SecurityTracker.com
Keep Track of the Latest Vulnerabilities
with SecurityTracker!
    Home    |    View Topics    |    Search    |    Contact Us    |    Help    |   

SecurityTracker
Archives


Your Ad Here
 
Click to Sign Up
Sign Up
Sign Up for Your FREE Weekly SecurityTracker E-mail Alert Summary
Instant Alerts
Buy our Premium Vulnerability Notification Service to receive customized, instant alerts
Affiliates
Put SecurityTracker Vulnerability Alerts on Your Web Site -- It's Free!
Partners
Become a Partner and License Our Database or Notification Service
Report a Bug
Report a vulnerability that you have found to SecurityTracker
bugs
@
securitytracker.com
Sign Up!





Category:  OS (Linux)  >  Linux Kernel Vendors:  kernel.org
Linux Kernel Memory Leak in SIT Code ipip6_rcv() Lets Remote Users Deny Service
SecurityTracker Alert ID:  1020118
SecurityTracker URL:  http://securitytracker.com/id?1020118
CVE Reference:  CVE-2008-2136   (Links to External Site)
Date:  May 28 2008
Impact:  Denial of service via network
Fix Available:  Yes   Vendor Confirmed:  Yes  
Version(s): prior to 2.6.25.3
Description:  A vulnerability was reported in the Linux Kernel in the Simple Internet Transition code. A remote user can cause denial of service conditions.

A remote user can send specially crafted data to trigger a memory leak in the ipip6_rcv() function.

The vulnerability resides in 'net/ipv6/sit.c'.

Paul Harks reported this vulnerability.
Impact:  A remote user can cause denial of service conditions.
Solution:  The vendor has issued a fixed version (2.6.25.3).
Vendor URL:  www.kernel.org/ (Links to External Site)
Cause:  Resource error
Underlying OS:  Linux (Caldera/SCO), Linux (Conectiva), Linux (Debian), Linux (EnGarde), Linux (Gentoo), Linux (HP Secure OS), Linux (Immunix), Linux (Mandriva/Mandrake), Linux (Progeny Debian), Linux (Red Hat Enterprise), Linux (Red Hat Fedora), Linux (Red Hat Linux), Linux (SGI), Linux (Slackware), Linux (Sun), Linux (SuSE), Linux (Trustix), Linux (Turbo Linux), Linux (Ubuntu), Linux (Xandros)

Message History:   This archive entry has one or more follow-up message(s) listed below.
Jul 23 2008 (Red Hat Issues Fix) Linux Kernel Memory Leak in SIT Code ipip6_rcv() Lets Remote Users Deny Service   (bugzilla@redhat.com)
Red Hat has released a fix for Red Hat Enterprise Linux 4.
Aug 4 2008 (Red Hat Issues Fix) Linux Kernel Memory Leak in SIT Code ipip6_rcv() Lets Remote Users Deny Service   (bugzilla@redhat.com)
Red Hat has released a fix for Red Hat Enterprise Linux 5.
Aug 27 2008 (Red Hat Issues Fix) Linux Kernel Memory Leak in SIT Code ipip6_rcv() Lets Remote Users Deny Service   (bugzilla@redhat.com)
Red Hat has released a fix for Red Hat Enterprise Linux 5.
Dec 17 2008 (Red Hat Issues Fix) Linux Kernel Memory Leak in SIT Code ipip6_rcv() Lets Remote Users Deny Service   (bugzilla@redhat.com)
Red Hat has released a fix for Red Hat Enterprise Linux 3.
Jan 5 2009 (Red Hat Issues Fix) Linux Kernel Memory Leak in SIT Code ipip6_rcv() Lets Remote Users Deny Service   (bugzilla@redhat.com)
Red Hat has released a fix for Red Hat Enterprise Linux 2.1.
Jan 8 2009 (Red Hat Issues Fix) Linux Kernel Memory Leak in SIT Code ipip6_rcv() Lets Remote Users Deny Service   (bugzilla@redhat.com)
Red Hat has released a fix for Red Hat Enterprise Linux 2.1 running on 32-bit architectures.


 Source Message Contents

 

[Original Message Not Available for Viewing]


Go to the Top of This SecurityTracker Archive Page



Home   |    View Topics   |    Search   |    Contact Us   |    Help

Copyright 2007, SecurityGlobal.net LLC