[Date Prev][Date Next][Thread Prev][Thread Next][Date Index][Thread Index]
Re: [Full-Disclosure] [SECURITY] [DSA-403-1] userland can access Linux kernel memory
- To: Wojciech Purczynski <cliph@isec.pl>
- Subject: Re: [Full-Disclosure] [SECURITY] [DSA-403-1] userland can access Linux kernel memory
- From: Florian Weimer <fw@deneb.enyo.de>
- Date: Tue, 2 Dec 2003 17:43:09 +0100
Wojciech Purczynski wrote:
> This is not an integer overflow bug. do_brk() doesn't verify its arguments
> at all, allowing to create arbitrarily large virtual memory mapping (vma)
> consuming kernel memory.
At least this explains why it wasn't found by the Stanford checker tool.
Thanks.
_______________________________________________
Full-Disclosure - We believe in it.
Charter: http://lists.netsys.com/full-disclosure-charter.html