Linux vuln. to double-free bug?: msg#00405

Sponsor
FREE Network Mapping Tool for Microsoft® Office Visio® Professional 2007
Don't map your network by hand - let LANsurveyor Exx press for Microsoft Visio Professional 2007 automatically create network diagrams for you!

Linux vuln. to double-free bug?: msg#00405

Subject:	Linux vuln. to double-free bug?

-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA1

Hi, folks

I'm attempting to determine if the recent CVS security advisory should be 
rated as 'high' or 'critical'.  The bug involves a global pointer-to-heap 
that may be forced to free twice.  The issue is whether or not Linux is 
fundamentally vulnerable to double-free bugs (which, for example, on BSD 
might permit execution of arbitrary code).

The advisory doesn't seem to indicate whether Linux is subject to the same 
vulnerabilty to a double-free problem.

Anyone know offhand?
- -- 
AJ Armstrong
aja@xxxxxxxxxxxxxxxxx

Memes are a hoax.  Pass it on.
-----BEGIN PGP SIGNATURE-----
Version: GnuPG v1.2.1 (GNU/Linux)

iD8DBQE+MbZzSgEAcQ45BAYRAmUNAJ0X7zSKYUg90SWe5iQ5eVT7YZiUoQCeMSw5
e2OfuC6y306qQ2lmoC0/9PU=
=4fhl
-----END PGP SIGNATURE-----


--
gentoo-dev@xxxxxxxxxx mailing list

<Prev in Thread]	Current Thread	[Next in Thread>

Previous by Date:	Re: Compiling in a RAM disk, Evan Powers
Next by Date:	Re: Linux vuln. to double-free bug?, AJ Armstrong
Previous by Thread:	[Fwd: RE: Patching sources in a build], Andy Arbon
Next by Thread:	Re: Linux vuln. to double-free bug?, AJ Armstrong
Indexes:	[Date] [Thread] [Top] [All Lists]

Sponsor
FREE Network Mapping Tool for Microsoft® OfficeVisio Professional 2007
Don't map your network by hand - let LANsurveyor Express for Microsoft Visio Professional 2007
automatically create network diagrams for you!

Free Magazines

Cisco News
Receive a free quarterly e-newsletter with exclusive articles on how Cisco IT uses its own products and solutions to enable the business.
subscribe

Systems Management News, the newspaper for IT systems administration and data center managers! Each issue of Systems Management News is chock-full of news and analysis to help you understand what's happening in your field.
subscribe

The Enterprise Newsweekly eWeek is the essential technology information source for builders of e-business.
subscribe

Oracle Magazine Oracle Magazine contains technology strategy articles, sample code, tips, Oracle and partner news, how to articles for developers and DBAs, and more. Oracle (NASDAQ: ORCL) is the world's largest enterprise software company.
subscribe

Total Telecom Total Telecom is "The Economist of the communications industry".
subscribe

Navigation

Home | sitemap | advertise | OSDir is an inevitable website. super tiny logo