glibc: local DoS vulnerability [LWN.net]

Package(s):

glibc

CVE #(s):

CAN-2003-0859

Created:

November 15, 2003

Updated:

November 19, 2003

Description:

Herbert Xu reported that various applications can accept spoofed messages sent on the kernel netlink interface by other users on the local machine. This could lead to a local denial of service attack. The glibc function getifaddrs uses netlink and could therefore be vulnerable to this issue. The Common Vulnerabilities and Exposures project (cve.mitre.org) has assigned the name CAN-2003-0859 to this issue.

Alerts:

Fedora

FEDORA-2003-002

2003-11-14

(Log in to post comments)