oss-security - Re: CVE request: virtualbox-ose guest can trigger denial of service at host, mem consumption

Follow @Openwall on Twitter for new release announcements and other news

[<prev] [next>] [<thread-prev] [day] [month] [year] [list]

Message-ID: <1566982364.259621258557337928.JavaMail.root@zmail01.collab.prod.int.phx2.redhat.com>
Date: Wed, 18 Nov 2009 10:15:37 -0500 (EST)
From: Josh Bressers <bressers@...hat.com>
To: oss-security@...ts.openwall.com
Subject: Re: CVE request: virtualbox-ose guest can trigger
 denial of service at host, mem consumption

Use CVE-2009-3893 for this.

Thanks.

-- 
    JB


----- "Thomas Biege" <thomas@...e.de> wrote:

> Hi,
> just something I found in October:
> http://thetoms-random-thoughts.blogspot.com/2009/11/virtualbox-ose-guest-can-trigger-denial.html
> 
> The kernel module can be used to allocate an arbitrary amount of
> memory.
> 
> 
> -- 
> Bye,
>      Thomas
> -- 
>  Thomas Biege <thomas@...e.de>, SUSE LINUX, Security Support &
> Auditing
>  SUSE LINUX Products GmbH, GF: Markus Rex, HRB 16746 (AG Nuernberg)
> -- 
>   Wer aufhoert besser werden zu wollen, hoert auf gut zu sein.
>                             -- Marie von Ebner-Eschenbach

-- 
    JB

Please check out the Open Source Software Security Wiki, which is counterpart to this mailing list.

Confused about mailing lists and their use? Read about mailing lists on Wikipedia and check out these guidelines on proper formatting of your messages.