Vulnerability in Linux Kernel

CVE-2001-0907

Linux kernel 2.2.1 through 2.2.19, and 2.4.1 through 2.4.10, allows local users to cause a denial of service via a series of deeply nested symlinks, which causes the kernel to spend extra time when trying to access the link.

EPSS: 0.008 (52.5th percentile) — read the EPSS interpretation.

Affected products

References

  • cve@mitre.org (vendor-advisory, x_refsource_IMMUNIX, Broken Link)
  • cve@mitre.org (vendor-advisory, Third Party Advisory, x_refsource_ENGARDE)
  • cve@mitre.org (mailing-list, x_refsource_BUGTRAQ, Mailing List, Third Party Advisory)
  • cve@mitre.org (mailing-list, x_refsource_BUGTRAQ, Mailing List, Third Party Advisory)
  • cve@mitre.org (vendor-advisory, Broken Link, x_refsource_SUSE)
  • cve@mitre.org (vendor-advisory, x_refsource_MANDRAKE, Broken Link)
  • cve@mitre.org (VDB Entry, Third Party Advisory, vdb-entry, x_refsource_BID)
  • cve@mitre.org (vendor-advisory, Third Party Advisory, x_refsource_MANDRAKE)
  • cve@mitre.org (vdb-entry, Broken Link, x_refsource_XF)