CVE-2005-3271: Low severity Linux Linux kernel vulnerability

Published Oct 20, 2005

Updated

Exec in Linux kernel 2.6 does not properly clear posix-timers in multi-threaded environments, which results in a resource leak and could allow a large number of multiple local users to cause a denial of service by using more posix-timers than specified by the quota for a single user.

Affected Software

1 affected component

Linux Linux kernel=2.6.0

Remediation

Patch Available

http://linux.bkbits.net:8080/linux-2.6/cset@414b332fsZQvEUsfzKJIo-q2_ZH0hg

Event History

Oct 20, 2005

CVE Published

via MITRE·08:00 AM

Data Sourced

via MITRE·08:00 AM

Description

Frequently Asked Questions

What is the severity of CVE-2005-3271?

CVE-2005-3271 has a moderate severity as it could lead to denial of service due to resource leaks in multi-threaded environments.

How do I fix CVE-2005-3271?

To fix CVE-2005-3271, upgrade the Linux kernel to a version that has addressed this vulnerability.

Who is affected by CVE-2005-3271?

CVE-2005-3271 affects users of Linux kernel 2.6.0 and may impact local users on multi-threaded systems.

What type of vulnerability is CVE-2005-3271?

CVE-2005-3271 is a resource leak vulnerability in the Linux kernel related to posix-timers.

Can CVE-2005-3271 be exploited remotely?

No, CVE-2005-3271 cannot be exploited remotely; it requires local access to the system.