Denial of Service in relibc seekdir() Function

Executive Summary

This is a Denial of Service (DoS) vulnerability in the relibc library affecting the seekdir() function. The issue occurs when seekdir() is called with an invalid offset, specifically a negative value. This triggers an expect statement that causes the program to crash or hang, leading to a DoS condition.

Useful 0 Not Useful 0

Detection Guidance

To detect this vulnerability, inspect the relibc library version for commit 61f42d6b93adc552a9e8b6f207fca907e8ca8be2. Check if the seekdir() function in src/header/dirent/mod.rs contains a reachable expect statement that triggers with negative offsets.

Useful 0 Not Useful 0

Impact Analysis

If you are using a system or application that relies on relibc commit 61f42d6b93adc552a9e8b6f207fca907e8ca8be2, an attacker with local access could exploit this flaw by running a program that calls seekdir() with a negative offset. This would cause the program to crash or become unresponsive, disrupting normal operations.

Useful 0 Not Useful 0

Compliance Impact

This vulnerability is a Denial of Service (DoS) issue in the seekdir() function of relibc, which could disrupt system availability. While it does not directly impact data confidentiality or integrity, prolonged DoS conditions may affect compliance with standards like GDPR (availability requirements) or HIPAA (system reliability for healthcare data). However, specific compliance impacts depend on system configuration and deployment context.

Useful 0 Not Useful 0

Mitigation Strategies

Update relibc to a version that patches the seekdir() function vulnerability. Avoid passing negative offsets to seekdir() in your applications. Monitor for unusual program crashes or hangs that may indicate exploitation attempts.

Useful 0 Not Useful 0