Bug 698449 - VUL-1: kernel: network namespace memory leak
Summary: VUL-1: kernel: network namespace memory leak
Status: RESOLVED UPSTREAM
Alias: None
Product: SUSE Security Incidents
Classification: Novell Products
Component: General (show other bugs)
Version: unspecified
Hardware: Other Other
: P4 - Low : Normal
Target Milestone: ---
Assignee: Jiri Bohac
QA Contact: Security Team bot
URL:
Whiteboard:
Keywords:
Depends on:
Blocks:
 
Reported: 2011-06-07 08:26 UTC by Ludwig Nussel
Modified: 2011-10-21 09:07 UTC (History)
3 users (show)

See Also:
Found By: Other
Services Priority:
Business Priority:
Blocker: ---
Marketing QA Status: ---
IT Deployment: ---

Attachments
Add an attachment (proposed patch, testcase, etc.)

Note You need to log in before you can comment on or make changes to this bug.
Description Ludwig Nussel 2011-06-07 08:26:28 UTC 
Your friendly security team received the following report via oss-security.
Please respond ASAP.
The issue is public.

vsftpd uses per connection network namespaces. The kernel doesn't immediately clean them up fast enough so an attacker may DoS a machine that way by causing memory pressure.

CVE-2011-2189

http://www.openwall.com/lists/oss-security/2011/06/06/8
Comment 2 Marcus Meissner 2011-10-21 09:05:28 UTC 
the launchpad bug has the discussion:

https://bugs.launchpad.net/ubuntu/+source/linux/+bug/720095


This is a mix between the kernel not removing the namespaces allocated fast enough
and vsftpd crashing if not present.

This requires vsftpd to use network namespaces... However, vsftpd on SLE 11 is 
2.0.7, which did not yet use clone(NEW_NETNS). 

So the SLE 11 vsftpd is not affected by this issue.


Other ways to DOS the network namespace allocation are possible if a server
uses it, but we can check them if necessary.


This is fixed in SLE11 SP2, also in newer openSUSEs.


I would say we let this issue rest.
Comment 3 Marcus Meissner 2011-10-21 09:07:24 UTC 
perl ~/bin/addnote CVE-2011-2189 "This issue does not affect SUSE Linux Enterprise versions before 11, as they did not have network namespace support in the kernel. SUSE Linux Enterprise 11 SP1 has network namespace in the kernel, but no network namespace support in its vsftpd. So SUSE Linux Enterprise 11 SP1 is not affected by this particular problem. SUSE Linux Enterprise 11 SP2 and later have network namespace memory reclaim enhanced in the kernel and are also not affected by this issue."