Advanced

Linux Kernel Ext3 Invalid Inode Number Denial of Service

Posted by grouch on
SecuObs		Mail this story
Print this story

The vulnerability is caused due to an error in ext3 when handling an invalid inode number. This can be exploited by sending a specially crafted NFS request with a V2 procedure (e.g. V2_LOOKUP) that specifies an invalid inode number.

SOLUTION: Grant only trusted users access to affected systems.

Full Story

  Nav
» Read more about: Story Type: Security; Groups: Kernel, Linux

» Get new stories by e-mail: nightly or as they are published

« Return to the newswire homepage

  Related stories
» More like this

This topic does not have any threads posted yet!

You cannot post until you login.