The icmp_send function in net/ipv4/icmp.c in the Linux kernel before 2.6.25, when configured as a router with a REJECT route, does not properly manage the Protocol Independent Destination Cache (aka DST) in some situations involving transmission of an ICMP Host Unreachable message, which allows remote attackers to cause a denial of service (connectivity outage) by sending a large series of packets to many destination IP addresses within this REJECT route, related to an "rt_cache leak."
CVSS Details
- CVSS 3.1 Base Score: 7.5
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Centos_linux | — | Upgrade kernel-PAE-develUpgrade kernel-develUpgrade kernelUpgrade kernel-PAE-debuginfoUpgrade kernel-PAEUpgrade kernel-xenUpgrade kernel-headersUpgrade kernel-debug-develUpgrade kernel-xen-debuginfoUpgrade kernel-debuginfoUpgrade kernel-docUpgrade kernel-debug-debuginfoUpgrade kernel-xen-develUpgrade kernel-debugUpgrade kernel-debuginfo-common | Dec 1, 2016 | Mar 12, 2009 |
| Oracle_linux | — | Upgrade kernel | Oct 16, 2024 | Mar 12, 2009 |
| Vmsa 2009 0016 5 Updated Service Console Package Kernel | — | Upgrade VMware ESX 4.0 to build number 208167 | Sep 2, 2010 | Mar 12, 2009 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub