kernel Multiple Local Denial of Service Vulnerabilities VUPEN ID : VUPEN/ADV-2005-2649 CVE ID : CVE-2005-3784 - CVE-2005-3857
Rated as : Low Risk
Remotely Exploitable : No Locally Exploitable : Yes Release Date : 2005-11-29
Technical Description
Two vulnerabilities were identified in Linux Kernel, which could be exploited by local attackers to cause a denial of service.
The first issue is due to an error in "signal.c" where the auto-reap of child processes includes processes with ptrace attached, which leads to a dangling ptrace reference and allows local users to cause a denial of service.
The second vulnerability is due to an error in the "time_out_leases" [locks.c] function that does not properly handle a large number of broken leases, which could be exploited by malicious users to cause a denial of service.
