CVE-2013-4312: Buffer Overflow
It was found that process could allocate and accumulate far more FDs than the process' limit by sending them over a unix socket then closing them to keep the process' fd count low, which could result into a local DoS against kernel by depleting all available memory.
Upstream patch:
https://git.kernel.org/cgit/linux/kernel/git/davem/net.git/commit/?id=712f4aad406b
Discussion:
https://lkml.org/lkml/2015/12/28/155
Other sources
The Linux kernel before 4.4.1 allows local users to bypass file-descriptor limits and cause a denial of service (memory consumption) by sending each descriptor over a UNIX socket before closing it, related to net/unix/afunix.c and net/unix/garbage.c.
— Launchpad
Affected Software
Remediation
Event History
Frequently Asked Questions
What is CVE-2013-4312?
CVE-2013-4312 is a vulnerability in the Linux kernel that allows local users to bypass file-descriptor limits and cause a denial of service by sending each descriptor over a UNIX socket before closing it.
How can this vulnerability be exploited?
To exploit CVE-2013-4312, a local user would need to send each file descriptor over a UNIX socket before closing it.
What is the severity of CVE-2013-4312?
CVE-2013-4312 has a severity level of medium.
How can I fix CVE-2013-4312?
To fix CVE-2013-4312, it is recommended to update the Linux kernel to version 4.5~ or later.
Where can I find more information about CVE-2013-4312?
More information about CVE-2013-4312 can be found at the following references: [1] [2] [3].