OSVDB ID: 20163

Title: Linux Kernel IPv6 udp_v6_get_port() Function Local DoS

Info

Disclosure

Oct 21, 2005

Discovery

Unknown

Dates

Exploit

Unknown

Solution

Unknown

Description

Linux contains a flaw that may allow a local denial of service. The issue is due to an infinite loop error in the "udp_v6_get_port()" function in "net/ipv6/udp.c", and will result in loss of availability.

Classification

Location: Local Access Required
Attack Type: Denial of Service
Impact: Loss of Availability
Exploit: Exploit Unknown
Disclosure: Vendor Verified

Solution

Upgrade to version 2.6.14-rc5 or higher, as it has been reported to fix this vulnerability. An upgrade is required as there are no known workarounds.

Products

Linux

Linux Kernel

2.6.13.4

References

Credit

  • Tetsuo Handa -


Direct URL: http://osvdb.org/20163