OSVDB ID: 26029 Title: 0verkill recv_packet() Function UDP Handling Overflow DoS |
Info |
|
|
Dates |
||||
|
|
Description |
0verkill contains a flaw that may allow a remote denial of service. The issue is triggered when an integer underflow error occurs in recv_packet() function, and will result in loss of availability for the 0verkill daemon. recv_packet() function is involved in handling the received UDP packets. The attacker can send a UDP packet smaller than 12 bytes to cause the underflow and crash the daemon process thereby causing Denial of Service. |
Classification |
Location:
Remote / Network Access
Attack Type: Denial of Service, Input Manipulation Impact: Loss of Integrity, Loss of Availability Exploit: Exploit Public |
Solution |
Currently, there are no known upgrades or patches to correct this issue. |
Products |
|
References |
|
Credit |
|
autistici.org -