Linux Kernel pppol2tp_recvmsg() Memory Corruption Error Lets Remote Users Deny Service
|
|
SecurityTracker Alert ID: 1020297
|
|
SecurityTracker URL: http://securitytracker.com/id?1020297
|
|
CVE Reference: CVE-2008-2750
(Links to External Site)
|
Updated: Jun 23 2008
|
Original Entry Date: Jun 16 2008
|
Impact: Denial of service via network
|
Fix Available: Yes
Vendor Confirmed: Yes
|
Version(s): prior to 2.6.26-rc6
|
Description: A vulnerability was reported in the Linux Kernel. A remote user can cause denial of service conditions.
A remote user can send specially crafted PPP packets via L2TP to trigger a memory corruption error and cause the target system to crash or become unstable.
Ilja of the Netric Security Team reported this vulnerability.
|
Impact: A remote user can cause denial of service conditions.
|
Solution: The vendor has issued a fixed version (2.6.26-rc6).
The vendor's advisory is available at:
http://kernel.org/pub/linux/kernel/v2.6/testing/ChangeLog-2.6.26-rc6
|
Vendor URL: www.kernel.org/ (Links to External Site)
|
Cause: Boundary error
|
Underlying OS: Linux (Caldera/SCO), Linux (Conectiva), Linux (Debian), Linux (EnGarde), Linux (Gentoo), Linux (HP Secure OS), Linux (Immunix), Linux (Mandriva/Mandrake), Linux (Progeny Debian), Linux (Red Hat Enterprise), Linux (Red Hat Fedora), Linux (Red Hat Linux), Linux (SGI), Linux (Slackware), Linux (Sun), Linux (SuSE), Linux (Trustix), Linux (Turbo Linux), Linux (Ubuntu), Linux (Xandros)
|
|
Message History:
None.
|
Source Message Contents
|
Date: Mon, 16 Jun 2008 11:39:35 -0400
Subject: Linux Kernel
|
http://kernel.org/pub/linux/kernel/v2.6/testing/ChangeLog-2.6.26-rc6
|
|
