Exploit Linux Kernel 2.2 - 'ldd core' Force Reboot (Denial of Service)

[Exploiter]

EDB-ID

19272

Проверка EDB

1. Пройдено

Автор

DAN BURCAW

Тип уязвимости

DOS

Платформа

LINUX

CVE

cve-1999-0400

Дата публикации

1999-01-26

Linux Kernel 2.2 - 'ldd core' Force Reboot (Denial of Service)

source: https://www.securityfocus.com/bid/344/info


Due to a rare and subtle bug in the 2.2.0 kernel, a linux machine can be forced to reboot by an unpriviliged local user. The reason for this is because of the invalid ELF core layout and the fact that munmap wipes out a vital page table entry.

Only kernel 2.2.0 is vulnerable to this.


Take any core file,

[user@box tmp]$ ldd core

[reboot]