CVE-2012-2127: Buffer Overflow
fs/proc/root.c in the procfs implementation in the Linux kernel before 3.2 does not properly interact with CLONENEWPID clone system calls, which allows remote attackers to cause a denial of service (reference leak and memory consumption) by making many connections to a daemon that uses PID namespaces to isolate clients, as demonstrated by vsftpd.
Other sources
Vadim Ponomarev (ccrssaa at karelia.ru), report a pid namespace leak caused by vsftpd.
Detailed discussion can be found in: https://bugzilla.novell.com/showbug.cgi?id=757783
Introduced by: http://git.kernel.org/linus/423e0ab086ad8b33626e45fa94ac7613146b7ffa
Upstream commit: http://git.kernel.org/linus/905ad269c55fc62bee3da29f7b1d1efeba8aa1e1
Steps to reproduce: https://bugzilla.novell.com/showbug.cgi?id=757783#c0
Acknowledgements:
Red Hat would like to thank Vadim Ponomarev for reporting this issue.
— Red Hat
Affected Software
Remediation
Patch Available
Event History
Frequently Asked Questions
What is the severity of CVE-2012-2127?
CVE-2012-2127 has a medium severity rating, primarily due to its potential to cause denial of service.
How do I fix CVE-2012-2127?
To fix CVE-2012-2127, upgrade the Linux kernel to version 3.2 or later.
What types of systems are affected by CVE-2012-2127?
CVE-2012-2127 affects systems running Linux kernel versions prior to 3.2.
Can CVE-2012-2127 be exploited remotely?
Yes, CVE-2012-2127 can be exploited remotely by attackers to cause denial of service.
What impact does CVE-2012-2127 have on system resources?
CVE-2012-2127 can lead to reference leaks and excessive memory consumption, impacting system performance.