Search

published date: December 27, 1998

CVE-1999-1285 : Denial of Service Vulnerability

Description

Linux 2.1.132 and earlier allows local users to cause a denial of service (resource exhaustion) by reading a large buffer from a random device (e.g. /dev/urandom), which cannot be interrupted until the read has completed.

Product(s):

  • Linux Linux Kernel
  • Linux Kernel
  • Linux Kernel on X64
  • Linux Kernel 1.2
  • Linux Kernel 1.3
  • Linux Kernel 2.0.0

Question to Ask Vendors:

  1. Can you confirm whether your systems are affected by CVE-1999-1285, and if so, what steps are you currently taking to mitigate this vulnerability?
  2. What is your estimated timeline for fully resolving CVE-1999-1285 in your products or services, and how will you communicate updates on this issue to us as your customer?

READY TO GET RESULTS YOU CAN TRUST?