CVE ID:	CVE-2010-4249
Description:	The wait_for_unix_gc function in net/unix/garbage.c in the Linux kernel before 2.6.37-rc3-next-20101125 does not properly select times for garbage collection of inflight sockets, which allows local users to cause a denial of service (system hang) via crafted use of the socketpair and sendmsg system calls for SOCK_SEQPACKET sockets.
Test IDs:	1.3.6.1.4.1.25623.1.0.69222   1.3.6.1.4.1.25623.1.0.68745   1.3.6.1.4.1.25623.1.1.4.2012.0115.2   1.3.6.1.4.1.25623.1.1.4.2012.0115.1   1.3.6.1.4.1.25623.1.0.69169   1.3.6.1.4.1.25623.1.0.68724   1.3.6.1.4.1.25623.1.0.68992
Cross References:	Common Vulnerability Exposure (CVE) ID: CVE-2010-4249 15622 http://www.exploit-db.com/exploits/15622/ 20111013 VMSA-2011-0012 VMware ESXi and ESX updates to third party libraries and ESX Service Console http://www.securityfocus.com/archive/1/520102/100/0/threaded 42354 http://secunia.com/advisories/42354 42745 http://secunia.com/advisories/42745 42890 http://secunia.com/advisories/42890 42963 http://secunia.com/advisories/42963 45037 http://www.securityfocus.com/bid/45037 46397 http://secunia.com/advisories/46397 ADV-2010-3321 http://www.vupen.com/english/advisories/2010/3321 ADV-2011-0168 http://www.vupen.com/english/advisories/2011/0168 FEDORA-2010-18983 http://lists.fedoraproject.org/pipermail/package-announce/2010-December/052513.html RHSA-2011:0007 http://www.redhat.com/support/errata/RHSA-2011-0007.html RHSA-2011:0162 http://www.redhat.com/support/errata/RHSA-2011-0162.html [linux-kernel] 20101123 Unix socket local DOS (OOM) http://lkml.org/lkml/2010/11/23/395 [linux-kernel] 20101124 [PATCH net-next-2.6] scm: lower SCM_MAX_FD http://lkml.org/lkml/2010/11/23/450 [linux-kernel] 20101125 Simple kernel attack using socketpair. easy, 100% reproductiblle, works under guest. no way to protect :( http://lkml.org/lkml/2010/11/25/8 [netdev] 20101124 [PATCH] af_unix: limit unix_tot_inflight http://marc.info/?l=linux-netdev&m=129059035929046&w=2 [oss-security] 20101124 CVE request: kernel: unix socket local dos http://www.openwall.com/lists/oss-security/2010/11/24/2 [oss-security] 20101124 Re: CVE request: kernel: unix socket local dos http://www.openwall.com/lists/oss-security/2010/11/24/10 http://git.kernel.org/?p=linux/kernel/git/davem/net-2.6.git%3Ba=commit%3Bh=9915672d41273f5b77f1b3c29b391ffb7732b84b http://git.kernel.org/?p=linux/kernel/git/davem/net-2.6.git%3Ba=commit%3Bh=9915672d41273f5b77f1b3c29b391ffb7732b84b http://www.kernel.org/pub/linux/kernel/v2.6/next/patch-v2.6.37-rc3-next-20101125.bz2 http://www.kernel.org/pub/linux/kernel/v2.6/next/patch-v2.6.37-rc3-next-20101125.bz2 http://www.vmware.com/security/advisories/VMSA-2011-0012.html http://www.vmware.com/security/advisories/VMSA-2011-0012.html https://bugzilla.redhat.com/show_bug.cgi?id=656756 https://bugzilla.redhat.com/show_bug.cgi?id=656756