A vulnerability classified as problematic was found in Linux Kernel (Operating System) (affected version unknown). Affected by this vulnerability is an unknown functionality of the file /dev/gpmctl of the component STREAM Socket Handler. The manipulation with an unknown input leads to a denial of service vulnerability. The CWE definition for the vulnerability is CWE-404. The product does not release or incorrectly releases a resource before it is made available for re-use. As an impact it is known to affect availability. The summary by CVE is:

Linux gpm program allows local users to cause a denial of service by flooding the /dev/gpmctl device with STREAM sockets.

The weakness was published 11/23/1999 (Website). It is possible to read the advisory at securityfocus.com. This vulnerability is known as CVE-2000-0531. The exploitation appears to be easy. Attacking locally is a requirement. The exploitation doesn't need any form of authentication. Technical details and also a public exploit are known.

A public exploit has been developed in ANSI C. It is possible to download the exploit at securityfocus.com. It is declared as proof-of-concept.

Upgrading eliminates this vulnerability.

The vulnerability is also documented in the databases at X-Force (5010), Exploit-DB (20026) and SecurityFocus (BID 1377†).

Productinfo

Type

• Operating System

Vendor

• Linux

Name

• Kernel

License

• open-source

CPE 2.3info

• 🔍
• 🔍
• 🔍

CPE 2.2info

• 🔍
• 🔍
• 🔍

CVSSv4info

CVSSv3info

CVSSv2info

Exploitinginfo

Threat Intelligenceinfo

Countermeasuresinfo

Timelineinfo

Sourcesinfo

Entryinfo

Discussion