Denial of Service in relibc seekdir() Function

Executive Summary

This is a Denial of Service (DoS) vulnerability in the relibc library affecting the seekdir() function. The issue occurs when seekdir() is called with an invalid offset, specifically a negative value. This triggers an expect statement that causes the program to crash or hang, leading to a DoS condition.

Useful 0 Not Useful 0

Detection Guidance

To detect this vulnerability, inspect the relibc library version for commit 61f42d6b93adc552a9e8b6f207fca907e8ca8be2. Check if the seekdir() function in src/header/dirent/mod.rs contains a reachable expect statement that triggers with negative offsets.

Useful 0 Not Useful 0

Impact Analysis

If you are using a system or application that relies on relibc commit 61f42d6b93adc552a9e8b6f207fca907e8ca8be2, an attacker with local access could exploit this flaw by running a program that calls seekdir() with a negative offset. This would cause the program to crash or become unresponsive, disrupting normal operations.

Useful 0 Not Useful 0

Mitigation Strategies

Update relibc to a version that patches the seekdir() function vulnerability. Avoid passing negative offsets to seekdir() in your applications. Monitor for unusual program crashes or hangs that may indicate exploitation attempts.

Useful 0 Not Useful 0