Linux Kernel Integer Overflow in dccp_setsockopt_change() Lets Remote Users Deny Service
|
|
SecurityTracker Alert ID: 1020705
|
|
SecurityTracker URL: http://securitytracker.com/id?1020705
|
|
CVE Reference: CVE-2008-3276
(Links to External Site)
|
Date: Aug 18 2008
|
Impact: Denial of service via network
|
Fix Available: Yes
Vendor Confirmed: Yes
|
Version(s): 2.6
|
Description: A vulnerability was reported in Linux Kernel. A remote user can cause denial of service conditions.
A remote user can send specially crafted DCCP data to trigger an integer overflow and cause a kernel panic on the target system.
The vulnerability resides in 'net/dccp/proto.c'.
Eugene Teo reported this vulnerability.
|
Impact: A remote user can cause the target system to crash.
|
Solution: The vendor has issued a source code fix, available at:
http://git.kernel.org/?p=linux/kernel/git/torvalds/linux-2.6.git;a=commitdiff;h=3e8a0a559c66ee9e7468195691a56fefc3589740
|
Vendor URL: www.kernel.org/ (Links to External Site)
|
Cause: Boundary error
|
Underlying OS: Linux (Caldera/SCO), Linux (Conectiva), Linux (Debian), Linux (EnGarde), Linux (Gentoo), Linux (HP Secure OS), Linux (Immunix), Linux (Mandriva/Mandrake), Linux (Progeny Debian), Linux (Red Hat Enterprise), Linux (Red Hat Fedora), Linux (Red Hat Linux), Linux (SGI), Linux (Slackware), Linux (Sun), Linux (SuSE), Linux (Trustix), Linux (Turbo Linux), Linux (Ubuntu), Linux (Xandros)
|
|
Message History:
This archive entry has one or more follow-up message(s) listed below.
|
Source Message Contents
|
Date: Mon, 18 Aug 2008 11:27:43 -0400
Subject: Linux Kernel
|
CVE-2008-3276 Linux kernel dccp_setsockopt_change() integer overflow
https://bugzilla.redhat.com/show_bug.cgi?id=459226
|
|
