UBUNTU-CVE-2012-2127

Dashboard / Vulnerabilities / UBUNTU-CVE-2012-2127

UBUNTU-CVE-2012-2127

Summary:

Details: fs/proc/root.c in the procfs implementation in the Linux kernel before 3.2 does not properly interact with CLONE_NEWPID clone system calls, which allows remote attackers to cause a denial of service (reference leak and memory consumption) by making many connections to a daemon that uses PID namespaces to isolate clients, as demonstrated by vsftpd.

References: https://ubuntu.com/security/CVE-2012-2127, http://www.openwall.com/lists/oss-security/2012/04/19/19, https://ubuntu.com/security/notices/USN-1594-1, https://ubuntu.com/security/notices/USN-1607-1, https://www.cve.org/CVERecord?id=CVE-2012-2127