CVE-2011-1083

Published: Apr 4, 2011Modified: Apr 29, 2026

4.9

Vector

AV:L/AC:L/Au:N/C:N/I:N/A:C

Exploitability: 3.9 / Impact: 6.9

Source: NVD

Description

The epoll implementation in the Linux kernel 2.6.37.2 and earlier does not properly traverse a tree of epoll file descriptors, which allows local users to cause a denial of service (CPU consumption) via a crafted application that makes epoll_create and epoll_ctl system calls.

Affected (10)

Products: Linux: Linux Kernel · Suse: Linux Enterprise Desktop, Linux Enterprise Server · Redhat: Enterprise Linux Desktop, Enterprise Linux Server, Enterprise Linux Workstation

1 product

2 products

Linux Enterprise Desktop

Linux Enterprise Server

3 products

Enterprise Linux Desktop

Enterprise Linux Server

Enterprise Linux Workstation

Configuration A

1 vulnerable

Vulnerable Software	Affected Versions
Linux Linux Kernel	Up to 2.6.37.2

Configuration B

6 vulnerable

Vulnerable Software	Affected Versions
Suse Linux Enterprise Desktop	Version 11 sp1
Suse Linux Enterprise Desktop	Version 11 sp2
Suse Linux Enterprise Server	Version 11 sp1
Suse Linux Enterprise Server	Version 11 sp1
Suse Linux Enterprise Server	Version 11 sp2
Suse Linux Enterprise Server	Version 11 sp2

Configuration C

3 vulnerable

Vulnerable Software	Affected Versions
Redhat Enterprise Linux Desktop	Version 6.0
Redhat Enterprise Linux Server	Version 6.0
Redhat Enterprise Linux Workstation	Version 6.0

Related CWEs

Uncontrolled Resource Consumption

The product does not properly control the allocation and maintenance of a limited resource, thereby enabling an actor to influence the amount of resources consumed, eventually leading to the exhaustion of available resources.

References (30)

http://article.gmane.org/gmane.linux.kernel/1105744

Source: secalert@redhat.com

Broken Link

http://article.gmane.org/gmane.linux.kernel/1105888

Source: secalert@redhat.com

Broken Link

http://article.gmane.org/gmane.linux.kernel/1106686

Source: secalert@redhat.com

Broken Link

http://lists.opensuse.org/opensuse-security-announce/2012-04/msg00021.html

Source: secalert@redhat.com

Mailing ListThird Party Advisory

http://lists.opensuse.org/opensuse-security-announce/2012-05/msg00013.html

Source: secalert@redhat.com

Mailing ListThird Party Advisory

http://openwall.com/lists/oss-security/2011/03/02/1

Source: secalert@redhat.com

Mailing ListPatchThird Party Advisory

http://openwall.com/lists/oss-security/2011/03/02/2

Source: secalert@redhat.com

Mailing ListPatch

http://rhn.redhat.com/errata/RHSA-2012-0862.html

Source: secalert@redhat.com

Third Party Advisory

http://secunia.com/advisories/43522

Source: secalert@redhat.com

Third Party Advisory

http://secunia.com/advisories/48115

Source: secalert@redhat.com

Third Party Advisory

http://secunia.com/advisories/48410

Source: secalert@redhat.com

Third Party Advisory

http://secunia.com/advisories/48898

Source: secalert@redhat.com

Third Party Advisory

http://secunia.com/advisories/48964

Source: secalert@redhat.com

Third Party Advisory

http://www.osvdb.org/71265

Source: secalert@redhat.com

Broken Link

https://bugzilla.redhat.com/show_bug.cgi?id=681578

Source: secalert@redhat.com

Issue TrackingPatchThird Party Advisory

http://article.gmane.org/gmane.linux.kernel/1105744

Source: af854a3a-2127-422b-91ae-364da2661108

Broken Link

http://article.gmane.org/gmane.linux.kernel/1105888

Source: af854a3a-2127-422b-91ae-364da2661108

Broken Link

http://article.gmane.org/gmane.linux.kernel/1106686

Source: af854a3a-2127-422b-91ae-364da2661108

Broken Link

http://lists.opensuse.org/opensuse-security-announce/2012-04/msg00021.html

Source: af854a3a-2127-422b-91ae-364da2661108

Mailing ListThird Party Advisory

http://lists.opensuse.org/opensuse-security-announce/2012-05/msg00013.html

Source: af854a3a-2127-422b-91ae-364da2661108

Mailing ListThird Party Advisory

http://openwall.com/lists/oss-security/2011/03/02/1

Source: af854a3a-2127-422b-91ae-364da2661108

Mailing ListPatchThird Party Advisory

http://openwall.com/lists/oss-security/2011/03/02/2

Source: af854a3a-2127-422b-91ae-364da2661108

Mailing ListPatch

http://rhn.redhat.com/errata/RHSA-2012-0862.html

Source: af854a3a-2127-422b-91ae-364da2661108

Third Party Advisory

http://secunia.com/advisories/43522

Source: af854a3a-2127-422b-91ae-364da2661108

Third Party Advisory

http://secunia.com/advisories/48115

Source: af854a3a-2127-422b-91ae-364da2661108

Third Party Advisory

http://secunia.com/advisories/48410

Source: af854a3a-2127-422b-91ae-364da2661108

Third Party Advisory

http://secunia.com/advisories/48898

Source: af854a3a-2127-422b-91ae-364da2661108

Third Party Advisory

http://secunia.com/advisories/48964

Source: af854a3a-2127-422b-91ae-364da2661108

Third Party Advisory

http://www.osvdb.org/71265

Source: af854a3a-2127-422b-91ae-364da2661108

Broken Link

https://bugzilla.redhat.com/show_bug.cgi?id=681578

Source: af854a3a-2127-422b-91ae-364da2661108

Issue TrackingPatchThird Party Advisory

Timeline

No history available yet.