Bug 217030 - CVE-2006-6053 ext3fs_dirhash denial of service
Summary: CVE-2006-6053 ext3fs_dirhash denial of service
Keywords:
Status: CLOSED ERRATA
Alias: None
Product: Red Hat Enterprise Linux 4
Classification: Red Hat
Component: kernel
Version: 4.0
Hardware: All
OS: Linux
medium
low
Target Milestone: ---
: ---
Assignee: Eric Sandeen
QA Contact: Brian Brock
URL:
Whiteboard: impact=low,source=internet,reported=2...
Depends On:
Blocks:
TreeView+ depends on / blocked
 
Reported: 2006-11-23 09:06 UTC by Marcel Holtmann
Modified: 2007-11-30 22:07 UTC (History)
2 users (show)

Fixed In Version: RHSA-2007-0014
Doc Type: Bug Fix
Doc Text:
Clone Of:
Environment:
Last Closed: 2007-01-30 14:44:17 UTC
Target Upstream Version:
Embargoed:

Attachments (Terms of Use)


Links
System ID Private Priority Status Summary Last Updated
Red Hat Product Errata RHSA-2007:0014 0 normal SHIPPED_LIVE Important: kernel security update 2007-01-30 14:25:00 UTC

Description Marcel Holtmann 2006-11-23 09:06:13 UTC 
From MOKB-10-11-2006:

http://projects.info-pull.com/mokb/MOKB-10-11-2006.html

The ext3 filesystem code fails to properly handle corrupted data structures,
leading to an exploitable denial of service issue with potential fs corruption,
when a read operation is done on a crafted ext3 stream.
Comment 1 Eric Sandeen 2006-11-30 18:21:27 UTC 
FWIW, this one is already fixed in RHEL5 (via bug 209907).  Marcel, what about
RHEL3?

Patch posted for RHEL4 on 11/30/06
Comment 2 Marcel Holtmann 2006-12-04 08:21:49 UTC 
Testing with Red Hat Enterprise Linux 2.1 and 3 showed that both kernels are not
vulnerable to this specific issue.
Comment 3 Jason Baron 2006-12-11 22:44:14 UTC 
committed in stream U5 build 42.28. A test kernel with this patch is available
from http://people.redhat.com/~jbaron/rhel4/
Comment 4 Jason Baron 2006-12-18 21:48:33 UTC 
committed in stream E5 build 42.0.4
Comment 6 Mike Gahagan 2007-01-19 16:47:17 UTC 
Bug and fix verified with the MOKB image using -42 and -42.0.7.
Comment 8 Red Hat Bugzilla 2007-01-30 14:44:17 UTC 
An advisory has been issued which should help the problem
described in this bug report. This report is therefore being
closed with a resolution of ERRATA. For more information
on the solution and/or where to find the updated files,
please follow the link below. You may reopen this bug report
if the solution does not work for you.

http://rhn.redhat.com/errata/RHSA-2007-0014.html
Note You need to log in before you can comment on or make changes to this bug.